3. Ethics in Technology

XYZ Bank (the Bank) operates in Hong Kong and provides general banking services to the public. Documents containing confidential or sensitive financial information of its customers are from time to time erased in accordance with its data retention policy. The bank appoints ABC Company (ABC), a confidential information disposal services company, to collect and shred these confidential documents. A contract was entered into between the Bank and ABC for 2 years.

One day, it was reported by the media that bags of documents containing intact customers credit reports that were printed on the Banks letterheads were found outside a garbage collection point. The data breach was suspected to be caused by the improper handling of the documents by ABC.

1. Identify the data user and data subject.
2. Discuss in detail the legal issues arise from the Bank and ABC.
3. Describe THREE general duties of the CPO in the Bank. //Thank you very much:)