Code of Practice
This Code of Practice for Handling Personal Data (“the Code”) is based on the underlying principles and guidelines published in the Code of Practice on Human Resource Management issued by the Privacy Commissioner for Personal Data under the Personal Data (Privacy) Ordinance. The primary purpose of the Code is to provide practical guidance to University employees on how to properly handle personal data in the carrying out of University functions and activities. It deals with issues concerning the collection, holding, accuracy, use and security, and subject access and correction in relation to the personal data of prospective, current and former employees and students of the University. All University employees are required to make reference to the Code in determining their practices in handling personal data and must observe the provisions of the Code. The consequence of mishandling personal data will range from receiving instruction on the proper handling of such data to corrective or disciplinary actions.
The full document can be viewed here.