Hong Kong’s education authorities have asked the elite school to review its data-handling policy after it was suspected of collecting information from students’ computers and installing devices to monitor their activities.
The Privacy Commissioner for Personal Data also announced Thursday night that it would investigate complaints posted online about St. Paul Coeducational College’s collection and handling of students’ personal information.
The anonymous complaint surfaced on Instagram, and the mid-sized school recently began requiring students to hand over their devices to IT staff for inspection after discovering the devices were frequently used to play video games. he claimed.
The complainant also alleged that based on the first group of students whose computers were scrutinized, school officials backed up student data to USB drives and installed questionable surveillance equipment to check on student activities after school. .
In Hong Kong, personal data may only be collected for lawful purposes directly related to your job duties or activities.
The data collected must be necessary and appropriate for such purposes, but not excessive.
Social media posts also indicate that the school’s inspections include scrutinizing personal account information, personal files, photos and chat records on devices, raising concerns on campus.
The complainant accused the school of violating students’ privacy.
The Education Department announced Thursday night that it had contacted the school for more information and requested a review of its data handling policy.
Hong Kong privacy watchdog investigates data breach at famous sports club
Hong Kong privacy watchdog investigates data breach at famous sports club
In a statement to the Post, a school spokesperson said the school monitors student tablet computer usage to ensure the devices are used appropriately and to prevent potential risks to campus network security. He said a sample check had recently been carried out to confirm the issue.
He said the computer tests were conducted in accordance with the Education Department’s recommended “bring your own device” acceptable use policy and with the consent of parents and students.
She said the USB devices used in this process only collected students’ browsing history, program installation records, and usage data during school hours.
The spokesperson added that after testing and tracing, relevant data will be permanently destroyed.
Hong Kong’s privacy watchdog said it had not received any complaints but would contact the school to gather further information and ensure compliance with privacy laws.
