China Legal Blog
Aggregated China Law Information
Immigration computers reported missing
Aggregated Source: ChinaLegalBlog.com

Police and the Office of the Privacy Commissioner for Personal Data have been notified of the suspected theft of three notebook computers used in immigration control at the Immigration Department’s airport control point.

 

According to the department’s preliminary assessment, personal data from travel documents of about 3,000 visitors are involved. No Hong Kong residents are among them.

 

The lost notebooks are part of a stand-alone computer system which is not connected to any of the department’s major computer systems.

 

Data in the notebooks has been encrypted, and log-in to the system is possible only after multiple authentication using the registered user name and password. Access to the encrypted data is highly restricted, and it is unlikely that it will be compromised.

 

The data in the computers does not include means of contact, so the department will explore how to follow up with individual affected visitors.

 

The department reset all computer system passwords and updated and replaced e-tokens. It also updated the system server settings to prevent any information uploads from the lost notebooks to other department computer systems.

 

Frontline staff have been reminded to strictly adhere to departmental guidelines on system security and practice, and step up security management of all personal data to ensure its proper handling and protection.

 

The Deputy Director of Immigration is heading up a special task force formed at the Secretary for Security’s request to conduct a comprehensive review of the security position of all mobile devices with personal data. It will submit a report to the director within three months with recommendations on how to prevent the recurrence of such an incident.

 

The department will also consult the Privacy Commissioner for Personal Data on the recommendations.

 

It takes personal data privacy protection seriously, and has laid down clear internal guidelines and a control mechanism to ensure that personal data is kept in compliance with the Personal Data (Privacy) Ordinance and other relevant laws and ordinances.

 

Secretary for Security Lai Tung-kwok expressed his concern over the suspected theft of the notebook computers, and instructed the department to fully co-operate with the Police in their investigation.