Case Notes

A data access request made by a customer to a dental clinic... <more>

A bank mistakenly treated a customer’s request to change the office address as a change of correspondence address... <more>

A property management company posted a notice containing a tenant’s personal data on the door of his residence... <more>

Insurance company imposed excessive fee on a customer’s data access request... <more>

A social service organisation mistakenly delivered letters to someone other than the addressee... <more>

Collection and Disclosure of the Personal Data of Lucky Draw Participants... <more>

A bedding products company mandated online shoppers to consent to the use of personal data for direct marketing purposes... <more>

A government department posted a letter to an applicant’s obsolete address... <more>

A financial institution collected excessive personal data from outsourced staff without providing personal information collection statement and r... <more>

An online store sent invoices containing personal data to customers via unencrypted weblinks... <more>

Mobile Wi-Fi device rental company took inadequate security measures to protect customers’ personal data... <more>

Collection of copies of Hong Kong Identity Card and bank card from a job applicant by an employer prior to the acceptance of employment offer... <more>