{"id":595,"date":"2021-06-25T18:24:15","date_gmt":"2021-06-25T10:24:15","guid":{"rendered":"http:\/\/devwp.visibleone.io\/p136\/?p=595"},"modified":"2021-08-09T20:11:17","modified_gmt":"2021-08-09T12:11:17","slug":"privacy-regarding-direct-marketing","status":"publish","type":"post","link":"https:\/\/familyclic.hk\/en\/topics\/daily-lives-legal-issues\/data-subject-of-personal-data\/privacy-regarding-direct-marketing\/","title":{"rendered":"Privacy regarding direct marketing"},"content":{"rendered":"

[et_pb_section fb_built=”1″ _builder_version=”3.22″][et_pb_row _builder_version=”3.25″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”][et_pb_column type=”4_4″ _builder_version=”3.25″ custom_padding=”|||” custom_padding__hover=”|||”][et_pb_text admin_label=”Consumer Contracts” module_class=”posttitle” _builder_version=”4.9.7″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”]<\/p>\n

V. Privacy regarding direct marketing<\/h1>\n

[\/et_pb_text][et_pb_text _builder_version=”4.9.7″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” hover_enabled=”0″ sticky_enabled=”0″]<\/p>\n

The Amendment Ordinance 2012 introduced a new regime governing the use of personal information in direct marketing, which took effect on 1 April 2013. The new regime provides stronger protection for individuals. When data users intend to use or provide an individual’s personal data in direct marketing, they are required to inform the individuals of the prescribed information and obtain their consent.<\/p>\n

Under\u00a0section 35A<\/a>\u00a0of the Ordinance, “direct marketing” (in the context of personal data privacy) means:<\/p>\n

    \n
  1. offering or advertising the availability of goods, facilities or services; or<\/li>\n
  2. soliciting donations or contributions for charitable, cultural, philanthropic, recreational, political or other purposes,<\/li>\n<\/ol>\n

    by means of:<\/p>\n

      \n
    1. information or goods sent to specific persons\u00a0by mail, facsimile transmission, electronic mail, or other similar means of communication, where the information or goods are addressed to a specific person or specific persons by name; or<\/li>\n
    2. telephone calls\u00a0made to specific persons.<\/li>\n<\/ol>\n

      Corresponding to the amendment of the Ordinance, the Commissioner published guidance notes entitled\u00a0New Guidance on Direct Marketing<\/a>\u00a0in January 2013.<\/p>\n

      A. Use of personal data for the data user\u2019s own direct marketing purposes<\/h2>\n

      With reference to\u00a0section 35C<\/a>\u00a0of the amended Ordinance, before using personal data in direct marketing, data users must follow the specific steps listed below:<\/p>\n

      1.\u00a0 Data users must inform the data subjects of their intention to use the data subjects\u2019 personal data for direct marketing, and they may not so use the data unless they have the data subjects\u2019 consent.<\/p>\n

      2.\u00a0 Data users must provide the data subjects with information on the intended use of the data, including the kinds of personal data to be used and the classes of marketing subjects in relation to which the data is to be used.<\/p>\n

      3. Data users must provide the data subjects with a free-of-charge channel through which the data subjects may communicate their consent to the intended use.<\/p>\n

      4. In order to help data subjects make an informed choice, the information provided by data users must be presented in a manner that is easily understandable and, if in written form, easily readable.<\/p>\n

      In addition, according to\u00a0section 35F<\/a>\u00a0, if data users are using the data in direct marketing\u00a0for the first time<\/strong>\u00a0, they must notify the data subjects of their op-out right, and the data users must, without charge to the data subjects, stop using the data in direct marketing if the data subjects opt out.<\/p>\n

      Data users can use the personal data in direct marketing only after they have received the data subjects\u2019 consent to the intended use of the personal data. Consent, in this context, includes an\u00a0indication of no objection<\/strong>\u00a0to the use or provision of the personal data (\u00a0section 35A(1)<\/a>\u00a0). If the data subjects give their consent orally, the data users must confirm\u00a0in writing<\/strong>\u00a0to the data subjects within 14 days from receiving their consent the permitted kind of personal data and the permitted class of marketing subjects (\u00a0section 35E<\/a>\u00a0).<\/p>\n

      Data users must comply with the data subjects\u2019 request\u00a0at any time<\/strong>\u00a0to stop using the data subjects\u2019 personal data in direct marketing without charge to the data subject (\u00a0section 35G<\/a>\u00a0).<\/p>\n

      Data users who contravene any of the requirements in the sections mentioned above commit an offence. For each offence, the data user is liable on conviction to a maximum fine of $500,000 and to a maximum imprisonment of three years.<\/p>\n

      In contrast to this new regime which is an \u201copt-in\u201d regime, the old regime offered data subjects only a limited \u201copt-out\u201d option: i.e., when data users used data subjects\u2019 personal data in direct marketing for the first time, the users had to inform the subjects that they could request the data user to cease using their personal data for direct marketing purposes. If data subjects made such a request, the data users had to stop using the data; if the data subjects made no such request, their personal data could be used without any further notice. It should be noted that the old regime still applies to personal data that was used in direct marketing before the new amendment took effect, pursuant to\u00a0section 35D<\/a>\u00a0of the amended Ordinance (also called a \u201cGrandfather arrangement\u201d: i.e. an old rule continues to apply to certain existing cases, while a new rule applies to all future cases). In other words, if before 1 April 2013 a data user used the personal data in direct marketing in compliance with the existing requirements of the Ordinance, that data user could continue to do so on or after 1 April 2013, in relation to the same class of marketing subjects, without being subject to the obligations imposed under the new regime.<\/p>\n

