While Hong Kong's privacy commissioner for personal data is pleased that most of his office's proposals were incorporated into the administration's amendments to the Personal Data Privacy Bill, he says some provisions are a step backwards. Certain proposals dealing with collection, use and sale of personal data in direct marketing--such as allowing companies to collect personal data prior to notifying consumers on how it will be used and offering them an opt-out--are insufficient in the commissioner's view. One proposal gives consumers 30 days to opt out of the sale of their personal data, which, according to the commissioner, "falls short of the strong public expectation revealed in the Octopus incident." He urges the administration to consider his comments.
If you want to comment on this post, you need to login.