In the wake of recent allegations, Octopus Holdings has admitted it shared the personal information of 2.4 million customers
with two merchant partners involved in its rewards program, The Standard reports. Prior to the announcement, the Hong Kong
Monetary Authority (HKMA) had issued a statement differentiating between the Octopus Card (OCL), which is "an authorised
institution under the Banking Ordinance and supervised by the HKMA" and Octopus Rewards (ORL), which is not, stating it would
"collect from OCL further information about its dealings with ORL." Legislator Wong Kwok-hing has asked how much data was
provided to other organisations, while Privacy Commissioner Roderick Woo Bun is investigating whether the company violated the Personal Data Ordinance. Octopus Holdings is setting up a special committee to review its protection policy, the report states, and is taking additional steps to protect customer data.
If you want to comment on this post, you need to login.