PCPD Investigates Personal Data Loss Of Electors

On June 12, the Privacy Commissioner for Personal Data ("PCPD") released an investigation report on two lost laptops containing the personal information of electors. The report concluded that the Registration and Electoral Office responsible for securing the devices violated the Data Security Principle of the Personal Data Ordinance because it "lacked the requisite awareness and vigilance expected of it in protecting personal data, rules of application and implementation of various guidelines were not clearly set out or followed, internal communication was less than effective, and [it] failed to take all reasonably practicable steps in consideration of the actual circumstances and needs to ensure that the Electors' personal data was protected from accidental loss." The PCPD issued an enforcement notice to the registration office to prevent future violations.