Data privacy law in Asia-pacific

-introduction to the privacy law in China (mainland China and Hong

Kong)Yue Liu

yuli@jus.uio.no

agenda

Introduction Mainland china:

Privacy protection Data privacy

Hong Kong, Special Administration of China

Introduction Jurisdictions in China Chinese culture and the concept of

privacy Nebulous concept Not in harmony with Chinese tradition

Privacy protection: law and judicial practice

Data Privacy law in mainland China

Commitment ICCPR (article 17) (signed not

ratified) CESCR (ratified with reservations) APEC privacy framework (2003-05)

Data Privacy law in mainland China

Privacy law overview1.Constitutional protection

Art38:personal dignity Art39: illegal searches or intrude on

private homes Art 40: freedom and privacy of

correspondence

Data Privacy law in mainland China

2. Statutory protection The privacy on personality and

reputation (civil law article 101,140) Supreme court’s interpretation Personal information in mail and e-mail,

illegal search (Criminal law article 252,353,245)

Data Privacy law in mainland China

2. Statutory protection Personal information on health and

medical records (law for doctor, regulations to medical records)

Depositor’s account (Regulation on commercial banks article 6 )

ID card ( Regulations on Identity card)

Data Privacy law in mainland China

Privacy protection in practice: Case study: 1.Two high school students in shanghai…

(2003) 2. publish SARS patients’ name and address

etc. (2003) 3. A young couple peeked by their landlord for

three years (2006) 4. housekeeper sued her employer (2005)

Data Privacy law in mainland China

Characteristics for the privacy protection in China Privacy and Chinese morality Privacy and right of reputation Scope of privacy:

private life and affair; personal information; personal communication

Data Privacy law in mainland China

Data protection in China No general data protection legislation Temporary Implementation Rules on the

Management of International Networking of Computer Information Networks. In article 18, Invasion of privacy on the Internet is prohibited.

Provisional Regulations of the People's Republic of China on the Management of International Networking of Computer Information Networks. 1997, Article 7 the internet user’s correspondence freedom and privacy is protected

Data Privacy law in mainland China

Proposed Data protection Law (‘Experts’ Suggestions’ draft 2007)

General principles 1. Lawfulness2.Protection of Rights3.Principle of Balance of Interests4.Principle of Information Quality

Data Privacy law in mainland China

5. Principle of Information Security 6. Principle of Professional duties 7. Principle of Remedy

Data Privacy law in China-Hong Kong

Constitutional protection Basic law must apply ICCPR art17 ICCPR provisions replicated in Bill of

rights Ordinance- public authorities Basic law art29, 30

Common law protection: Wainwright case 2004 UK (Wainwright and another v. Home Office )

Data Privacy law in China-Hong Kong

The Personal Data Privacy Ordinance: Scope Public sectors and private users ExemptionsPublic and social interests media,

employment etc.

Data Privacy law in China-Hong Kong

Personal Data: three criteria Eastweek Publisher Ltd v Privacy

Commissioner for Personal Data 2001 Data: comprise any representation of

information, including an expression of opinion in any documents.

Data Privacy law in China-Hong Kong Content :6 principles

Purpose and manner of collection :notice Accuracy and duration of retention: deletion

obligation Limits the use or disclosure: allowable

secondary use Security: not special treatment sensitive

informatin Openness by data user-policies and

practices Right of access and correction

Thank you for your attention!