Privacy Commissioner
probes the release of examination results by a university
1. The Privacy Commissioner for Personal Data Mr.
Roderick B. Woo has taken prompt action to investigate the allegation
of release of examination results mistakenly by a local university.
2. Mr Woo said, “I am very concerned about the
management, use and release of personal data of public organizations
which hold large amount of personal data. In view of public
concern about the incident, my office has commenced a self-initiated
investigation.”
3. We have invited the party under investigation for
an interview to understand the involvement of personal data during the
handling and release of examination results so as to ensure compliance
with the Personal Data (Privacy) Ordinance.
4. According to the media, errors occurred when a
local university sent out examination results to students via its
e-mail system. As a result, students’ examination results were
accessed by unintended recipients.
5. Data Protection Principle 4 of the Personal Data
(Privacy) Ordinance is relevant to the case. It provides that a
data user shall ensure that personal data held by him are protected
against unauthorized or accidental access, processing, erasure or other
use having particular regard to the kind of data and the harm that
could result if any of those things should occur.
6. The investigation will continue.
Back
to top