Man exposes ex-colleague's personal data in chat group with current, former employees
A Chinese man in Hong Kong was arrested by the Office of the Privacy Commissioner for Personal Data (PCPD) for exposing the personal information of his former colleague without his consent.
The man, 37, exposed to a group chat a portion of his former colleague's Hong Kong ID Card, which revealed his Chinese name, English name, partial HKID card number, date of birth, gender, and photo.
According to the PCPD, the group chat was made by the arrested individual on an instant messaging application after he left the company.
It initially included current and former employees of the organisation, before the arrested individual added the victim to the group.
In August 2023, the arrested individual criticised the victim's work performance in the group, before removing him from the chat.
Days later, a message containing some allegations against the victim was sent to the group, including the partly redacted copy of his HKID card.
The PCPD said the arrested individuals has been granted bail, but it added that further investigation on the case will be pursued.
Doxing offence
In Hong Kong, it is an offence to disclose another individual's personal data without their consent and with the intent to cause specified harm to the victim.
According to its Personal Data (Privacy) Ordinance (PDPO), violators may be handed a fine of up to $1,000,000 and imprisonment for five years.
"The PCPD reminds members of the public that they should not dox others because of personal disputes," the office said in a statement.
"Identity cards contain sensitive personal data. Disclosing or reposting copies of identity cards without the consent of the data subject concerned, either arbitrarily or maliciously, may constitute a doxing offence."
