{"id":6202,"date":"2023-06-01T18:58:50","date_gmt":"2023-06-01T10:58:50","guid":{"rendered":"https:\/\/mpl.hk\/?p=6202"},"modified":"2023-08-22T17:33:52","modified_gmt":"2023-08-22T09:33:52","slug":"tech-firm-said-to-allow-data-breach-of-180000-loan-borrowers","status":"publish","type":"post","link":"https:\/\/mpl.hk\/tech-firm-said-to-allow-data-breach-of-180000-loan-borrowers\/","title":{"rendered":"Company Holding Data On 180,000 Borrowers Breached Privacy Legislation, Watchdog Says"},"content":{"rendered":"<p><em>The Privacy Commissioner for Personal Data said that the operations of credit reference platforms are currently not regulated by any financial industry-related legislation.<\/em><\/p>\n<p>A technology company which holds data on 180,000 borrowers was found to have breached privacy laws after a user reported that eight moneylending companies had reviewed his credit data without his consent, according to the city\u2019s privacy watchdog.<\/p>\n<p>The Office of the Privacy Commissioner for Personal Data (PCPD) said on Thursday that Softmedia Technology Company (Softmedia), which operates the TE Credit Reference System, failed to implement appropriate security measures to manage access to the system, contravening the Personal Data (Privacy) Ordinance.<\/p>\n<p>The PCPD sent Softmedia enforcement notices on Wednesday.<\/p>\n<aside class=\"scaip scaip-1 \">\n<div class=\"newspack_global_ad scaip-1 fixed-height\">\n<div id=\"div-gpt-ad-f470e3e1e8-0\" data-google-query-id=\"CIjUhYvx4IADFaheDwIdkasJCw\">\n<p>The TE System, set up in 2016, is a platform providing borrowers\u2019 credit data for moneylenders to refer to. The system is currently used by 680 moneylending companies and contains data on 180,000 borrowers.<\/p>\n<p>The PCPD started investigating when a complainant reported that his credit data in the TE System was accessed several times by eight moneylending companies without his knowledge or consent.<\/p>\n<p>Different moneylenders would upload data to the TE System including identity card numbers, the amount of loans applied for and records of late repayment.<\/p>\n<p>According to the PCPD, Softmedia said that it had signed the usage agreements with moneylenders, which had to gain the consent of the borrowers before checking their credit data.<\/p>\n<h2 class=\"wp-block-heading\">Credit data reviewed without consent<\/h2>\n<p>But none of the eight moneylenders could provide a proof of authorisation from the complainant to check his credit data.<\/p>\n<p>The PCPD found that moneylenders only had to pay HK$2 each time to gain an unlimited check on a borrower within five days. Softmedia would not review the proofs of consent provided by the moneylenders and allowed them to use passwords with only low security levels.<\/p>\n<p>It said Softmedia failed to implement appropriate security measures to protect personal data from unauthorised access, processing or use, contravening the principle in the ordinance on the security of personal data.<\/p>\n<p>Softmedia also did not actively delete credit data and there were many cases in which credit data still existed five years after the borrower had completed repayment, contravening the ordinance on keeping personal data longer than necessary.<\/p>\n<h2 class=\"wp-block-heading\">Enforcement notice<\/h2>\n<p>\u201cWe have issued enforcement notice to the company in question, directing them to remedy the contraventions and also to prevent the occurrence of similar contraventions in the future,\u201d said the Privacy Commissioner for Personal Data Ada Chung.<\/p>\n<p>\u201cIn particular, we ask them to delete the credit data and this involves over 50,000 credit data of those borrowers who had paid their loans more than five years ago.\u201d<\/p>\n<p><img decoding=\"async\" class=\"lazyload alignnone wp-image-6237 size-large\" src=\"https:\/\/mpl.hk\/wp-content\/uploads\/2023\/08\/0816-5-1024x729.png\" data-orig-src=\"https:\/\/mpl.hk\/wp-content\/uploads\/2023\/08\/0816-5-1024x729.png\" alt=\"\" width=\"1024\" height=\"729\" srcset=\"data:image\/svg+xml,%3Csvg%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20width%3D%271024%27%20height%3D%27729%27%20viewBox%3D%270%200%201024%20729%27%3E%3Crect%20width%3D%271024%27%20height%3D%27729%27%20fill-opacity%3D%220%22%2F%3E%3C%2Fsvg%3E\" data-srcset=\"https:\/\/mpl.hk\/wp-content\/uploads\/2023\/08\/0816-5-200x142.png 200w, https:\/\/mpl.hk\/wp-content\/uploads\/2023\/08\/0816-5-300x214.png 300w, https:\/\/mpl.hk\/wp-content\/uploads\/2023\/08\/0816-5-400x285.png 400w, https:\/\/mpl.hk\/wp-content\/uploads\/2023\/08\/0816-5-600x427.png 600w, https:\/\/mpl.hk\/wp-content\/uploads\/2023\/08\/0816-5-768x546.png 768w, https:\/\/mpl.hk\/wp-content\/uploads\/2023\/08\/0816-5-800x569.png 800w, https:\/\/mpl.hk\/wp-content\/uploads\/2023\/08\/0816-5-1024x729.png 1024w, https:\/\/mpl.hk\/wp-content\/uploads\/2023\/08\/0816-5.png 1050w\" data-sizes=\"auto\" data-orig-sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/p>\n<\/div>\n<\/div>\n<\/aside>\n<p>Chung said that the operations of credit reference platforms are currently not regulated by any financial industry-related legislation. She called for regulation which may include legislation, guidelines or licensing systems.<\/p>\n<h2 class=\"wp-block-heading\">Online shopping system<\/h2>\n<p>Aside from the investigation of the TE system, the PCPD also reviewed the privacy policies and settings of ten online shopping platforms, including HKTVmall, Taobao, Carousell, JD.COM and eBay.<\/p>\n<p>JD.COM was found not to provide options to users to indicate whether they accept advertising or promotional messages. Chung said her office would follow up to see whether JD.COM had used personal data of users without consent.<\/p>\n<p>Source: <a href=\"https:\/\/hongkongfp.com\/2023\/06\/01\/company-holding-data-on-180000-borrowers-breached-privacy-legislation-watchdog-says\/\" target=\"_blank\" rel=\"noopener\">HKFP<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Privac [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":6236,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[382],"tags":[],"class_list":["post-6202","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-licensed-money-lenders-industrial-news"],"acf":[],"lang":"en","translations":{"en":6202,"zh":6204},"pll_sync_post":[],"_links":{"self":[{"href":"https:\/\/mpl.hk\/wp-json\/wp\/v2\/posts\/6202","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mpl.hk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mpl.hk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mpl.hk\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/mpl.hk\/wp-json\/wp\/v2\/comments?post=6202"}],"version-history":[{"count":4,"href":"https:\/\/mpl.hk\/wp-json\/wp\/v2\/posts\/6202\/revisions"}],"predecessor-version":[{"id":6347,"href":"https:\/\/mpl.hk\/wp-json\/wp\/v2\/posts\/6202\/revisions\/6347"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mpl.hk\/wp-json\/wp\/v2\/media\/6236"}],"wp:attachment":[{"href":"https:\/\/mpl.hk\/wp-json\/wp\/v2\/media?parent=6202"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mpl.hk\/wp-json\/wp\/v2\/categories?post=6202"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mpl.hk\/wp-json\/wp\/v2\/tags?post=6202"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}