The Office of the Privacy Commissioner for Personal Data (PCPD) arrested a 41-year-old man in the New Territories on Monday night for allegedly disclosing personal data without consent in a bid to pressure a debtor over a disputed loan.
The PCPD investigated after banners and flyers containing the victim's name, address, photo, and partially redacted Hong Kong Identity Card details appeared twice in August outside his residential estate.
The materials accused the victim of failing to repay a loan taken in 2007 for business purposes, which he had settled with interest years later.
After the original lender died in 2023, a family member demanded an additional HK$6 million in interest and exchange rate adjustments, which the victim could not pay.
The disclosure violated the Personal Data (Privacy) Ordinance.
The suspect has been released on bail pending further investigation.
Authorities reminded the public that doxxing over money disputes is illegal, escalates conflicts, and carries penalties of up to a HK$1 million fine and five years' imprisonment, especially when involving sensitive identity card information.
