The data in the Independent Police Complaints Council list could cause bank accounts to be emptied and identities stolen.
Phone banking often requires little more than a name, an identity card number and an address, all on the list.
Once a credit card statement is obtained, for example, internet shopping often requires no more than a name and a billing address. Another simple trick would be to obtain a cellular phone account under a false name and default on bills, resulting in debt collection agencies chasing the registered account holder.
Sin Chung-kai, of Legco's information technology and broadcasting panel, said there were 'hundreds of examples' of how one or two pieces of the personal data can be used.
'Your identity card number is sensitive enough, but combined with all the other information available through this list, it could create a big threat,' he said. 'Some banks use identity card numbers to authenticate receipt of credit cards.'
Security panel chairman James To Kun-sun said criminals could come up with 'all sorts of crazy ideas' to use the data.
