Investigation Report
Published under Section 48(2) of the Personal Data (Privacy) Ordinance
(Chapter 486, Laws of Hong Kong)
Improper Collection, Retention, Use and Storage of Personal Data of Residents and Visitors by Property Management Companies
Executive Summary
Background
- Property management is closely related to citizens' daily lives. Property management bodies are indispensable to proper management of residential buildings, commercial buildings, industrial buildings, shopping malls, clubhouses and carparks. Property management involves multidisciplinary professional services, including general property management services, environmental management of properties, repair and maintenance of properties, facility management, finance and asset management, human resources management, and legal services related to properties. Such duties as visitor registration, resident card application, issuance of circulars, handling of complaints and litigation, staff management involve the processing of a massive amount of personal data.
- The Office of the Privacy Commissioner for Personal Data (PCPD) receives enquiries and complaints about the property management industry's processing of personal data from time to time. During the past five years, the PCPD received an average of more than 100 complaints against the property management industry per annum. To raise this industry's awareness of protection of residents and visitors' personal data privacy, the Privacy Commissioner for Personal Data (Commissioner) publishes this investigation report in respect of four complaints recently received by the PCPD against property management companies. These four complaints involved collection, retention and use (including disclosure) of personal data. Through this report, the Commissioner wishes to remind property management bodies to comply with the relevant
1
