Based on the description above, answer the following questions. You must answer each question separately.Your answers must be based on the Hong Kong context and the requirements under the Personal Data (Privacy) Ordinance (PDPO) as if this arrangement is taking place in Hong Kong. You should also assume that the COVID 19 pandemic is so severe that voluntary measures of any kind cannot be relied upon.
- (18%) Using the PDPO, analyse and describe the personal data involved in the arrangement, covering the following points:
- What would be considered as personal data in this arrangement, and why?
- List the specific types of personal data involved in this arrangement
- List the source (i.e. whose personal data and the channel of collection) of each type of personal data
- List the purposes (including those clearly stated in the question and those that are implied) for the collection/processing for each type of personal data
- (55%) Using the six Data Protection Principles (DPPS) under the PDPO, identify possible privacy concerns and explain what they are. Among all things, please note that:
- the answer should follow the order of the six DPPS, and divided into six sections
- the answer should explain what each DPP is, how it applies and what the relevance to the situation is
- the answer should include suggestion(s) on how each identified concern should be addressed/corrected
- For DPP1 analysis, you should analyse it using the purposes stated under 4. i, 4. ii and 4. iiiunder ‘the case’
- For DD2 to DPP6 analysis, you should analyse it based on all the available information
- (15%) Under the PDPO, does the government have the right to sell the anonymised location data described? Explain your argument and also what steps under the PDPO can be carried out to consider selling the anonymised data.
- (12%) Under the PDPO, does the government have the right to change the use of the database and allows unlimited access by the police department? Explain your arguments and also what steps and measures under the PDPO can be done to address any concerns identified.
0 comments