      B. Provision of personal data to third parties for use in direct marketing<\/h2>\n

      In addition to the regulation on the use of personal data by data users for their own direct marketing purposes, the amended Ordinance introduces more stringent regulations on providing personal data to third parties for use in direct marketing, including the sale of personal data.<\/p>\n

      When data users intend to provide personal data to third parties for use in direct marketing, the data users must follow a procedure similar to that outlined above in\u00a0part A. Additionally, they must inform the data subjects of two other kinds of information in relation to the intended use (\u00a0section 35J<\/a>\u00a0):<\/p>\n

        \n
      1. whether the data is to be provided for gain; and<\/li>\n
      2. the classes of persons to whom the data is to be provided.<\/li>\n<\/ol>\n

        The form of notification and response of the data subject must be\u00a0in writing<\/strong>\u00a0. Furthermore, the data users must not provide personal data to a third party unless the data users have received\u00a0written consent<\/strong>\u00a0from the data subject. (\u00a0section 35K<\/a>\u00a0)<\/p>\n

        Data subjects may\u00a0at any time<\/strong>\u00a0and\u00a0irrespective of whether they have previously given consent<\/strong>\u00a0to the provision of their personal data to a third party require the data user\u2014<\/p>\n

          \n
        1. to stop providing the data subjects\u2019 personal data to a third party for use by that party in direct marketing; and<\/li>\n
        2. to notify any third party to whom the data has been so provided to stop using the data in direct marketing.<\/li>\n<\/ol>\n

          Accordingly, data users who receive these instructions must, without charge to the data subjects, comply with them. The notification made by the data users to the third party must be\u00a0in writing<\/strong>\u00a0. Any third party who receives such a notification from the data user must stop using the personal data in direct marketing in accordance with the notification. (\u00a0section 35L<\/a>\u00a0)<\/p>\n

          Contraventions of the requirements in relation to the provision of personal data to third parties for use in direct marketing are offences. For contraventions involving the provision of personal data for gain (including the sale of personal data), the maximum penalty is a fine of $1,000,000 and imprisonment for five years. For other contraventions, the maximum penalty is a fine of $500,000 and imprisonment for three years.<\/p>\n

          Unlike the use of personal data for the data users\u2019 own direct marketing purposes, the provision of personal data to third parties for use in direct marketing is not subject to a \u201cGrandfather arrangement\u201d (i.e. when an old rule continues to apply to certain existing cases, while a new rule applies to all future cases). In other words, any provision of personal data to third parties, whether it happened before or after 1 April 2013, must comply with the requirements of the amended Ordinance.<\/p>\n

          With regard to cold-calling (note), staff members of the data user are recommended to give an opt-out message along the following lines:\u00a0We are not allowed to use your personal data in direct marketing without your consent. If you do not wish to receive marketing calls from us, please tell me anytime and we will not call again.”<\/em>\u00a0If the data user fails to inform a data subject of his opt-out right or other information required by\u00a0sections 35C<\/a>\u00a0–\u00a035F<\/a>\u00a0as mentioned above, a data subject may lodge a complaint with the Office of the Privacy Commissioner for Personal Data. (Note: Cold-calling is the practice of making a marketing approach by telephone to a potential customer with whom the caller has had no previous dealings.)<\/p>\n

          The PPCD published a\u00a0leaflet<\/a>\u00a0that introduces the ways for individuals to exercise their right of consent to opt-out of direct marketing activities under the amended Ordinance.<\/p>\n

          [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"

          [et_pb_section fb_built=”1″ _builder_version=”3.22″][et_pb_row _builder_version=”3.25″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”][et_pb_column type=”4_4″ _builder_version=”3.25″ custom_padding=”|||” custom_padding__hover=”|||”][et_pb_text admin_label=”Consumer Contracts” module_class=”posttitle” _builder_version=”4.9.7″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”] V. Privacy regarding direct marketing [\/et_pb_text][et_pb_text _builder_version=”4.9.7″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” hover_enabled=”0″ sticky_enabled=”0″] The Amendment Ordinance 2012 introduced a new regime governing the use of personal information in direct marketing, which took effect on 1 April 2013. The […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"

          Adoption is a legal process by which parental rights and responsibilities over a child are transferred from the birth parents to the adoptive parents. An adoption in Hong Kong must be effected in accordance with the Adoption Ordinance , Cap. 290<\/a> , Laws of Hong Kong. The guiding principle in the adoption process is the \u201cbest interests of the child\u201d ( section 8<\/a> of the Adoption Ordinance<\/a> ).<\/p>

          Local adoption service in Hong Kong is provided by the Adoption Unit of the Social Welfare Department and three non-governmental organizations, as Accredited Bodies:<\/p>