{"id":29097,"date":"2023-07-03T13:20:07","date_gmt":"2023-07-03T13:20:07","guid":{"rendered":"https:\/\/prelive-tdw.visibleone.app\/insight-and-news\/legal-update-privacy-considerations-for-online-shopping-platforms\/"},"modified":"2025-09-22T03:06:30","modified_gmt":"2025-09-22T03:06:30","slug":"legal-update-privacy-considerations-for-online-shopping-platforms","status":"publish","type":"insight-and-news","link":"https:\/\/www.tannerdewitt.com\/zh-hant\/insight-and-news\/legal-update-privacy-considerations-for-online-shopping-platforms\/","title":{"rendered":"Legal Update: Privacy considerations for online shopping platforms"},"content":{"rendered":"\n    \n\n<div style=\"background-image:url('https:\/\/www.tannerdewitt.com\/wp-content\/themes\/tanner-de-witt\/images\/insightdetails.jpeg')\"\n    class=\"insight-news-detail-hero\" id=\"insight-news-detail-hero\">\n\n\t\t<div style=\"background-color:\" class=\"insight-news-detail-hero-overlay \"><\/div>\n            <div class=\"z-[0]\">\n                <div class=\"insight-news-breadcrumbs flex items-end practice-areas-featured-breadcrumbs \">\n                    <a class=\"page-link no-underline\" href=\"https:\/\/www.tannerdewitt.com\/zh-hant\/\">Home<\/a>                <\/div>\n\n\n                <div class=\"hero-title\">\n                    <h1>\n                        Legal Update: Privacy considerations for online shopping platforms                    <\/h1>\n                <\/div>\n                \n                    <div style=\"\" class=\"hero-date \">\n\n                        <span class=\"month\">Jul<\/span>\n                        <span class=\"day\">03<\/span>\n                        <span class=\"year\">2023<\/span>\n                    <\/div>\n\n            <\/div>\n    \n\n    \n\n\n\n<\/div>\n\n\n\n<script >\n    (function () {\n        document.addEventListener(\"DOMContentLoaded\", () => {\n\n            const breadCrumbsContainer = Array.from(document.querySelectorAll(\".practice-areas-featured-breadcrumbs\"));\n\n            breadCrumbsContainer.forEach(container => {\n                const breadCrumbLinks = Array.from(container.querySelectorAll('.page-link'));\n                const breadCrumbSeperators = Array.from(container.querySelectorAll('.separator'));\n\n                if (Array.from(breadCrumbLinks).length === 1) {\n                    const homeNode = breadCrumbLinks[0];\n\n                    if (!homeNode) {\n                        return\n                    }\n\n                    const postTypeNode = homeNode.cloneNode(true);\n                    postTypeNode.textContent = \"Insights and News\";\n                    container.insertAdjacentHTML('beforeend', `<span class=\"separator practice-areas-featured-breadcrumb-item-slash\">\/<\/span>`)\n                    container.insertAdjacentElement('beforeend', postTypeNode)\n                    breadCrumbLinks.push(postTypeNode);\n\n                    if (\"Insights\") {\n                        const categoryNode = homeNode.cloneNode(true);\n\n                        categoryNode.textContent = \"Insights\";\n                        container.insertAdjacentHTML('beforeend', `<span class=\"separator practice-areas-featured-breadcrumb-item-slash\">\/<\/span>`)\n                        container.insertAdjacentElement('beforeend', categoryNode)\n                        breadCrumbLinks.push(categoryNode);\n                    }\n\n\n                    const titleNode = homeNode.cloneNode(true);\n\n                    titleNode.textContent = \"Legal Update: Privacy considerations for online shopping platforms\";\n                    container.insertAdjacentHTML('beforeend', `<span class=\"separator practice-areas-featured-breadcrumb-item-slash\">\/<\/span>`)\n                    container.insertAdjacentElement('beforeend', titleNode)\n                    breadCrumbLinks.push(titleNode);\n\n\n\n\n                }\n\n                breadCrumbLinks.forEach((link, index) => {\n\n                    link.classList.add('practice-areas-featured-breadcrumb-item-name');\n                    const origin = window.location.origin;\n                    const href = window.location.href;\n\n                    const originSplitter = window.location.href.includes(\"insight-and-news\") ? \"insight-and-news\" : window.location.href.includes('insights-and-news') ? \"insights-and-news\" : \"\"\n\n                    const paths = href.split(originSplitter);\n                    const links = paths[1].split(\"\/\").filter(Boolean)\n\n\n                    const resolvedOrigin = originSplitter ? (href.split(originSplitter)[0] || \"\") : (origin + \"\/\")\n\n                    if (index === 0) {\n\n                        if (!originSplitter) {\n                            link.href = origin\n                        } else {\n                            link.href = resolvedOrigin;\n                        }\n\n\n                    } else if (index === 1) {\n                        link.href = resolvedOrigin + originSplitter\n\n                    }\n                    else if (index === 2) {\n                        console.log(links)\n                        link.href = resolvedOrigin + originSplitter + \"\/\" + (links[0] || \"\")\n                    }\n                    else if (index === 3) {\n\n                        link.href = resolvedOrigin + originSplitter + \"\/\" + (links[0] || \"\") + \"\/\" + (links[1] || \"\")\n\n                    }\n\n\n\n                    \/\/ const words = link.textContent.split(\" \")\n                    \/\/ if (words.length > 4) {\n                    \/\/     link.textContent = words.slice(0, 4).join(\" \") + \"...