Source: Hong Kong 01
01 Review Editor Room
First of all, digital port data leakage, then virtual asset services are suspected of fraud. Hong Kong still wants to be an international financial center and international innovation technology center?Maybe we must admit it first that we are not enough now.
Digital port is the first major project proposed by Dong Jianhua, the first Chief Executive, to promote the development of Hong Kong's founding of sciences and obtain a large number of public support for many years.The Smart Government Innovation Laboratory of the Government Information Science and Technology Director's Office is also established in digital ports.To a large extent, it should represent the level of innovation in Hong Kong.
However, in mid -August, digital ports found that they were invaded by hackers, and up to 400GB of information were later disclosed by "tearing tickets" on the dark network.The security of security guards, the industry described as "serious negligence". Wu Jiezhuang, the legislature of the Legislative Council of Research and Innovation Technology, also believes that the incident reflects insufficient network security awareness.
According to the current mechanism, after the leakage of the data, relevant persons shall "as soon as possible" to notify the information of the parties and personal data privacy commissioners.The commissioner can also issue an execution notice to the relevant person, and the offenders can be fined up to 50,000 yuan and two years in prison.
After the data is leaked, the Digital Port reported on August 18th to the Personal Data Privacy Commissioner Office.When explaining to the public, the CEO of the digital port also pointed out that no institution could "do not invade", and no artificial negligence was found for the time being.This is equivalent to saying that all the digital ports have to do, and there is no responsibility for the victims.Their resumes and personal data are made public on the dark network without any.
In the current system, it may be like this.But should it be like this?As we all know, the EU regards personal data guarantee as the basic right, and the general data guarantee regulations formulated by the EU are quite strict. Not only can the fines can be hundreds of millions, it is also forced to stipulate that institutions and corporate appointment guarantee data director, responsible for performing accountability tools (such as data processing activities (for data processing activitiesAnd policies / measures are recorded and data guarantee impact assessment).If the leakage of the digital port occurs under the General Data Protection Regulations, the responsibility is much larger at any time.
The Hong Kong government has studied the past and considers the authorization of privacy commissioners to directly impose administrative fines to cases that seriously violate the principles of guarantee data, and directly regulate the information processing of cloud service providers.Strike the bottom.By February of this year, Privacy Commissioner Zhong Liling also stated in the Legislative Council that he intends to consult the Political Affairs Committee of the Legislative Council in the second quarter.
In unique, in the JPEX incident of the virtual asset trading platform, the CSRC repeatedly mentioned that there was no supervision power for the trading platform in the past, and the authority after the repair did not include off -site transactions (OTC).In the end, the CSRC can say that they have tried their best to remind the society and try their best to investigate whether JPEX has suspected of violating the raising regulations on cracking down on money laundering and terrorist funds. Even if the objective results show that there are still many investors deceived.
What is full of responsibilities, depending on how our laws and regulations are formulated and required.Jiang Yuhuan, a member of the Legislative Council of the practice lawyer, recently mentioned, "Our legal draft is undoubtedly passive. The update and drafting of laws are mainly led by the policy bureau? To make progress throughout the society, the law can be in front of development."It is not said that "walking in front of development", now it seems that the government's regulatory work should not be behind the situation.
