Close to 1.38 million registered for CuMask+™
In response to reports concerning the purpose of information collection and information security of the registration system, an ITB spokesperson said that during registration, citizens will need to provide their Hong Kong identity card numbers and dates of birth for the registration system to match data with the system of the Immigration Department, so as to ascertain whether the registrant is a Hong Kong resident and check against any duplicated registrations, etc. The local mobile number serves for receiving SMS messages on registration results and delivery, while the name and the local address of the main registrant serve for verifying whether the address exists and for arranging at-door delivery. The relevant purposes of information collection have been clearly displayed on the front page of the registration page for citizens to browse before registration. The text adopted in the relevant statement on the purpose of information collection is commonly used in the arrangements of personal information collection statements. The information provided by citizens in obtaining the masks will not be used by the Government for other purposes. The Government will also ensure that the retention period of the personal data is not longer than the time required for the purposes for which the data is used.
The registration system for masks operates on the government private cloud to ensure the stability and security of the system. In order to prevent intrusion and data leakage, multiple security measures have been put in place in compliance with the Government Information Technology Security Policy and Guidelines. These measures include a firewall, intrusion detection, anti-bot technology and installation of the latest anti-virus software with regular updates of virus definitions. The service has also passed an information security risk assessment and audit before launch.
The Privacy Commissioner for Personal Data has been consulted on the personal data processing arrangements of the system. The system has also passed an independent third-party privacy impact assessment to make sure that the relevant service and system comply with the Personal Data (Privacy) Ordinance (Cap 486).
Ends/Wednesday, May 6, 2020
Issued at HKT 20:04
Issued at HKT 20:04