HK privacy commissioner weighs in on e-wallets
In this article (4)
Privacy commissioner for personal data Stephen Kai-yi Wong has urged Hong Kong residents to vigilantly keep control of their personal data in wake of the Hong Kong Monetary Authority’s (HKMA) decision to grant Stored Value Facilities (SVF) licensesto five mobile e-wallet providers.
Wong also called on e-wallet operators to win customers’ trust by respecting their privacy rights and safeguarding their personal data.
While he acknowledged that e-wallet operators may need to collect significant amounts of personal data as part of their operations, he said providers should give consumers control over the types of data e-wallet apps are allowed to access, and the ability to revoke these permissions at any time.
To keep their personal data safe, Wong recommended that users of e-wallet services find out how e-wallet operators will handle and process personal data collected, understand the apps’ privacy settings and permissions and avoid operating e-wallet apps over public or insecure Wi-Fi connections.
Users should also use complex, unique passwords, make sure devices with the app installed have appropriate anti-theft features switched on and regulatory monitor transaction records for unauthorized payments.
Wong said e-wallet operators are required under the new Stored Value Facilities Ordinance to clearly explain to users what personal data is collected and the reasons why.
Operators planning to use collected data for purposes not directly related to payment should obtain the user’s explicit and voluntary consent, and are legally required to ensure the accuracy and security of personal data collected. Customers are also entitled to access this data and request corrections.
Questions & Answers
Q.Why has the privacy commissioner issued these recommendations for e-wallet users?
Why has the privacy commissioner issued these recommendations for e-wallet users?
The recommendations follow the Hong Kong Monetary Authority's decision to license five mobile e-wallet providers. The commissioner wants residents to vigilantly control their personal data given the increased use of these new services.
Q.What specifically should e-wallet operators do regarding customer data?
What specifically should e-wallet operators do regarding customer data?
Operators must explain what personal data is collected and why. They need explicit consent for data use unrelated to payment, and must ensure data accuracy and security. Customers can also access and correct their information.
Q.What key actions does the privacy commissioner suggest e-wallet users take?
What key actions does the privacy commissioner suggest e-wallet users take?
Users should understand how data is handled and app privacy settings. It is recommended to avoid public Wi-Fi, use strong passwords, enable anti-theft features, and regularly check transaction records for security.