Catering veteran pushes sector to end collection of personal data

Ayra Wang

Restaurants are not encouraged to collect customers' personal information when they are ordering food using QR codes or mobile applications, a catering veteran said.

The collection of personal information through these methods has become a concern despite it having helped alleviate labor shortages and providing convenience for customers.

Simon Wong Ka-wo, president of the Hong Kong Federation of Restaurants and Related Trades, highly recommends against it, although he acknowledges that some restaurants do so to improve operations and reduce waste.

Wong said customers have the right to refuse to provide personal data if they feel their privacy is being intruded upon during the ordering process.

He also said some restaurants inform customers that the data collected will only be used for internal purposes and promotional activities, giving customers a positive impression.

Wong further expresses his opposition to collecting customers' data for direct marketing, adding that "many restaurants purchase mobile apps from third-party companies and may not be fully aware of how these apps handle customer data".

"It is often the app company, rather than the restaurant itself, that sells customers' data to other parties for marketing purposes," he said.

Wong urged the government to provide clearer guidelines and legislation to address the issue.

These concerns have arisen following a warning from the Office of the Privacy Commissioner for Personal Data, which found that 10 out of 60 local restaurants visited between November and January collected personal data through mobile apps for direct marketing.

One restaurant, Satay King, was found to be collecting personal data, including transaction records, without consent.

The Privacy Commissioner for Personal Data, Ada Chung Lai-ling, said that Satay King has violated privacy laws, and an investigation has been initiated.

"Restaurants must obtain customers' consent before they collect personal data, otherwise, they will violate the law," she said.

She also called on restaurants to specify whether the data collected will be shared with third parties in privacy policies or information collection statements.