PogoWasRight.org

Menu
  • About
  • Privacy
Menu

Hong Kong probes online identity card database

Posted on February 15, 2013 by pogowasright.org

The Bangkok Post reports:

Hong Kong said Friday it is investigating an online database containing the identity card numbers of over 1,100 residents, including some of the city’s tycoons, published to protest a proposed privacy law.

The database was compiled by corporate governance activist David Webb and includes the identity numbers of the two sons of Asia’s Richest man Li Ka-shing.

Mr Webb posted the database online to protest a proposed law which will restrict access to information on company directors, reports said.

“ID numbers should not be regarded as secrets,” said Webb’s database website, which said the information had been gathered from various online sources available to the public.

“They tell you virtually nothing about a person — they are identifiers, not personal data”, the website said referring to the identity card numbers.

However, the city’s privacy commission, which is investigating the database for “possible personal data breach”, said it could pose a risk to privacy.

“If ID card numbers coupled with other personal data such as names and home address fall into the wrong hands, the affected person could be at risk of identity fraud,” the Office of the Privacy Commissioner for Personal Data said in a statement.

Read more on Bangkok Post.

I admit that I’m somewhat confused by this case. What are ID card numbers used for there? And how does making corporate directors’ ID numbers help the press? Or conversely, how would not making them public hinder the press? I see no reason for anyone’s passport number to be publicly available, but if ID numbers would enable people to look up or aggregate other personal information, then I’m not sure why David Webb thinks it’s okay to make them publicly available.

What do you think?

Update: The Bangkok Post story was updated to reflect that the activist took the database down.

Category: Non-U.S.

Post navigation

← Federal Court Certifies 60,000-Member Class in “Wireless Spam” TCPA Litigation against Insurance Company, for Actions of Its Marketing Vendors
Facebook defends Graph Search’s privacy controls for teens →

Now more than ever

Search

Contact Me

Email: info@pogowasright.org

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

Categories

Recent Posts

  • ARC sells airline ticket records to ICE and others
  • Clothing Retailer, Todd Snyder, Inc., Settles CPPA Allegations Regarding California Consumer Privacy Act Violations
  • US Customs and Border Protection Plans to Photograph Everyone Exiting the US by Car
  • Google agrees to pay Texas $1.4 billion data privacy settlement
  • The App Store Freedom Act Compromises User Privacy To Punish Big Tech
  • Florida bill requiring encryption backdoors for social media accounts has failed
  • Apple Siri Eavesdropping Payout Deadline Confirmed—How To Make A Claim

RSS Recent Posts on DataBreaches.net

  • Department of Justice says Berkeley Research Group data breach may have exposed information on diocesan sex abuse survivors
  • Masimo Manufacturing Facilities Hit by Cyberattack
  • Education giant Pearson hit by cyberattack exposing customer data
  • Star Health hacker claims sending bullets, threats to top executives: Reports
  • Nova Scotia Power hit by cyberattack, critical infrastructure targeted, no outages reported
©2025 PogoWasRight.org. All rights reserved.
Menu
  • About
  • Privacy