Which provision of Hong Kong's Personal Data (Privacy) Ordinance (PDPO) strengthens the purpose limitation principle (DPP3)?
Which provision of Hong Kong's Personal Data (Privacy) Ordinance (PDPO) strengthens the purpose limitation principle (DPP3)?
Prescribed consent strengthens the purpose limitation principle by requiring that the data subject must give express consent to their personal information being used for additional purposes. This ensures that personal data is not repurposed beyond the original intent without the individual's explicit permission, thereby upholding the principle of purpose limitation.
Should be C, prescribed consent. This provision ensures that individuals explicitly consent to any additional purposes for which their personal data will be used beyond the original purpose of collection, thus reinforcing the principle of purpose limitation.
DPP3 Use of Data DPP3 prohibits the use of personal data for any new purpose which is not or is unrelated to the original purpose when collecting the data, unless with the data subject’s express and voluntary consent. A data subject can withdraw his/her consent previously given by written notice. Regarding restrictions on use of personal data, Part 6A of the PDPO further requires that data users must obtain informed consent before using a data subject’s personal data for direct marketing or transferring the data to a third party for direct marketing. The consent must be an explicit indication by the data subject and broadly covers an indication of no objection. In other words, silence cannot constitute consent.