Privacy watchdog to follow up on suspected data leak from SmartPLAY app

Hong Kong’s privacy watchdog said on Tuesday it will reach out to the Leisure and Cultural Services Department to follow up on a suspected data leak from its latest venue booking system SmartPLAY.

The move came after reports claimed that people could have access to other users’ full Chinese names simply by typing in a random English name.

Those who intended to book football pitches on the SmartPLAY app have to type in the English names of fellow players – a measure to prevent touting. The report noted that the players' full Chinese names automatically popped up during a search process in the booking system.

Francis Fong, honorary president of the Hong Kong Information Technology Federation, said such personal information could be misused for scams.

He said scammers could exploit the system and look up the contact information of these users online, before sending phishing links to proceed with their scam.

Privacy Commissioner for Personal Data Ada Chung Lai-ling said the department had informed her office of the incident in the early hours of today, informing of their follow-up measures regarding the case.

She said her office had reached out to the department this morning and will actively monitor the situation.

Responding to media enquiries, the LCSD said it has since asked the contractor to stop SmartPLAY from showing users' full Chinese names, and let users add their fellow players only after they have accepted a friend request.