Case Notes

Unauthorised access to a clinical centre’s customer personal data system – DPP 4 – security of personal data... <more>

Restaurants took inadequate security measures to protect customers’ information – DPP 4 – security of personal data... <more>

Staff of a property management company disclosed the personal data of residents when using recycled paper – DPP 4 – security of personal data... <more>

A telecommunications company accepted a HKID Card that had been declared lost by a customer – DPP 4 – security of personal data... <more>

An employer posted a list containing the personal data of staff who were to undergo virus testing – DPP 4 – security of personal data... <more>

A staff member transferred personal data held by his employer to his personal computer without authorisation – DPP 4 – security of personal data... <more>

Unauthorised access of personal data held by public schools via a web-based application system – DPP 4 – security of personal data... <more>

Recruitment platform wrongfully sent out emails containing CV information – DPP 4 – security of personal data... <more>

Unauthorised circulation of confidential documents containing personal data in social media network – DPP 4 – security of personal data... <more>

Websites without secure transmission of personal data – DPP 4 – security of personal data... <more>

Travel agencies’ customer databases being hacked – DPP 4 – security of personal data... <more>

IT system containing over 11,000 unencrypted patients’ records being hacked – DPP 4 – security of personal data... <more>