Hong Kong: PCPD announces data breach incident on suspected OGCIO mobile phone theft
The Office of the Privacy Commissioner for Personal Data ('PCPD') announced, on 19 February 2020, its response to the data breach incident resulting from a suspected theft of mobile phones of the Office of the Government Chief Information Officer ('OGCIO'). In particular, the PCPD confirmed that it had received a data breach notification from the OGCIO, and is following up on the incident by way of conducting a compliance check. Furthermore, the PCPD noted that the OGCIO had already taken certain immediate remedial steps, and will attempt to contain any possible damage to data subjects affected. Lastly, the PCPD explained that there is no mandatory requirement for data breach notifications, however, organisations are encouraged to notify data breach incidents, and the OGCIO was commended for following good practice by reporting the initiative and notifying those affected without delay.
You can read the press release here.