Regular review is needed on what personal data is collected and what needs to be purged

The collection, display and retention of data should always be restricted to what is absolutely necessary. Whether done by the authorities or by businesses, this should be strictly limited and openly justified, and outdated data must be regularly purged.

There have been more reports about data breaches and hacks. There have also been comments that companies should assume responsibility and culpability to their clients, instead of merely blaming their data services vendors (Responsibility for data hack lies not only with the vendor, Oct 30).

Read More