Care records that respect elders' privacy

Personal data responsibilities under the PDPO

The Personal Data (Privacy) Ordinance (Cap. 486) has applied since 1996 and rests on six Data Protection Principles: purpose and manner of collection, accuracy and retention, use, security, openness, and access and correction. Care records contain health information about elders, so organisations need to know who can access them, keep them accurate and protect them from loss or leaks.

PCPD, Six Data Protection Principles

Data users and data processors

Under the PDPO, the organisation that controls the collection and use of personal data is the data user, and remains responsible for the acts of its employees and agents. A software provider that processes care records only on the organisation's behalf acts as a data processor. Clear contracts and security measures help the organisation meet its obligations.

PCPD, Six Data Protection Principles

Security in practice

In practice, the security principle means limiting who can see what, protecting data in storage and in transit, and keeping a trace of access and changes. TransmissionsPro applies AES-256 encryption, role-based access and a full audit trail, and its records stay under the control of the care organisation.