**************************************
Stringent security policies and measures are in place to protect the personal data of the e-Cert issued by the Hongkong Post Certification Authority from any unauthorised use, a spokesman for the Office of the Government Chief Information Officer said today (September 20).
In response to a newspaper report today about the safety of the personal data contained in the e-Cert, the spokesman reiterated that there was no question that the personal data would be misused by the private sector for any commercial promotional purposes.
To ensure a more efficient use of public funding and to further drive the utilisation of e-Cert, the Hongkong Post (HKP) conducted an open tendering exercise earlier this year inviting the private sector to run the e-Cert operation. The Government is still evaluating the submissions received.
Even when a bidder is successfully identified, the Postmaster General will continue to remain a recognised Certification Authority under the Electronic Transactions Ordinance. All the personal data of the e-Cert users will still be owned by the Government.
"In the course of preparing the tender exercise, the HKP has conducted a Privacy Impact Assessment to ensure that adequate security measures will be implemented by the contractor to protect the personal data privacy of e-Cert holders. The Privacy Commission was also consulted and their comments were incorporated in the terms of the tender document.
"The contractor will be allowed to use the personal data of e-Cert holders owned by the Government only when the contractor is performing its obligations under the contract for the provision of e-Cert services. If the contractor is providing any value-added services, the e-Cert holders' consent will need to be sought on whether they wish to receive information about these services.
"The contractor must also fully comply with the requirements under the Personal Data (Privacy) Ordinance, as well as the Government's information security requirements," the spokesman said.
Ends/Wednesday, September 20, 2006
Issued at HKT 18:55
NNNN
