Data privacy law in Asia-pacific

1. Data privacy law in Asia-pacific -introduction to the privacy law in China (mainland China and Hong Kong) Yue Liu yuli@jus.uio.no

2. agenda • Introduction • Mainland china: • Privacy protection • Data privacy • Hong Kong, Special Administration of China

3. Introduction • Jurisdictions in China • Chinese culture and the concept of privacy • Nebulous concept • Not in harmony with Chinese tradition • Privacy protection: law and judicial practice

4. Data Privacy law in mainland China Commitment • ICCPR (article 17) (signed not ratified) • CESCR (ratified with reservations) • APEC privacy framework (2003-05)

5. Data Privacy law in mainland China Privacy law overview 1.Constitutional protection • Art38:personal dignity • Art39: illegal searches or intrude on private homes • Art 40: freedom and privacy of correspondence

6. Data Privacy law in mainland China 2. Statutory protection • The privacy on personality and reputation (civil law article 101,140) • Supreme court’s interpretation • Personal information in mail and e-mail, illegal search (Criminal law article 252,353,245)

7. Data Privacy law in mainland China 2. Statutory protection • Personal information on health and medical records (law for doctor, regulations to medical records) • Depositor’s account (Regulation on commercial banks article 6 ) • ID card ( Regulations on Identity card)

8. Data Privacy law in mainland China • Privacy protection in practice: • Case study: • 1.Two high school students in shanghai…(2003) • 2. publish SARS patients’ name and address etc. (2003) • 3. A young couple peeked by their landlord for three years (2006) • 4. housekeeper sued her employer (2005)

9. Data Privacy law in mainland China • Characteristics for the privacy protection in China • Privacy and Chinese morality • Privacy and right of reputation • Scope of privacy: • private life and affair; • personal information; • personal communication

10. Data Privacy law in mainland China Data protection in China • No general data protection legislation • Temporary Implementation Rules on the Management of International Networking of Computer Information Networks. In article 18, Invasion of privacy on the Internet is prohibited. • Provisional Regulations of the People's Republic of China on the Management of International Networking of Computer Information Networks. 1997, Article 7 the internet user’s correspondence freedom and privacy is protected

11. Data Privacy law in mainland China • Proposed Data protection Law (‘Experts’ Suggestions’ draft 2007) • General principles 1. Lawfulness 2.Protection of Rights 3.Principle of Balance of Interests 4.Principle of Information Quality

12. Data Privacy law in mainland China 5. Principle of Information Security 6. Principle of Professional duties 7. Principle of Remedy

13. Data Privacy law in China-Hong Kong • Constitutional protection • Basic law must apply ICCPR art17 • ICCPR provisions replicated in Bill of rights Ordinance- public authorities • Basic law art29, 30 • Common law protection: Wainwright case 2004 UK (Wainwright and another v. Home Office )

14. Data Privacy law in China-Hong Kong • The Personal Data Privacy Ordinance: Scope • Public sectors and private users • Exemptions Public and social interests media, employment etc.

15. Data Privacy law in China-Hong Kong • Personal Data: three criteria Eastweek Publisher Ltd v Privacy Commissioner for Personal Data 2001 Data: comprise any representation of information, including an expression of opinion in any documents.

16. Data Privacy law in China-Hong Kong • Content :6 principles • Purpose and manner of collection :notice • Accuracy and duration of retention: deletion obligation • Limits the use or disclosure: allowable secondary use • Security: not special treatment sensitive informatin • Openness by data user-policies and practices • Right of access and correction

17. Thank you for your attention!