Balancing Privacy Protection and Big Data Development

The rapid development of big data and facial recognition has resulted in convenience for individuals and huge markets for corporates, but privacy is a concern. This study reviews the effectiveness of the Office of the Privacy Commissioner for Personal Data in offering protection for individuals.

Key points from respondents

Privacy

● The majority of respondents placed high value on privacy, rating it at an average of 6.66 on a scale of 0-10.

● Opinions differed concerning the balance between privacy and public interest where public health, public security, technological development and the right to information were concerned.

Work by the Office of the Privacy Commissioner for Personal Data (PCPD)

● The work of the PCPD scored 5.97 out of 10 points.

● The main reason for dissatisfaction with the PCPD, (less than 5 out of 10 points, given by 42% of respondents) was lack of monitoring and supervision of compliance.

LeaveHomeSafe* covid-19 contact tracing app

● 80.9% said they did not use the app because of concerns about privacy.

● Over half of the espondents had not yet installed the app and were either still considering (25.5%) or did not intend to use it (26.2%).

Facial recognition by CCTV or smart lampposts

● 92.5% of respondents agreed that biometric data such as fingerprints and facial images were sensitive.

● 56.6% agreed that CCTV footage for real-time monitoring should be regulated under the Personal Data (Privacy) Ordinance (PDPO).

Doxxing

● 70.8% agreed that the PCPD should be empowered to carry out criminal investigations and prosecution.

● 65.5% were in favour of criminalizing the act of doxxing.

● 59.9% agreed that the PCPD should have statutory powers to request the removal of doxxing content from social media platforms and websites.

Real-name Registration Programme for SIM Cards

● 41.8% were against legislation to introduce a Real-name Registration Programme for SIM Cards

● Major concerns included damage to privacy (65.5%) and freedom of speech (42.3%).

Ronald Chan, group convenor “We recommend that the government regulates location data collection and CCTV footage under the PDPO as well as introducing a new category of ‘sensitive personal data’, the processing of which should be subject to specific conditions.”

Jenny Liu, deputy group convenor “The government should introduce an ‘accountability principle’ for assessment and a certification scheme for high-risk projects. Furthermore, it would be advisable for the government to introduce a mechanism to allow some exemptions for startups so that they can make gradual refinements to their data privacy strategy before complying in full with PCPD supervisory requirements.”

Wisely Ngai, group member “We suggest that the government helps doxxing victims by providing access to PCPD and court order remedies. There should also be a take-down process for online content hosts to remove their liability for content. Moreover, the government should amend the PDPO before introducing legislation for a Real-name Registration Programme for SIM Cards.”

Report No.60 HKFYG Youth I.D.E.A.S. Livelihood group

Published title Balancing Privacy Protection and Big Data Development

Participants/respondents 808 Hong Kong residents aged 15-65

Interviews Experts included a former Commissioner of PDCD, the CFO of Hutchison Telecom, a journalism academic and four IT experts including an academic engineer. More details in Chinese yrc.hkfyg.org.hk/2021/05/17/yi060/

Enquiries Adam Choi 3755 7042