Hong Kong Ordinances

PERSONAL DATA (PRIVACY) ORDINANCE - SECT 15

Register of data users

(1) The Commissioner shall use-

   (a)  data user returns submitted to him under section 14(4); and

   (b)  any notices served on him under section 14(8), to keep and maintain a
        register of data users which have submitted such returns.

(2) The register shall-

   (a)  be in the form of a database; and

   (b)  contain, in respect of each data user who has submitted a data 
        user return under section 14(4), such particulars of the information
        supplied in that return as the Commissioner thinks fit.

(3) The Commissioner may, by notice in writing served on a data  user, require
the data user to submit a notice in the prescribed form containing such
prescribed information in relation to the data user as the Commissioner may
reasonably require in order to keep and maintain the register in so far as it
relates to that data user, and the data user shall so submit the
second-mentioned notice within such period (being a period of not less than 30
days after service of the first-mentioned notice) and in such manner as the
Commissioner requires in the first-mentioned notice.

(4) Where any prescribed information submitted to the Commissioner under
subsection (3) by a data user changes subsequent to the submission, then the
data user shall serve a notice in writing on the Commissioner specifying such
change-

   (a)  if, but only if-

        (i)    such information is specified in the notice concerned under
               that subsection as information to which this subsection
               applies; and

        (ii)   the notice referred to in subparagraph (i) contains, or has
               annexed to it- (A) a copy of this subsection; or (B) a
               statement summarizing the requirement imposed by this
               subsection on the data user; and

   (b)  not later than 30 days after such change.

(5) If the Commissioner is satisfied that a person has ceased to be a
data user, he may delete from the register any particulars contained therein
relating to that person in that person's capacity as a data user.

(6) A person who has ceased to be a data user may, by notice in the specified
form served on the Commissioner, request the Commissioner to delete from the
register the particulars contained therein relating to that person in that
person's capacity as a data user, and the Commissioner shall, not later than 3
months after the date on which he receives that notice, comply with that
request unless it has been withdrawn by that person. (Enacted 1995)