Information Centre

The Privacy Commissioner responds to media report today that Cathay Pacific Airways Limited lawyer John Bleach believed the Commissioner had erred in law. He described the finding that cabin crews feared they would face disciplinary action as irration

Date: 23 May 2008

The Privacy Commissioner responds to media report today that "Cathay Pacific Airways Limited lawyer John Bleach believed the Commissioner had "erred in law". He described the finding that cabin crews feared they would face disciplinary action as irrational."

  1. The Privacy Commissioner for Personal Data, Mr. Roderick B Woo noted and respected the High Court's decision yesterday granting leave to Cathay Pacific Airways Limited ("Cathay") to judicially review his decision. The Commissioner maintains that his decision in Cathay's case is fair and reasonable.

  2. In late 2005, the local media reported that Cathay required its cabin crew who took long or frequent sick leave to disclose to Cathay their past medical records. After a thorough investigation, the Commissioner found that Cathay required its cabin crew to disclose their past medical records under the threat of a disciplinary process. He decided that Cathay was in breach of Data Protection Principle 1(2) as the means of collection of the personal data was unfair in the circumstances of the case. In pursuance of the power vested on him, the Commissioner served an Enforcement Notice on Cathay requiring it to cease the practice and destroy all the medical records it had collected from its employees.

  3. Dissatisfied with the Commissioner's decision, Cathay lodged an appeal with the Administrative Appeals Board. The hearing of the appeal was heard by the Board on 27 February 2008 chaired by Mr Arthur Leong Shiu-chung, GBS, a retired Court of Appeal Judge.  The decision of the Board was handed down on 2 May 2008. The Board dismissed Cathay's appeal mainly on the ground that in asking the cabin crew to consent to the disclosure of their past medical records, Cathay conveyed a message, "call it threat or information about serious consequences, put pressure on the cabin crew to consent to release his/her personal data which he/she would not otherwise agree to release."

  4. In the last few years, there is a rising trend of appeals being lodged with the Administrative Appeals Board against the Commissioner's decisions.

    Year Number of appeal cases
    2003 5
    2004 17
    2005 22
    2006 22
    2007 28

  5. The statistics shows that about 90% of the appeal cases against the Commissioner have been dismissed by the Board.

  6. The increasing number of appeals has strained the limited resources of the Commissioner's Office. The work involved in defending an appeal lodged with the Administrative Appeals Board is no less than defending a civil appeal in the Courts. The Commissioner has to prepare a statement to justify his decision and a supporting list of documents.  He is also required to serve on all the parties to the appeal copies of relevant documents and information.

  7. Appeal cases are handled internally by the Commissioner's Office although the Appellants are sometimes represented by a team of solicitors and barristers and Senior Counsel as in Cathay's appeal to the Board.

  8. When cases are brought before the Court of First Instance for judicial review, the Commissioner has to brief a barrister in private practice since his in-house solicitors do not have a right of audience.  This can often be costly.

  9. The Commissioner says "I welcome judicial scrutiny of my decisions (exception for monetary reasons) because more judicial rulings in data privacy matters do provide more guidance to all who are concerned with this important area of human right."

 

END

 

Back to top

End of Page


[Press Releases] [Speeches, Articles & Papers] [Announcement of Public Interest] [Exhibition Materials] [Other Related Websites] [Archive] [Other Resources] [On-line Self Training] [Submissions to Public Consultation] [Privacy Commissioner's response following former Deputy Commissioner's conviction] [Response to the loss of medical data by Department of Health] [Privacy Commissioner commits himself to securing patients' data] [Privacy Commissioner commences inspection against Hospital Authority] [Response to data leakage by Immigration Department] [Response to data loss by HSBC] [Privacy is Your Business International Privacy Video Competition] [Privacy Commissioner strives to promote protection of personal data privacy] [Response following former Deputy Commissioner's conviction] [The Privacy Commissioner's clarification on criminalizing data leakage] [The Privacy Commissioner responds to media report today that] [Response to data leakage by the Police] [Progress of Inspection Against Hospital Authority] [The Director of Immigration Department signed formal undertaking] [Speech by Privacy Commissioner at the special meeting of Legislative Council Panel on Home Affairs] [Response to data loss incidents by The Hongkong and Shanghai Banking Corporation Limited] [The Privacy Commissioner completes the Inspection of the Hospital Authority's Personal Data System] [Privacy Commissioner Publishes Inspection Report on Hospital Authority] [Privacy Commissioner explains recommendations on the protection of patients' data privacy] [Privacy Commissioner accepts an Undertaking by HSBC] [Privacy is Your Business International Privacy Video Competition Prize Presentation Ceremony] [Response to Judgment of judicial review application by Cathay Pacific] [Privacy Commissioner welcomes HA's effort to enhance patient data privacy] [Statement by the Privacy Commissioner Following the Judgment made in HCAL 50/2008] [PCPD received a letter from CX Flight Attendants Union] [Impact of Technology on Data Privacy] [Privacy Commissioner responds to taxi industry's proposal of installing CCTVs in taxis] [United Christian Hospital's loss of patients' data] [Privacy Commissioner hosts the 31st APPA Forum] [Privacy Commissioner urges job seekers to be careful when providing personal data] [Launch of a booklet on protection of personal data] [Investigation Report: Employer Collecting Employees' Fingerprint Data for Attendance Purpose] [The Recruitment of Deputy Privacy Commissioner (DPC)] [Response to Media Report on the Use of Fingerprint Recognition System by a School] [Privacy Commissioner Responds to Public Enquiries about the Issue of] [Investigation Report: Tutorial Centre Using a Student's Results Notice for Promotion without the Student's Consent] [Privacy Commissioner Welcomes Hospital Authority's New Measures on the Protection of Patients' Personal Data] [Investigation Report: Food Company Collecting Participants' Personal Data in Lucky Draw Activity] [Privacy Commissioner Responds to "Drug Testing Scheme for Schools"] [The need to ensure that individuals are identified by the correct personal identifiers: the case of identification of new born babies] [Public Consultation on Ordinance Review] [] [Response to Media Report on Searching for Others' Personal Data on the Internet] [Privacy Commissioner attended the 31st International Conference of Data Protection and Privacy Commissioners] [Response to Media Enquiries] [The "Value-for-money" Audit Report on PCPD issued by the Director of AuditThe] [Protective measures taken by the Hospital Authority which enhance the protection of new born babies and the accuracy of their personal data] [The Privacy Commissioner issued two investigation reports on data access request fee charged by data users and the proper handling of personal data transferred by data users to their debt collection agency] [A personal statement by Roderick Woo, the Privacy Commissioner]


[About PCPD] [The Ordinance] [Review of the Ordinance] [PCPD Activities] [Information Centre] [Privacy Zone for Youngsters]
[Publications & Videos] [Enquiries & Complaints] [Case Notes] [Contact Us] [Search] [Site Directory] [Graphical Version]
[Chinese Version]


Notice/Copyright 2001 Office of the Privacy Commissioner for Personal Data, Hong Kong. All rights reserved. Disclaimer