• Thu
  • Aug 28, 2014
  • Updated: 5:03am
CommentLetters

Respect and protect ID card numbers

PUBLISHED : Friday, 15 March, 2013, 12:00am
UPDATED : Friday, 15 March, 2013, 3:31am

I wish to respond to views expressed in your paper concerning the protection of Hong Kong identity card numbers as personal data.

First, there is a misconception that once these numbers are made public, they are not "secret" and hence warrant no protection. Keeping data confidential is not the same as protecting personal data. The latter is a fundamental right to privacy protected by the Personal Data (Privacy) Ordinance.

While personal data is used in our daily lives and not kept private at all times, its collection and use (including disclosure) are subject to protection. It is wrong to suggest that we can freely use any data that has been made public. This is analogous to environmental protection. Human beings consume the resources of the earth and cause irreversible changes to this planet. However, we are still obliged to contain the environmental problems we have created.

The provisions of the ordinance relevant to the present issue are - (1) collection limitation: data collection should be fair, necessary and not excessive in relation to a lawful purpose; and (2) use limitation: data should not be used or disclosed for any purpose other than the original purpose of data collection, or a directly related purpose.

These provisions apply to personal data kept in public registers. Hence persons collecting and using such data should ensure compliance with reference to the specific purposes for which the registers are maintained, and the purpose of their secondary use of the data.

It was argued that ID card numbers were a means of identification and should not be used for authentication. This distinction is meaningless as in real life these numbers are used for authentication. This application is particularly useful for transactions over the phone or internet as it reduces the need for face-to-face authentication. One wonders whether there are tools and means to authenticate an individual with absolute certainty but it is fair to assume businesses know best the risk of adopting ID card numbers to authenticate their customers, either singly or in combination with other identification data.

There was an appeal to the public to openly disclose their ID card numbers to prove that they were valueless means of authentication. This was an irresponsible act. It encourages more face-to-face authentication, to the detriment of personal convenience and economic efficiency.

It also enhances the risk of identity theft causing an administrative nuisance or financial loss to the affected persons.

Allan Chiang, privacy commissioner for personal data

Share

For unlimited access to:

SCMP.com SCMP Tablet Edition SCMP Mobile Edition 10-year news archive
 
 

 

This article is now closed to comments

captam
@"There was an appeal to the public to openly disclose their ID card numbers to prove that they were valueless means of authentication...... It encourages more face-to-face authentication, to the detriment of personal convenience and economic efficiency."
This view incorrect. ....... in fact it is just nonsense in terms of security considerations.
The recording of ID card numbers in banks,Government public offices and private companies has supplanted the true intention of the most important feature on these cards which is the PHOTOGRAPH. A bank teller or other front-line official dealing with members of the public (whether or not Government or a private company) is supposed to verify the identity of the person they are dealing with by comparing their facial looks with the image on the card. This is seldom done because the front-line clerks have unwisely become beholden to merely recording the ID card number. This is not a secure means of authenticating identity. Your suggestion that facial recognition should be discouraged because it is " to the detriment of personal convenience and economic efficiency." is laughable. Try telling this to the police or other security agencies. Maintaining security can never be rejected merely because it is "inconvenient" and if just telling someone a number is acceptable in your book, we may as well tell Immigration Department to stop spending millions of dollars putting highly secure photographs on passports and ID cards.
 
 
 
 
 

Login

SCMP.com Account

or