Skip to content
Case Notes
Case Notes
year
--Year--
2025
2024
2023
2022
2021
2020
2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008
2007
2006
2005
2004
2003
2002
2001
2000
1999
1998
1997
Category
--Category--
Appeal case
Complaint case
Compliance case
Enquiry case
By Provisions/DPPs/COPs/Guidelines
--By Provisions/DPPs/COPs/Guidelines--
Proper Handling of Data Correction Request by Data Users
Part 9A of the Ordinance
DPP1 - Purpose and manner of collection of personal data
DPP2 - Accuracy and duration of retention of personal data
DPP3 - Use of personal data
DPP4 - Security of personal data
DPP5 - Information to be generally available
DPP6 - Access to personal data
Code of Practice on Consumer Credit Data
Code of Practice on Human Resource Management
Code of Practice on the Identity Card Number & Other Personal Identifiers
exemptions
Privacy Guidelines: Monitoring and Personal Data Privacy at Work
provisions on direct marketing
Proper Handling of Data Access Request and Charging of Data Access Request Fee by Data Users
N/A
Section 2 of the Ordinance – definition of “personal data”
Section 37 of the Ordinance
Section 38 of the Ordinance
Section 64 - disclosing personal data
Section 39 of the Ordinance
Section 26 – erasure of personal data
By Topic/Subject Matter
--By Topic/Subject Matter--
Biometrics data
Blind-ad
Complaint Handling Policy
Consumer credit data
Customer data
Data Access Request Fee
Debt collection
E-mail
Education
Election
Employment
Hong Kong Identity Card number / Hong Kong Identity Card copy
Human resources
Installation of CCTV
Internet
Jurisdiction of Personal Data (Privacy) Ordinance
Jurisdiction of the Administrative Appeals Board
Marketing
Media
Medical data
Monitoring
N/A
Personal Information Collection Statement (PICS)
Public Domain
Public register
Section 64 – disclosing personal data obtained without consent from data users
Social services
Spamming
Transfer of data outside Hong Kong
keyword:
Case No.:2026E05
New!
A bank sending promotional emails for a lucky draw to customers who had opted out of receiving direct marketing communications
... <more>
Areas of Concern:
DPP3
,
Direct Marketing
Case No.:2026E04
New!
Publishing a court judgment on social media
... <more>
Areas of Concern:
DPP3
Case No.:2026E03
New!
Are security guards at residential buildings allowed to wear “body cameras” while on duty
... <more>
Case No.:2026E02
New!
An employer requires employees to submit credit reports
... <more>
Areas of Concern:
DPP1
,
Human Resources
Case No.:2026E01
New!
A bank introduces mandatory facial recognition login for its mobile application
... <more>
Areas of Concern:
DPP1
Case No.:2025E08
Data access request made to a dental clinic
... <more>
Areas of Concern:
DPP6
Case No.:2025E07
Are residents allowed to install smart doorbell equipped with recording function
... <more>
Areas of Concern:
N/A
Case No.:2025E06
Request a credit reference agency (CRA) to delete all information held in its database
... <more>
Areas of Concern:
DPP2
,
Consumer Credit Data
Case No.:2025E05
The government department did not accept a Hong Kong Identity (HKID) Card copy with hand-written words
... <more>
Areas of Concern:
Identity Card
Case No.:2025E04
After the employee left the company, the employer published his/her departure information on a webpage
... <more>
Areas of Concern:
DPP3
,
Human Resources
Case No.:2025E03
Whether disclosing information that data subjects have themselves made publicly available on social media is allowed
... <more>
Areas of Concern:
DPP3
,
Section 2
,
Section 64
Case No.:2025E02
Seeking guidance on how to collect and use fully anonymised, non‑identifiable specimens for a retrospective study
... <more>
Areas of Concern:
DPP3
,
Exemptions
,
Section 2
1
2
3
4
5
6
7
8
9