Personal Data (Privacy) Ordinance
What is the Personal Data (Privacy) Ordinance About?
What is the University's policy in relation to its collection, holding and use of recorded information about individuals?
How should I make a data access or correction request?
How can I get more information about the Ordinance?
What is the composition of the CUHK's Personal Data Controlling Committee?


 No. of Visitors:  
 


What is the Personal Data (Privacy) Ordinance About? 

The Personal Data (Privacy) Ordinance was brought into force in December 1996 to protect the privacy interests of individuals in relation to their personal data. Under the Ordinance, every individual has the right to request another party, e.g. a government department or a company, to confirm whether it holds his or her personal data and to request a copy of any such data.
 


What is the University's policy in relation to its collection, holding and use of recorded information about individuals? 

The CUHK as a data user undertakes to comply with the requirements of the data protection principles contained in the Ordinance and to ensure that personal data kept are accurate, securely kept and used only for the purpose for which they have been collected.

In December 1996, the University set up a Personal Data Controlling Committee to publicize the policies related to the Personal Data (Privacy) Ordinance and to oversee compliance with the Ordinance by the University, its units, appointees and members. All departments/units are required to comply with all relevant provisions of the Ordinance and observe the following six Data Protection Principles under the Ordinance in the collection, use, disclosure and retention of personal data.

Principle 1 - Purpose and Manner of Collection

This provides for the lawful and fair collection of personal data and sets out the information a data user must give to a data subject when collecting personal data from that subject.
Principle 2 - Accuracy and Duration of Retention This provides that personal data should be accurate, up-to-date and kept no longer than necessary. Principle 3 - Use of Personal Data This provides that unless the data subject gives consent otherwise personal data should be used for the purposes for which they were collected or a directly related purpose. Principle 4 - Security of Personal Data This requires appropriate security measures to be applied to personal data (including data in a form in which access to or processing of the data is not practicable). Principle 5 - Information to be Generally Available This provides for openness by data users about the kinds of personal data they hold and the main purposes for which personal data are used. Principle 6 - Access to Personal Data This provides for data subjects to have rights of access to and correction of their personal data.



How should I make a data access or correction request? 

You have the right to request access to and correction of personally identifiable information about yourself that is held by the University. If you wish to access or correct your personal data held by the University, please complete and return the Data Access/Correction Request Form to the following offices:
 
 

Personal Data Relating to Office in Charge Phone
Appointees of the University Personnel Office  2609 7286
Undergraduate Students of the University Office of Registry Services 2609 8971
Postgraduate Students of the University Graduate School Office 2609 8976
Alumni of the University Alumni Affairs Office 2609 7860
All other persons Secretariat 2696 1723


How can I get more information about the Ordinance? 

Copies of the Ordinance and information booklets issued by the Office of the Privacy Commissioner for Personal Data are available at the University Libraries, College Offices and Faculty Offices. You can also call the Office of the Privacy Commissioner for Personal Data Hotline, 2827 2827, or visit the Office's web site at http://www.pcpd.org.hk..
 
A Guide for Data Users ― No.3 ― Outline Action Plan for Complying with the Data Protection Principles: http://www.pcpd.org.hk/english/publications/guide_no3_1.html

Guidelines for Securely Managing Mobile Computing Devices and Removable Storage Media ― Information Technology Services Centre: http://www.cuhk.edu.hk/itsc/security/gpis/index.html 

Personal Data Controlling Committee 

 
Composition
Convener: Mr. Jacob Leung, Secretary of the University
Members: Mr. Terence Chan, Bursar
Mr. Eric Ng, Director of Registry Services
Mrs. Sophie Lau, Director of Personnel
Mr. Li Kai Ming, Director of Alumni Affairs Office
Mr. Thomas Tsui, Representing the Director, Information Technology Services Centre
Secretary: Ms. Michelle Chan, Secretariat