Latest News

The 14th Five Year Plan indicates its clear support for Hong Kong’s development as an international Innovation and Technology (“I&T”) hub. The Innovation, Technology and Industry Bureau (“ITIB”) and the Cyberspace Administration of China (“CAC”) signed the “Memorandum of Understanding (MOU)". Under the MOU, the GBA Standard Contract is a facilitation measure formulated jointly by the ITIB and CAC on Facilitating Cross-boundary Data Flow within the GBA. Its aim is to promote the safe and orderly cross-boundary flow of personal information within the GBA.

On December 13, 2023, the Cyberspace Administration of China (“CAC”) and the Innovation, Technology and Industry Bureau of the Hong Kong Special Administrative Region (“Hong Kong”) Government (“HK ITIB”) released the Implementation Guidelines for the Cross-boundary Flow of Personal Information Within the Guangdong-Hong Kong-Macao Greater Bay Area (Mainland, Hong Kong) (“GBA Standard Contract”), effective immediately.

A California insurance broker that handles employee benefits, workers' compensation and property liability is notifying more than 1.5 million individuals about a ransomware/data exfiltration attack last August that involved health insurance information, passport numbers and Social Security numbers.

The event was held on Jan 10-11 2024; organized by Faculty of Law, co-organized by PCPD and AI & Humanity Lab; sponsors by BakerMcKenzie, Deacons, Anjie Broad - https://www.law.hku.hk/events/enhancing-personal-data-protection-in-the-age-of-artificial-intelligence/

Date: 24 January 2024

Time:  2:00pm – 5:30pm

Venue:  CPD3.41, The Jockey Club Tower,  Centennial Campus

Agenda:

13: 45  Reception

14:00 – 15:45  PwC Cybersecurity 101

15:45 – 16:00  Break

16:00 – 17:30  New World K11 Sharing

Registration:

https://hkuems1.hku.hk/hkuems/ec_hdetail.aspx?ueid=91968

Cybercriminals are using GitHub to host and distribute malicious files and redirect traffic to phishing scams, experts have warned.

Scammers are targeting multiple brands with "job offers" on Meta's social media platform, that go as far as to offer what look like legitimate job contracts to victims.

7 Recommended Data Security Measures

• Data Governance and Organisational Measures

• Risk Assessments

• Technical and Operational Security Measures

• Data Processor Management

• Remedial Actions in the Event of Data Security Incidents

• Monitoring, Evaluation and Improvement

• Other Considerations

• Reported on Dec 22 2023

• Incident happened between July 14 and 23 2023

• PHM used for data integration, analytics, care coordination, patient engagement, compliance and reporting.

Data types:

• Name

• Address

• Date of birth

• Social Security Number

• Taxpaper Identification Number

• Medical Record Number

• Medical Information

• Health Insurance information

• Billing and claims Information

GBA Standard Contract Clause GBASCC

HK Enterprise CyberSecurity Readiness Index Recorded largest-ever decline in 2023, Media statement, Survey, presentation

“In conclusion, the data leakage incident has revealed that Carousell has made fundamental errors in protecting the safety of the personal data held by this group. It is very disappointing,” Chung said.

• Reported on Oct 2022, loophole in system migration process began in Jan 2022

• Record 73% HK companies hit by cyberattacks; issue resolved in Sep 2022 but loophole had not been exploited

Data types:

• Email addresses

• Phone numbers

• Birthdays, birth months and years

• And others

“Marina Bay Sands became aware of a data security incident on 20 October 2023 involving unauthorized third-party access on 19 and 20 October 2023 to some of our customers’ loyalty programme membership data,” reads the announcement.

As of October 18, the attackers accessed 91,921 items belonging to Japanese customers (including individuals and 1,108 educational institution customers) and 35,049 records belonging to customers from 148 countries and regions outside Japan.

https://mp.weixin.qq.com/s/n7pz9Q9OU-l5M96reX7suA

香港大学留意到有社交媒体近日贴文指可以代客申请港大本科或硕士课程，并指可以低分直接录取、无需标准成绩、无雅思、托福、本科背景等要求。港大严正声明此事绝无根据，并保留权利，追究有关人士的法律责任。

香港大学在内地并没有委托任何中介机构代为招生或录取学生，也没有教授推荐非本地学生入学的所谓「内推」机制。有意报读港大的非本地人士必须向大学直接递交申请，大学亦只会考虑符合资格的申请人，择优而录。

根据港大规程，如学生被证实伪造学历，将被开除学籍。

Media Statement - The Personal Data (Privacy) (Amendment) Ordinance 2021 Takes Effect Today to Criminalise Doxxing Acts (pcpd.org.hk)