The Hong Kong Office of the Privacy Commissioner for Personal Data said a review of credit reference agencies' security and data retention practices found no issues after an investigation into authorized access of the credit data last year. The PCPD recommended agencies appoint data protection officers to ensure compliance, regularly review access to credit databases and other proactive measures.