2. Are you asked to provide your personal data on-line?
If yes, you should do the following before you press the "submit" button to provide your personal data via an on-line form, or send an e-mail containing your personal data.
Look for identity details of the web site. It is possible that a site appears to be at an electronic address that does not belong to it. Visit the "About the Organization" page and check the organization's identity details such as its name, physical location, and contact telephone/fax number. An organization may be considered as using unfair means to collect personal data if it does not disclose its identity (in which case it might have contravened data protection principle 1).
Search for an on-line notification of a Personal Information Collection (PIC) statement. The PIC statement is a means by which the site should inform you:
- how your data are to be used;
- to what other parties they may transfer your data;
- your right to request a copy of your personal data and correct any errors; and
- who should be contacted for such requests.
Under the Ordinance, organizations in Hong Kong must provide this information at or before the time they collect personal data from you.