Stevenson, Wong & Co.
(中文) 2020年9月17日下午，本所合伙人，诉讼及争议解决部主管徐凯怡律师受Legal Plus邀请，担任「Legal Plus 意见领袖线上论坛：国际仲裁意见领袖线上论坛」 (Legal Plus Leaders Web-forums: International Arbitration Leaders Web-forum) 演说嘉宾。
本次线上论坛由Legal Plus主办，徐律师与来自亚洲、欧洲和中东地区的法律从业者、企业法总等参会人士分享如何运用内地与香港仲裁互助保全安排，最大化地收回债权利益 (Maximizing Recovery Through the Use of PRC-Hong Kong Interim Measures Arrangement in International Arbitration)。
如阁下想了解更多详情，请联络本所合伙人徐凯怡律师 (heidi.chui@sw-hk.com)。
(中文) 2020年9月20日下午，本所合伙人，诉讼及争议解决部主管徐凯怡律师受中国国际经济贸易仲裁委员会香港仲裁中心 (CIETAC Hong Kong Arbitration Center) 邀请，担任2020年中国仲裁周“中国-东盟国家投资和争议解决 实务法律问题研讨会”主持人。
本次研讨会由贸仲香港仲裁中心及APCCA主办，香港律政司司长郑若骅、贸仲副主任兼秘书长王承杰致欢迎辞。随后徐律师和来自内地、新加坡和澳大利亚的演说嘉宾们一同就 “贸易和投资中的法律合规和风险规避” (Legal Compliance and Risk Avoidance in Trade and Investment) 的话题展开探讨。
如阁下想了解更多详情，请联络本所合伙人徐凯怡律师 (heidi.chui@sw-hk.com)。
Recent efforts for the testing and tracing of COVID-19 have raised growing concerns over data protection and personal privacy in the wake of the global pandemic. The aim of these measures is to help us navigate the difficult so that we can return to normal life as soon as possible, but at what cost? With reference to several media statements and responses issued by the Privacy Commissioner for Personal Data, Hong Kong (the “Privacy Commissioner”) since the outbreak of the COVID-19 pandemic, this article attempts to summarise what the Personal Data (Privacy) Ordinance (the “PDPO”) expects when it comes to balancing privacy right and public health and safety.
PDPO at a glance
The PDPO is applicable to both the private and the public sectors. The general position is that all data users shall comply with the six Data Protection Principles (“DPP”) when handling personal data:
1. Collection Purpose & Means
2. Accuracy & Retention
3. Use
4. Security
5. Openness
6. Data Access & Correction
Privacy vs. health and life
While data privacy is an important right, the interests protected under the PDPO have to be balanced against other important rights or public interest. The PDPO provides a number of exemptions from some compliance requirements under particular circumstances. When it comes to compelling public health concern, the following are applicable:
Privacy issues considered
1. Mandatory quarantine measures
Location data of persons under quarantine would be collected by the Government so as to monitor whether they are complying with the quarantine conditions. Prior to the collection of such data and in accordance with DPP1, the purpose and manner of collection will be explained to the persons under quarantine and their consents will be obtained for access to their relevant personal data and certain information to be transmitted from their mobile devices (e.g. data involved in the use of video calls).
The Privacy Commissioner also brought to the public’s attention on section 59(1) of the PDPO, which provides an exemption for DPP3, i.e. use of data, and states that in circumstances where the application of the restrictions on the use of data would be likely to cause serious harm to the physical or mental health of the data subject or any other individual, the data user may disclose personal data relating to the physical or mental health of the data subject to a third party without the consent of the data subject.
2. Universal community testing programme
Personal data (including names, Hong Kong Identity Card numbers / birth registration numbers and local mobile phone numbers) will be collected under the programme. The use of such personal data is subject to the consent of the participants and is consistent with the principles of purpose specification and use limitation. Personal data will be handled on a “need-to-know” basis and erased one month after completion of the programme.
3. The use of information on social media for tracking potential carriers of COVID-19
Though the general rule is that personal data obtained from the social media is also regulated by the PDPO, it is subject to competing rights or interests such as the right to life. In accordance with section 59(2) of the PDPO, where the application of the restrictions on the use of data would be likely to cause serious harm to the physical or mental health of the data subject or any other individual, personal data relating to the identity or location of the data subject may be disclosed to a third party without the consent of the data subject. Therefore, if persons are suspected of having close contacts with infected persons, it would be in the public interest to closely monitor their whereabouts, including the venues and the persons that they have visited and contacted, with the aim to control further spread of COVID-19 in the community.
There are sufficient legal and justifiable bases on which the Government may collect and use information obtainable offline or online with the aid of devices, applications, software or super computers with a view to tracking potential COVID-19 carriers or patients in the interests of both the individuals concerned and the public.
4. Temperature collection at work
Employers have legal and corporate responsibility to protect the health of its employees and visitors that it is generally justifiable for employers to collect temperature measurements or limited medical symptoms of COVID-19 information of employees and visitors solely for the purposes of protecting the health of those individuals. Employers should spell out to their employees how the data collected will be handled. A self-reporting system is preferred to an across-the-board mandatory system where health data is collected indiscriminately.
It is reasonable and justifiable for employers to collect temperature measurements or medical condition of employees and visitors. Employers can require employees to complete declaration on personal health data as long as the notification requirement under the PDPO (by providing a Personal Information Collection Statement (PICS) to inform employees of the data collected and the purposes, and the classes of persons to whom their data may be transferred) is complied with. In accordance with section 59 of the PDPO, employers can disclose the identity, health and location data of individuals to the Government or health authorities solely for the purposes of tracking down and treating the infected and tracing their close contacts when pressing needs arise.
