Privacy watchdog issues New Code of Practice on Identity Card Information

The Office of the Privacy Commissioner for Personal Data (PCPD) announced on Thursday a new code of practice to ensure that companies are handling the collection of ID card information carefully to prevent leakage.

The Hong Kong identity card (ID Card) contains sensitive personal data, and the leakage of such data may lead to identity theft and the perpetration of fraud.

Hence, organizations should be particularly careful when they collect and handle data from ID Cards and ensure they comply with the relevant requirements of the Personal Data (Privacy) Ordinance.

The PCPD today issued a new version of the “Code of Practice on the Identity Card Number and other Personal Identifiers: Compliance Guide for Data Users” (the Compliance Guide) to assist organizations in complying with the requirements under the “Code of Practice on the Identity Card Number and other Personal Identifiers” in regards to the collection, accuracy, retention, use and security of ID Card numbers, copies of the ID Card and other personal identifiers.

Furthermore, the PCPD also issued a new version of the information leaflet titled “Your Identity Card Number and Your Privacy," which explains to the public how to protect their privacy concerning ID card numbers and copies in different scenarios of their daily lives. 

The Privacy Commissioner for Personal Data, Ada Chung Lai-ling, stated that different industries may need to collect ID card numbers or copies from members of the public for identity verification or security purposes in the course of the provision of services from time to time.

The PCPD has therefore issued the new Compliance Guide and the Information Leaflet so as to assist organizations in complying with regulatory requirements and enhancing the public's vigilance in better safeguarding their personal data privacy and reducing the risks of falling prey to fraudsters.