Case Notes

A government department posted a letter to an applicant’s obsolete address... <more>

A financial institution collected excessive personal data from outsourced staff without providing personal information collection statement and r... <more>

This case related to DPP3 – use of personal data and DPP2 – accuracy and duration of retention of personal data... <more>

This case related to DPP1 – Purpose and manner of collection of personal data, DPP2 – Accuracy and duration of retention of personal data, DPP3 –... <more>

Unencrypted documents containing personal data were sent to an incorrect email address... <more>

This case related to DDP2 – Accuracy and duration of retention of personal data, section 26 – erasure of personal data... <more>

This case related to DPP2 - Accuracy and duration of retention of personal data , Section 37 of the Ordinance... <more>

This case related to DPP2 - Accuracy and duration of retention of personal data... <more>

This case related to DPP2 - Accuracy and duration of retention of personal data, DPP6 - Access to personal data, Code of Practice on Consumer Cre... <more>

This case related to DPP2 - Accuracy and duration of retention of personal data... <more>

This case related to DPP2 - Accuracy and duration of retention of personal data, Code of Practice on Consumer Credit Data... <more>

This case related to DPP3 - Purpose and manner of collection of personal data, Accuracy and duration of retention of personal data, Information t... <more>