Personal Information Collection Statement

The Government of the Hong Kong Special Administrative Region (“Government”) is committed to ensuring that all personal data collected under Community Testing for COVID-19 (“the Arrangement”) are handled in accordance with the relevant provisions of the Personal Data (Privacy) Ordinance (“the Ordinance”).

How we use the personal data in this registration

1. The Government will use the personal data collected in this registration for the following purposes:
   • conducting COVID-19 test to provide the following results;
     1. Positive
     2. Negative
     3. Indeterminate
     4. Specimen Not Suitable for Testing;
   • conducting follow-up for any positive or indeterminate cases identified within the Arrangement;
   • processing the registrants’ testing records;
   • generating health code based on the results of the test (if applicable);
   • collating statistics and carrying out analysis, where the statistical information obtained will not be released or made available to any third party in a form that identifies the data subjects or any of them; and
   • public health prevention and control of COVID-19.
2. The Government will use the name and document number(s) set out in the Hong Kong Identity Card / birth certification / other valid identity document to conduct the COVID-19 test under this Arrangement, and follow up with the registrant through telephone or SMS basing on the test results.
3. It is not mandatory for registrants to provide the personal data as required in this registration. However, if registrants do not provide such personal data, the Government will be unable to process the registration.
4. The Government shall hold the personal data securely in accordance with prevailing information security requirements. Appropriate technical and organisational measures such as data encryption, access control and firewalls will be in place to protect the personal data against unauthorised or accidental access, processing, erasure, loss or use.

Transfer and/or Disclosure of the Data

5. The Government will use the personal data collected to perform follow up actions basing on the test results.
6. For the purposes stated in paragraph 1 above, or where disclosure is authorised or required by law, personal data collected in this registration may be disclosed, transferred to and used by government bureaux or departments (“B/Ds”) in relation to the Arrangement (such as B/Ds related to following up of cases and handling of enquiries and complaints, etc.). The information provided by citizens in this registration will not be used by the Government (including all its B/Ds) for any other purposes.
7. The Government will ensure that the retention period of the personal data is not kept longer than the time required for the purposes for which the data is collected.

Data Access Request

8. 1. You have the right to request for access to and correction of your own personal data provided in this registration under the Ordinance, subject to any relevant exemption(s);
   2. Please note that we shall or may refuse to comply with a data access request in the circumstances specified in section 20 of the Ordinance; and
   3. Data access request should be made by sending the completed Data Access Request Form (OPS003) to our Data Protection Officer by fax at 25413352, by email to enquiry@fhb.gov.hk, or by post to the following address:
      Food and Health Bureau 18/F,
      East Wing, Central Government Offices,
      2 Tim Mei Avenue,
      Tamar, Hong Kong
      When handling a data access or correction request, the FHB will check the identity of the requester to ensure that he/she is the person legally entitled to make the data access or correction request. A fee is chargeable by the FHB for complying with a data access request. Any enquiries regarding our personal data privacy policy and practices may be addressed to our Data Protection Officer via the above fax number, email address or correspondence address.

Consent

I -

• have read the above Personal Information Collection Statement and understand its content, and agree that the Government can handle and use the personal data provided in this registration for the purpose of implementing the Arrangement; and disclose the personal data provided in this registration to B/Ds in relation to the Arrangement; and
• understand that the Government reserves the right to review any registration and may, as and when necessary, refuse any registration if the provided information is invalid.

Any persons who register on others’ behalf must obtain the prior consent of the concerned individual before using his or her personal data in this registration.