Portal:Office of the Privacy Commissioner for Personal Data, Hong Kong

“ Before a property management company decides to collect residents' personal data, it should determine the purpose of collection and specify the retention period of the personal data, and ensure that the personal data shall not be kept longer than is necessary for the fulfilment of the purpose (including any directly related purpose) for which the data is or is to be used, so as to comply with the requirements of DPP2 (2) . In this case, Creative Property Services failed to specify the retention period of the personal data contained in the Receipt Record at the material time. ”

“ Property management involves multidisciplinary professional services, including general property management services, environmental management of properties, repair and maintenance of properties, facility management, finance and asset management, human resources management, and legal services related to properties. ”

“ In this case, Cheong Sun aimed to inform property owners by the notice that those 48 owners' overdue payments had put financial strains on Scenic Garden, and reminded those owners of their duty to pay the arrears as soon as possible. ”

“ Moreover, the Commissioner was of the view that the complainant gave his phone number to H-Privilege at the outset for communication about property management. The security guard's disclosure of the complainant's phone number to the resident concerned for private communication was a significant deviation from the purpose of use for which the complainant had consented to, and was also inconsistent with H-Privilege's original purpose of collection. Hence, the Commissioner found that H-Privilege had contravened the requirements of DPP3 (1) as regards the use of personal data. ”