Privacy watchdog finds 14 eateries fail to protect customers' registration data

Local | 28 Oct 2021 4:02 pm

The privacy watchdog found 14 restaurants that failed to properly protect the registration data of customers, including providing common registration forms for customers to record their personal information for Covid tracing. 

The government currently requires customers to scan a QR code using the LeaveHomeSafe app or otherwise fill in information, including names, mobile numbers, dates and time of visits, on registration forms before entering a restaurant. 

The Office of the Privacy Commissioner for Personal Data published an investigation report on Thursday, saying that 11 restaurants were found to have used common registration forms or books, where customers can read each other's personal information. 

The 11 restaurants included: 

- Triple O’s in Pacific Place of Admiralty

- Spicy and Sour Noodle on Portland Street in Mong Kok

- Zaks in D’Deck of Discovery Bay

- The Grill Room in the L. Square in Causeway Bay

- Corner Kitchen on Tso Kung Square in Tsuen Wan

- Bond on Tung Lo Wan Road in Tai Hang

- Carnival Seafood Restaurant in Leung King Plaza in Tuen Mun

- American Seafood & Grill in Fortune City One in Shatin

- TW Yummy on Nathan Road in Yau Ma Tei

- Beef Noodle Box on Kam Ping Street in North Point 

- Ming Kee Cheung Fun on San Hong Street in Sheung Shu 

The office also found that TamJai Yunnan Mixian on Kwai Yi Road in Kwai Fong did not set up any collection box for the forms; House of Canton Restaurant in Cityplaza failed to cover the collection box at all times; and Gyuugoku on Tai Tsun Street in Tai Kok Tsui had multiple customers recording their information on single sheets of paper as common forms. 

Although the 14 restaurants have taken remedial actions, the office has decided to issue Enforcement Notices to the restaurants, asking them to implement measures to protect the registration data of customers. 

The office on the other hand reminded the restaurants to comply with the law in the collection, holding, processing and use of personal data, as well as to provide training and guidance for staff.

Search Archive

Advanced Search
December 2021

Today's Standard