'The Personal Data (Privacy) Ordinance and Octopus Card System  \r'

'The Personal schooling ( concealment) regulation and devilfish Card System   melt Ka Chun 3035069794 The University of Hong Kong CCST9029 Cyberspace Crime: Technology and Ethics Dr. K. P. eats Ms. Chan Vivien Pui Shan Abstract This article is roughly the leakage of entropy of the gray whale tease company. In 2010 , Octopus sell the training of their thickenings to 6 companies for promotion and made a profit of 44 million Hong Kong dollars over 4. 5 years . In view of the case of Octopus case, this article will go through triad part to study it : technical scenery, ethical aspect and legal aspect.It will overly suggest viable suggestions. The dis-honest company led a leakage of individualized selective information: Octopus Card Company mental institution of Octopus card company According to the statistics, 95% of those between the ages of 16 and 65 have an Octopus and Octopus processes over 12 million proceedings a day. The card is accepted by more than 100 transportation service providers and 160 retailers, including 7-Eleven, Starbucks, and greens & Shop. It toilet also be apply at pay phones, photo booths, and parking garages. This reveals that the grey whale is commonly and widely use.Also implied that the leakage of ain information influences a lot of people. Technical spot In terms of technical Issue, Octopus card is a rechargeable contactless stored value smart card utilise widely in transportation and retail assembly line. How back it transfer the money without contact? It is because it used the technique of Radio Frequency Identification (RFID). We will go into deeper of the RFID. RFID is the use of a wireless non-contact system that uses radio-frequency electromagnetic fields to transfer data from a cut across wedded to an object, for the intentions of automatic identification and tracking.The Octopus card requires no battery and be powered and watch at short ranges via magnetic fields (electromagnet ic induction). The pock contains electronically stored information which potty be deal from up to several meters (yards) away. Unlike a saloon code, the tag does non need to be indoors line of sight of the takeer and whitethorn be embedded in the tracked object. RFID tags be also used in many industries. An RFID tag attached to an automobile during production can be used to track its progress through the assembly line.Pharmaceuticals can be tracked through warehouses. Livestock and pets may have tags injected, allowing positive identification of the animal. Ethical Issue In terms of the ethical issue, in that location are a few points we would like to discuss. Firstly it is whether there is too much in-person information requisite in the client pledge. The Octopus Company was questioned about if the ad hominemized information required on the client agreement was too much. The complainer claimed that the necessary information required by the scheme is rattling unspoi led name and Octopus card number.Also, the client agreement was non user-friendly, because the text was too small, almost unclear and the whole statement is too long and clumsy. just on the other hand, nowadays Hong Kong citizen are well give out their information without knowing how the information will be used. The awareness of defendion their personal data is too weak. Its always customers duty to read the whole statement no matter how not user-friendly it is because it should be themselves to protect their own covert. judicial Issue The Octopus Card Company has actually sued the Personal Data (Privacy) Ordinance.The company collected unjustified personal data for the purpose of customer trademark and it failed to take all reasonably practicable move to ensure that the applicants were explicitly informed of the classes of persons to whom the data may be transferred. Also, the company shared members personal data with third parties for fiscal gains without their consen t. The provision of data for monetary gain was not expressly stated in the Terms and Condition. This incident has actually highlighted the inadequacies of the present Ordinance as public expectation in data privacy raises, especially those in conjunction with business activities.Therefore, the authorities has amended the ordinance in 2012 to protect data users right. Six data protection principles: article of belief 1 †purpose and manner of collection of personal data article of belief 2 †accuracy and term of retention of personal data Principle 3 †use of personal data Principle 4 †security of personal data Principle 5 †information to be generally available Principle 6 †access to personal data DPP1 and DPP3 are violated. Since the octopus company sold the data of their clients, the purpose of collection of personal data is different from what the pubic thought about.Also, there is no direct cerebrate to octopus system when the data is used. Therefo re, use of personal data is also violated. Suggestion There are four suggestions which can help protecting personal data. First and foremost, due to the little attention to protect their own information of the citizen, the government should educate the citizen to habitus up the idea of protecting personal data. Second, improvements can be made in the security and privacy systems of companies to ensure low unintended data leakage. Third, government should make the rule stricter and clearer in order not to let the companies escape the law.Forth, set up a department to investigate among the all the companies to check whether there is similar issue happened. In conclusion, it is a fact that once our personal data has been leaked, it is not doable to stop the spreading of the data. It is both, companies, government and citizens’ responsibilities to protect our personal data. Reference Websites: http://healthymethod. blogspot. hk/2011/06/octopus-card-scandal. html http://www. cd eclips. com/en/hongkong/fullstory. html? id=49560 http://www. octopus. com. k/octopus-for-businesses/benefits-for-your-business/en/index. html A video of RFID <http://www. explania. com/en/channels/technology/detail/what-is-rfid> PDPO<http://www. legislation. gov. hk/blis_pdf. nsf/6799165D2FEE3FA94825755E0033E532/B4DF8B4125C4214D482575EF000EC5FF/$FILE/CAP_486_e_b5. pdf> Newspapers: The Standard, ‘Legco test alert in Octopus data row’ 2/8/2010 The Standard, ‘Octopus chief tight-lipped as public says time to go’ 4/8/2010 Articles: Richard MacManus (2 September 2009). â€Å"Hong Kongs Octopus Card: Utility Outweighs Privacy Concerns”.\r\n'