PCPD - Response to Media Enquiries

In response to a media report today stating that “a database apparently from the Independent Police Complaints Council revealed highly confidential records”, the Privacy Commissioner for Personal Data, Mr. Roderick Woo, expressed his concern of the matter in light of the sensitivity of the personal data involved.

“I am very concerned about the matter because leakage of personal data relating to people who lodged formal complaints against police officers might cause serious unease or alarm to the people involved. Security control on electronic data requires special care to prevent unauthorized or accidental access to the personal data in the course of their storage or transmission.” Mr. Woo said.

From the personal data privacy perspective, of particular relevance to this matter is Data Protection Principle 4 of the Personal Data (Privacy) Ordinance (the Ordinance), which provides that data users should take all reasonably practicable steps to ensure that personal data held by them are protected against unauthorized or accidental access, processing or erasure. In Hong Kong, personal data are now often stored and transmitted electronically. Data users should implement security safeguards or precautions the level of which should reflect the seriousness of potential harm resulting from a security breach.

According to the report, the database contained details of complaints against police officers including reference numbers, dates of complaints, identity card numbers, full names and addresses of complainants. Before deciding if any contravention of the Ordinance has occurred the Commissioner needs to know whether or not adequate security measures have been taken to protect the personal data. His Office is looking into the substance of the report and will contact the relevant parties for further information.