PCPD makes arrest for a suspected doxxing offence

Hong Kong's privacy watchdog has arrested a 35-year-old woman for allegedly disclosing the personal data of a complainant without consent.

According to the press release, the Office of the Privacy Commissioner for Personal Data (PCPD) arrested a Chinese female aged 35 in New Territories East. She was suspected to have disclosed the personal data of a complainant without her consent, in contravention of section 64(3A) of the Personal Data (Privacy) Ordinance (PDPO).

The investigation revealed that the arrested person and the complainant, both being online traders, had had a business relationship which later turned sour because of a monetary dispute. In December 2021, the personal data of the complainant and her husband was disclosed in about 14 groups on a social media platform, which also contained allegations about fraudulent behaviour. The personal data disclosed included the Chinese names, phone number and photos of the complaint and her husband.

The PDPO added it applies equally to the online world. To avoid breaking the law, members of the public should think twice before publishing or forwarding any doxxing messages on the internet or social media.
 
Previously in June, the privacy watchdog has issued more than 770 cessation notices to 14 social media platforms requesting them to remove around 3,900 unlawful doxxing messages over the past eight months. In this case, the arrested person is also granted bail. Meanwhile, the PCPD will continue its investigation into the case. The PCPD also reminded members of the public that doxxing is a serious offence. An offender of section 64(3C) is liable on conviction to a fine up to $1,000,000 and imprisonment for five years. Meanwhile, pursuant to provisions of PDPO, a person who commits an offence under section 64(3A) is liable on conviction to a fine of $100,000 and imprisonment for two years. 

Related articles:

HK authorities mull ban of targeted doxxing platforms
HK and Singapore privacy watchdogs renew agreement on personal data protection