Information Centre

Privacy Commissioner explains recommendations on the protection of patients' data privacy

Date: 29 July 2008

Privacy Commissioner explains recommendations on the protection of patients' data privacy
1.    There is wide media coverage on the inspection report ("the Report") of the Hospital Authority’s ("HA") patients' data system published by the Privacy Commissioner, Mr. Roderick B. Woo on 22 July.

2.    Mr. Woo said, "I am pleased to see that the community concerns about the recommendations on the improvement of patients’ data security made in the Report.  I am also pleased that the HA is determined to take proper security measures to minimize the risk of data leakage.  However, I notice some of my recommendations are not properly interpreted, so the following clarifications are needed."

3.    It was reported that the replacement of HKID numbers with patient's numbers might increase the risk of mismatching the identities of patients, as well as the workload of frontline staff.

The Commissioner recognizes the importance of the use of HKID card in accurate authentication of patients' identities for consultation and prescription of drugs.  To minimize the risk of intruding patients’ privacy, the Report recommends the HA to study the feasibility of abandoning the use of patients' HKID card for other purposes, e.g. medical research.

4.    At present, patients' HKID numbers are printed on appointment slips.  In fact, such practice is unnecessary because medical staff can get the data of patients by scanning the bar code on appointment slips.  With appropriate arrangement, minimizing the use of patients' HKID numbers will definitely not increase the workload of medical staff.


5.    It was commented that when the HA considered the implementation of recommendations, it should also take into account the convenience of patients.

The Report only suggests the HA how to improve the handling of patients' data.  Patients are not required to do anything extra and therefore it will not bring them any inconvenience.

6.    The Commissioner hopes that the above explanations have addressed public concern.  For a better understanding of the rationale, objectives and feasible ways of the recommendations, please read the full version of the Report.


END

 

Back to top

End of Page

[Press Releases] [Speeches, Articles & Papers] [Announcement of Public Interest] [Exhibition Materials] [Other Related Websites] [Archive] [Other Resources] [On-line Self Training] [Submissions to Public Consultation] [Privacy Commissioner's response following former Deputy Commissioner's conviction] [Response to the loss of medical data by Department of Health] [Privacy Commissioner commits himself to securing patients' data] [Privacy Commissioner commences inspection against Hospital Authority] [Response to data leakage by Immigration Department] [Response to data loss by HSBC] [Privacy is Your Business International Privacy Video Competition] [Privacy Commissioner strives to promote protection of personal data privacy] [Response following former Deputy Commissioner's conviction] [The Privacy Commissioner's clarification on criminalizing data leakage] [The Privacy Commissioner responds to media report today that] [Response to data leakage by the Police] [Progress of Inspection Against Hospital Authority] [The Director of Immigration Department signed formal undertaking] [Speech by Privacy Commissioner at the special meeting of Legislative Council Panel on Home Affairs] [Response to data loss incidents by The Hongkong and Shanghai Banking Corporation Limited] [The Privacy Commissioner completes the Inspection of the Hospital Authority's Personal Data System] [Privacy Commissioner Publishes Inspection Report on Hospital Authority] [Privacy Commissioner explains recommendations on the protection of patients' data privacy] [Privacy Commissioner accepts an Undertaking by HSBC] [Privacy is Your Business International Privacy Video Competition Prize Presentation Ceremony] [Response to Judgment of judicial review application by Cathay Pacific] [Privacy Commissioner welcomes HA's effort to enhance patient data privacy] [Statement by the Privacy Commissioner Following the Judgment made in HCAL 50/2008] [PCPD received a letter from CX Flight Attendants Union] [Impact of Technology on Data Privacy] [Privacy Commissioner responds to taxi industry's proposal of installing CCTVs in taxis] [United Christian Hospital's loss of patients' data] [Privacy Commissioner hosts the 31st APPA Forum] [Privacy Commissioner urges job seekers to be careful when providing personal data] [Launch of a booklet on protection of personal data] [Investigation Report: Employer Collecting Employees' Fingerprint Data for Attendance Purpose] [The Recruitment of Deputy Privacy Commissioner (DPC)] [Response to Media Report on the Use of Fingerprint Recognition System by a School] [Privacy Commissioner Responds to Public Enquiries about the Issue of] [Investigation Report: Tutorial Centre Using a Student's Results Notice for Promotion without the Student's Consent] [Privacy Commissioner Welcomes Hospital Authority's New Measures on the Protection of Patients' Personal Data] [Investigation Report: Food Company Collecting Participants' Personal Data in Lucky Draw Activity] [Privacy Commissioner Responds to "Drug Testing Scheme for Schools"] [The need to ensure that individuals are identified by the correct personal identifiers: the case of identification of new born babies] [Public Consultation on Ordinance Review] [] [Response to Media Report on Searching for Others' Personal Data on the Internet] [Privacy Commissioner attended the 31st International Conference of Data Protection and Privacy Commissioners] [Response to Media Enquiries] [The "Value-for-money" Audit Report on PCPD issued by the Director of AuditThe] [Protective measures taken by the Hospital Authority which enhance the protection of new born babies and the accuracy of their personal data] [The Privacy Commissioner issued two investigation reports on data access request fee charged by data users and the proper handling of personal data transferred by data users to their debt collection agency] [A personal statement by Roderick Woo, the Privacy Commissioner]

[About PCPD] [The Ordinance] [Review of the Ordinance] [PCPD Activities] [Information Centre] [Privacy Zone for Youngsters]
[Publications & Videos] [Enquiries & Complaints] [Case Notes] [Contact Us] [Search] [Site Directory] [Graphical Version]
[Chinese Version]

Notice/Copyright 2001 Office of the Privacy Commissioner for Personal Data, Hong Kong. All rights reserved. Disclaimer