Social networks are used not just for connecting people, but also for business purposes like opinion monitoring, customer service, and recruitment. While these uses can help companies, they also involve collecting individual user data, so businesses need to be aware of platform policies, their own data collection and handling policies, and applicable privacy regulations to ensure they respect individuals' privacy. Key principles for protecting personal data privacy include obtaining informed consent from users, securely storing collected data, and maintaining transparency about data practices.

1. Social networks are not just about people.
Henry Chang, IT Advisor
Office of the Privacy Commissioner for Personal Data, Hong Kong
26 March 2013
Social Business Conference

2. 2
Social Networks – about people?

3. 3
Social Network – or about individuals?

4. 4
When social networks are used for:
• Opinion monitoring (61%/2012 ; 32%/2011)
• Customer service (48%/2012 ; 38%/2011)
• Recruitment
• ‘Like’ analysis
• Don’t forget marketing / direct marketing…
So when it is about individuals?

5. 5
• Are you aware of the platform policies?
• Do you have any corporate policies?
• Do you know of any applicable
regulatory policies/rules?
How well are you prepared in using
social networks in business?

6. 6
• Informed consents
• Do individuals know you are collecting data about them,
what for, and whether they can opt-out?
• Security
• Once collected, data users and their contractors have the
responsibility to protect the data.
• Transparency
• Policies and practices on data collection, use, retention,
opt-out, access etc. should be transparent to all
stakeholders.
Key principles on personal data
privacy protection…

7. 7
New Direct Marketing Regime
For data users:
• New Guidance on Direct Marketing
- http://www.pcpd.org.hk/english/publications/files/GN_DM_e.pdf

8. 8

9. 9
Thank You