top of page

Privacy Policy

"Personal Data (Privacy) Ordinance" Notice and Zhuyin Foundation's corresponding measures suggestions

  • Guidelines for data users and data subjects:

    • Data users: Personal data must be processed and used in accordance with the data protection principles set out in Schedule 1 to the Ordinance (see next page) and with the fair information practices prescribed therein.

    • Data Subjects: The Regulations Confer Certain Rights on Data Subjects

  • The right to request data users to inform them whether their personal data is held.

  • The right to request a copy of the data from the data user, and the right to request correction of the data. Fees for copies of materials must not be excessive.

  • The data subject may lodge a complaint with the Privacy Commissioner for Personal Data about the alleged breach of the Ordinance, or seek compensation from the data user for any damages suffered thereby through civil proceedings.

  • Explained: What is Personal Data

    • Personal data means data relating to an identifiable living person, including expressions of opinion.

    • The data is stored in records and can be processed or retrieved.

    • According to the interpretation of the Ordinance, only recorded data is personal data.

    • Apart from written documents, other forms of personal data, such as personal data stored in audio and video tapes, are also governed by the Ordinance.

    • Personal information frequently used in daily life includes personal name, telephone number, fax number, address, gender, age, occupation, marital status, salary and financial status, religious belief, nationality, photo, ID number, medical record and employment Records, including information such as performance appraisals.

Data Protection Principles (Schedule 1 to the Ordinance)

Principle 1 | Specify that personal data must be collected in a lawful and fair manner, and set out the information that a data user should provide to a data subject when collecting personal data from the data subject.

Principle 2 | It stipulates that the personal data retained must be accurate and up-to-date, and the retention period shall not exceed actual needs.

Principle 3 | Specify that personal data may only be used for the purpose stated at the time of collection or for purposes directly related to it, unless the data subject has given consent.

Principle 4 | Prescribes that appropriate security measures should be taken to protect personal data.

Principle 5 | Information must be generally available to specify the categories of personal data held by a prescribed data user and the principal purposes for which such personal data are to be disclosed.

Principle 6 | Provides that data subjects have the right to access and correct their personal data.

​

(The above information comes from the website of the "Hong Kong Office of the Privacy Commissioner for Personal Data". For details, please visit the website: http://www.pco.org.hk/cindex.html)

bottom of page