Huang Jier said that the compliance investigation will examine in detail the security measures taken by Cathay Pacific in the protection of customers' personal data and the policies and practices of retention of their personal data. The Privacy Commissioner may, in accordance with the powers conferred by the Privacy Act, call witnesses, enter premises, request evidence and conduct public hearings on the incident in the course of a compliance investigation.
He reiterated that it is the established policy and practice of the Office to conduct a compliance review before conducting a compliance investigation. Some commentators have said that after conducting the compliance review, the compliance investigation will be automatically stopped, which is a mistake and irresponsible.
At 5:00 pm today, the Office of Privacy Commissioner for Personal Data received a total of 89 complaints and 108 queries related to the violation of information.