The following paragraph seeks
to give practical effect to section 26 and to the Personal
Data Duration of Retention Principle (Data Protection Principle
2(2)):
2.5
Without prejudice to the general requirements of the
Ordinance:
2.5.1
Where paragraph 2.3.4.2 applies, the data user
should take all reasonably practicable steps to
erase the record of an identity card number upon
the holder of the identity card leaving the premises
or ceasing to have the use of the equipment concerned
(as the case may be), or within a reasonable time
thereafter; and
2.5.2
where paragraph
2.3.4.3 applies, the data user should take all reasonably
practicable steps to erase the record of an identity
card number upon the holder of the identity card
ceasing to have custody or control of the property
concerned, or within a reasonable time thereafter.