The Personal Data (Privacy) Ordinance and Octopus Card System ÂÂ

The Personal discipline (Privacy) commandment and devilfish beleaguer System Lam Ka Chun 3035069794 The University of Hong Kong CCST9029 Cyberspace aversion Technology and Ethics Dr. K. P. Chow Ms. Chan Vivien Pui Shan Abstract This article is more or less the outpouring of information of the manta twit troupe. In 2010 , Octopus sold the information of their clients to 6 companies for promotion and made a profit of 44 zillion Hong Kong dollars over 4. 5 years . In view of the case of Octopus case, this article will go through three part to training it technical aspect, ethical aspect and legal aspect.It will excessively intimate feasible suggestions. The dis-honest company led a leakage of private selective information Octopus control board Company Introduction of Octopus card company According to the statistics, 95% of those between the ages of 16 and 65 have an Octopus and Octopus processes over 12 million transactions a day. The card is accepted by more than 100 transportation service providers and one hundred sixty retailers, including 7-Eleven, Starbucks, and Park & Shop. It screwing also be use at compensation phones, photo booths, and parking garages. This reveals that the gray whale is commonly and widely used.Also implied that the leakage of individualised info influences a lot of people. Technical Issue In wrong of technical Issue, Octopus card is a rechargeable contactless stored value keen card used widely in transportation and retail business. How can it transfer the money without contact? It is because it used the technique of Radio oftennessIdentification (RFID). We will go into deeper of the RFID. RFID is the use of a wireless non-contact brass that uses radio-frequency electromagnetic fields to transfer data from a drop back affiliated to an object, for the purposes of automatic identification and tracking.The Octopus card requires no battery and are powered and read at short ranges via magnetic fields (electromag netic induction). The tag contains electronic altogethery stored information which can be read from up to some(prenominal) meters (yards) away. Unlike a bar code, the tag does not need to be within line of sight of the reader and may be enter in the bring in object. RFID tags are also used in numerous industries. An RFID tag attached to an automobile during production can be used to track its progress through the assembly line.Pharmaceuticals can be tracked through warehouses. Livestock and pets may have tags injected, allowing positive identification of the animal. estimable Issue In terms of the ethical issue, there are a few points we would like to discuss. Firstly it is whether there is withal much in-person information required in the client agreement. The Octopus Company was questioned about if the personalised information required on the client agreement was in like manner much. The complainer claimed that the necessary information required by the scheme is genuinel y just name and Octopus card number.Also, the client agreement was not user-friendly, because the text was too small, almost unreadable and the whole statement is too long and clumsy. But on the other hand, nowadays Hong Kong citizen are substantially give out their information without knowing how the information will be used. The awareness of protection their personal data is too weak. Its always customers handicraft to read the whole statement no matter how not user-friendly it is because it should be themselves to protect their give concealing. Legal Issue The Octopus Card Company has actually sued the Personal Data (Privacy) Ordinance.The company collected extravagant personal data for the purpose of customer authentication and it failed to take all reasonably practicable steps to ensure that the applicants were explicitly informed of the classes of persons to whom the data may be transferred. Also, the company shared members personal data with tierce parties for monetary gains without their consent. The provision of data for monetary gain was not expressly stated in the Terms and Condition. This incident has actually highlighted the inadequacies of the present Ordinance as in the public eye(predicate) expectation in data privacy raises, oddly those in conjunction with business activities.Therefore, the government has amended the ordinance in 2012 to protect data users right. Six data protection principles Principle 1 purpose and manner of collection of personal data Principle 2 accuracy and duration of retention of personal data Principle 3 use of personal data Principle 4 security of personal data Principle 5 information to be generally getable Principle 6 access to personal data DPP1 and DPP3 are violated. Since the octopus company sold the data of their clients, the purpose of collection of personal data is different from what the pubic thought about.Also, there is no direct related to to octopus system when the data is used. Therefore, use of personal data is also violated. Suggestion There are four suggestions which can help defend personal data. First and foremost, due to the little attention to protect their own information of the citizen, the government should educate the citizen to build up the idea of defend personal data. Second, improvements can be made in the security and privacy systems of companies to ensure low unintended data leakage. Third, government should make the hulk stricter and clearer in order not to let the companies escape the law.Forth, set up a department to investigate among the all the companies to check whether there is alike issue happened. In conclusion, it is a fact that once our personal data has been leaked, it is not possible to stop the spreading of the data. It is both, companies, government and citizens responsibilities to protect our personal data. Reference Websites http//healthymethod. blogspot. hk/2011/06/octopus-card-scandal. hypertext markup language http//www. cdec lips. com/en/hongkong/fullstory. html? id=49560 http//www. octopus. com. k/octopus-for-businesses/benefits-for-your-business/en/index. html A video of RFID PDPO Newspapers The Standard, Legco probe alert in Octopus data row 2/8/2010 The Standard, Octopus chief tight-lipped as public says time to go 4/8/2010 Articles Richard MacManus (2 September 2009). Hong Kongs Octopus Card Utility Outweighs Privacy Concerns.