5. Work-from-home arrangements
Personal data protection should not hinder the work-from-home arrangements, but employers and employees should exercise extra caution because of the transfer and use of documents and data away from the professionally managed work environment.
Whilst the employers should put into place information systems to ensure secure transmission of data from work to home, the employees should be vigilant about the security of internet connection to prevent data leakage.
6. Temperature/personal data collection at premises
The Privacy Commissioner has pointed out that collection of personal data and/or temperature data by owners of premises is justifiable. They, however, should endeavour to raise the transparency and interpretability of the use of the personal data obtained. Again, the Privacy Commissioner pointed out that privacy right is not an absolute right and the right to life and public interest precede it. Any personal data collected should be necessary, appropriate and proportionate.
To comply with the DPPs, the owners of premises should ensure visitors are informed of the purpose of data collection and let them to decide whether to allow the collection of their biometric data. If visitors refuse to provide information, the owners of premises may refuse entry to protect the health of its staff and others.
Conclusion
Facing the pandemic, it is important to bear in mind that personal data privacy has not been neglected altogether. However, data protection principles should not hinder measures taken to fight COVID-19. The measures undertaken by the Government in balancing privacy right and public health needs have been endorsed by the Privacy Commissioner. Business owners and individuals should continue to observe the DPPs as far as practicable and display best efforts in complying with the requirements under the PDPO.
For more information or advice on privacy issues, please contact our Terence Lau or Elly Woo.
This newsletter is for information purpose only. Its content does not constitute legal advice and shall not be treated as such. Stevenson, Wong & Co. will not be liable to you in respect of any special, indirect or consequential loss or damage.
We are delighted to announce that our firm has once again been recognised in 13 practice areas/sectors in Asialaw Profiles 2021. This is the 4th consecutive year that Stevenson, Wong & Co. has been listed in Asialaw Profiles.
About Stevenson, Wong & Co.
Founded in 1978, Stevenson, Wong & Co. is a forward-looking, full-service law firm with over 170 experienced lawyers and staff. As the associated firm with one of the nation’s largest full-service law firms, AllBright Law Offices, and one of the founding members of INTERLAW, Stevenson, Wong & Co. connects China to the world and supports clients facing a variety of business and legal issues with effective solutions.
About Asialaw Profiles
Asialaw Profile provides a guide to Asia-Pacific’s leading domestic and regional law firms. It is researched, written and edited by a team of journalists based in the region and a good reference for both the legal industry and businesses.
Please contact Mr. Willy Cheng, Mr. Hank Lo or Ms. Catherine Por for any enquiries or further information.
On 17 September 2020, our firm’s senior associate Mr. Gordon Tsang and senior manager Dr. Rain Huang from commercial and corporate finance department were invited by Lex Omnibus to give a CPD course with the topic of “Rules and Regulations on IPO” to lawyers and in-house counsel.
Our firm’s senior associate Mr. Gordon Tsang (Left) and senior manager of commercial and corporate finance department Dr. Rain Huang (Right)
During the 3-hour course, Gordon and Rain gave an in-depth introduction of the rules and practice of Hong Kong’s IPO market and the disclosure of connected transactions. They also analysed the fundamentals of the commercial requirements, legal implications and explained the three pathways of homecoming listings of China concept stocks on the HKEX.
Due to the Covid-19 outbreak, the course was delivered via a webinar and positive feedback was received from the audience.
Please contact Mr. Gordon Tsang for any enquiries or further information about this seminar.
Our Partner and head of Litigation and Disputes Resolution Department, Ms. Heidi Chui, has been recognized as a Distinguished Practitioner in Dispute Resolution by Asialaw Leading Lawyers for 2 consecutive years.
Lawyers who have been recognised as Distinguished Practitioner are highly regarded by their peers and possess a strong record and positive client feedback.
Our partner Heidi commented: “I am truly honoured to be recognized by Asialaw Profiles again. I would like to thank our clients for their support and my team for their hard work in the past year. Our team will continue to assist our clients and provide timely solutions to resolve problems encountered by them.”
About Heidi Chui
Heidi is the head of Litigation and Dispute Resolution Department and Banking and Finance Department. She has served as the internal legal advisor of several Chinese banks.
Heidi specializes in commercial litigation, arbitration, insolvency, restructuring, banking and finance, employment law and regulatory enforcement. She has extensive international and cross-border experiences in advising liquidators, receivers, official receivers, creditors and other professionals in charge of insolvency and bankruptcy matters in relation to debt restructuring and cross-border asset tracing. She also acts for banks, borrowers, insurance companies, property management companies, funds, listed companies and financial institutions.
As an extensive legal author and conference speaker, Heidi is frequently invited to share her experiences and insights at different legal talks and seminars. She is the co-author of The Hong Kong Encyclopaedia of Forms and Precedents – Insurance Volume and Hong Kong Chapter of International Insurance Law and Regulation on Thomson Reuters.
Heidi is also an Arbitrator (FCIArb), Mediator, China Appointed Attesting Officer and Civil Celebrant of Marriages.
About Asialaw Leading Lawyers
Asialaw Leading Lawyers identifies the leading individuals in the region, providing an essential source of information for corporate executives, in-house counsel and anyone seeking legal advice and services. Distinguished practitioners are Lawyers who are highly regarded by their peers and possess a strong record and positive client feedback.
Please contact Ms. Heidi Chui (heidichui.office@sw-hk.com) for any enquiries or further information.