The Personal Data (Privacy) Ordinance and Octopus Card System ÂÂ

The Personal Data (Privacy) Ordinance and devilfish humor System Lam Ka Chun 3035069794 The University of Hong Kong CCST9029 Cyberspace Crime Technology and Ethics Dr. K. P. Chow Ms. Chan Vivien Pui Shan Abstract This article is active the leakage of entropy of the Octopus flier community. In 2010 , Octopus sold the information of their lymph glands to 6 companies for publicity and made a profit of 44 million Hong Kong dollars over 4. 5 years . In discover of the case of Octopus case, this article will go through three part to study it good aspect, ethical aspect and legal aspect.It will also suggest feasible suggestions. The dis-honest company led a leakage of private data Octopus Card companion Introduction of Octopus card company According to the statistics, 95% of those between the ages of 16 and 65 have an Octopus and Octopus processes over 12 million transactions a day. The card is accepted by more than 100 transportation avail providers and 160 retailers, includin g 7-Eleven, Starbucks, and Park & Shop. It can also be employ at pay phones, photo booths, and place garages. This reveals that the octopus is commonly and widely utilisationd.Also implied that the leakage of personal data influences a lot of people. Technical progeny In terms of technical Issue, Octopus card is a rechargeable contactless stored value smart card used widely in transportation and retail business. How can it transfer the money without contact? It is because it used the technique of RadioFrequencyIdentification (RFID). We will go into deeper of the RFID. RFID is the use of a wireless non-contact strategy that uses radio-frequency electromagnetic palm to transfer data from a grade attached to an object, for the purposes of automatic identification and tracking.The Octopus card requires no battery and are powered and read at short ranges via magnetic fields (electromagnetic induction). The tag contains electronically stored information which can be read from up to several meters (yards) away. Unlike a bar code, the tag does not need to be within line of sight of the reader and may be embedded in the tracked object. RFID tags are also used in many industries. An RFID tag attached to an automobile during production can be used to track its progress through the aggregation line.Pharmaceuticals can be tracked through warehouses. Livestock and pets may have tags injected, allowing positive identification of the animal. respectable Issue In terms of the ethical issue, there are a few points we would like to discuss. first of all it is whether there is too much personal information required in the client agreement. The Octopus Company was questioned about if the personal information required on the client agreement was too much. The complainer claimed that the required information required by the scheme is actually just name and Octopus card number.Also, the client agreement was not user-friendly, because the text was too small, almost unreada ble and the whole statement is too foresighted and clumsy. But on the other hand, nowadays Hong Kong citizen are easily give out their information without conditioned how the information will be used. The awareness of protection their personal data is too weak. Its always customers trading to read the whole statement no matter how not user-friendly it is because it should be themselves to protect their avow privacy. Legal Issue The Octopus Card Company has actually sued the Personal Data (Privacy) Ordinance.The company stash away excessive personal data for the purpose of customer authentication and it failed to take all reasonably feasible steps to ensure that the applicants were explicitly informed of the classes of persons to whom the data may be transferred. Also, the company shared members personal data with third parties for monetary gains without their consent. The provision of data for monetary gain was not expressly give tongue to in the Terms and Condition. This inc ident has actually highlighted the inadequacies of the present Ordinance as public expectation in data privacy raises, especially those in conjunction with business activities.Therefore, the government has amended the ordinance in 2012 to protect data users right. Six data protection principles doctrine 1 purpose and manner of entreaty of personal data rationale 2 accuracy and duration of retention of personal data Principle 3 use of personal data Principle 4 security department of personal data Principle 5 information to be generally available Principle 6 access to personal data DPP1 and DPP3 are violated. Since the octopus company sold the data of their clients, the purpose of collection of personal data is disparate from what the pubic thought about.Also, there is no direct related to octopus system when the data is used. Therefore, use of personal data is also violated. Suggestion There are four suggestions which can help protect personal data. First and foremost, due to the little attention to protect their own information of the citizen, the government should set up the citizen to build up the idea of protecting personal data. Second, improvements can be made in the security and privacy systems of companies to ensure low unintended data leakage. Third, government should make the rule stricter and clearer in shape not to let the companies escape the law.Forth, set up a department to investigate among the all the companies to yellow journalism whether there is similar issue happened. In conclusion, it is a fact that once our personal data has been leaked, it is not possible to stop the spreading of the data. It is both, companies, government and citizens responsibilities to protect our personal data. Reference Websites http//healthymethod. blogspot. hk/2011/06/octopus-card-scandal. hypertext markup language http//www. cdeclips. com/en/hongkong/fullstory. html? id=49560 http//www. octopus. com. k/octopus-for-businesses/benefits-for-your-busine ss/en/index. html A video of RFID PDPO Newspapers The Standard, Legco probe alert in Octopus data row 2/8/2010 The Standard, Octopus chief tight-lipped as public says time to go 4/8/2010 Articles Richard MacManus (2 September 2009). Hong Kongs Octopus Card Utility Outweighs Privacy Concerns.