Hong Kong Privacy Commissioner for Personal Data Allan Chiang has published guidance for organisations on the proper retention and disposal of personal data. "It is important for organisations to manage personal data throughout its lifecycle, from data collection to data destruction," Chiang said. "Not all of them do a good job of determining the appropriate duration of retention of the data with due regard to the purpose of data collection and destroying it at the end of its useful life." The guidance covers legal requirements under the Personal Data (Privacy) Ordinance; outsourcing data erasure responsibilities; staff and management engagement, and risks, among other topics.
If you want to comment on this post, you need to login.