\"\n                    \/\/ }\n\n                })\n\n                breadCrumbSeperators.forEach(separator => {\n                    separator.textContent = \"\/\"\n                    separator.classList.add('practice-areas-featured-breadcrumb-item-slash')\n                });\n\n\n            })\n\n\n        })\n        removeDivTag()\n    })();\n\n    function removeDivTag() {\n        console.log(\"remasfljas\");\n        const editorContainer = document.querySelector(\".editor-wysiwyg\");\n        \/\/ editorContainer.innerText = editorContainer.innerText.replace(\"<\/div>\", \"\")\n        Array.from(editorContainer.childNodes).forEach(el => {\n            if (el.textContent.includes(\"<\/div>\")) {\n                el.textContent = \"\"\n            }\n        })\n    }\n<\/script>\n<div class=\"editor-wysiwyg my-[40px]\">\n<div class=\"single-section\"><div class=\"single-section\">\n<p>In June 2023, the Office of the Privacy Commissioner for Personal Data (\u201c<strong>PCPD<\/strong>\u201d) published a report (\u201c<strong>Report<\/strong>\u201d) on the privacy settings of ten common online shopping platforms in Hong Kong, including Baby Kingdom (\u201c<strong>BKmall<\/strong>\u201d), Carousell, eBay, Fortress, HKTVmall, JD.com, PlayStation App, Price.com.hk, Samsung and Taobao (together, the \u201c<strong>Reviewed<\/strong> <strong>Platforms<\/strong>\u201d).<\/p>\n<p>The PCPD compared privacy aspects of the Reviewed Platforms and made a series of recommendations. In summary:<\/p>\n<p><strong>1.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/strong><strong>Privacy policies<\/strong><\/p>\n<p>All Reviewed Platforms had published privacy policies. The data collected by the Reviewed Platforms ranges from 12 to 23 types of data. The Reviewed Platforms commonly tracked the users\u2019 device and location information, and transaction and browsing history.<\/p>\n<p>The privacy policies specified that they transfer personal data to third parties, such as affiliates, related companies, business and advertising partners, and other external service providers.<\/p>\n<p>PlayStation App, eBay and Carousell received a high readability rating for their privacy policies.<\/p>\n<p><span style=\"text-decoration: underline;\">Recommendations<\/span><\/p>\n<p>Online shopping platforms should provide a comprehensive privacy policy, with concise and understandable information to increase readability. \u00a0They should also notify users of activity tracking, the purpose of tracking and provide options for users to accept or deny such tracking.<\/p>\n<p>Users should retain sufficient control of their personal data privacy, such as options controlling the privacy settings of preferences of messages received, tracking, record deletion of transactions and searches and non-registration shopping methods.<\/p>\n<p>Online shopping platforms should appoint a Data Protection Officer to ensure compliance with the Personal Data Privacy Ordinance and establish a Personal Data Privacy Management Programme to implement the PCPD\u2019s recommendations.<\/p>\n<p><strong>2.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/strong><strong>Payment and Purchases<\/strong><\/p>\n<p>Most of the Reviewed Platforms allowed payment through third-party platforms. eBay, Price.com.hk, BKmall and Samsung accepted purchases without account registration with their Platform.<\/p>\n<p><span style=\"text-decoration: underline;\">Recommendations<\/span><\/p>\n<p>Online shopping platforms should use secure payment methods and channels. Platforms assess and ensure the reliability of third party payment services in respect of privacy protection and information security.<\/p>\n<p>Online shopping platforms should consider allowing users to shop as guests, and only collect necessary personal data to process transactions.<\/p>\n<p><strong>3.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 User registration<\/strong><\/p>\n<p>The Reviewed Platforms generally require users to provide their name, mobile phone number or email address for user registration. The majority of the Reviewed Platforms set an 18+ age restriction for user registration. However, some Reviewed Platforms like JD.com, Carousell, and Fortress have no suitable measures to inhibit registration by users under 18. In contrast, HKTVmall and eBay require users to confirm that they are over 18 during registration. Samsung and Playstation App gather data from users in relation to their date of birth to confirm their age.<\/p>\n<p>Taobao, BKmall and Price.com.hk do not designate a minimum age restriction for registration.<\/p>\n<p><span style=\"text-decoration: underline;\">Recommendations<\/span><\/p>\n<p>Online shopping platforms should allow consumers to shop without account registration as guests, and to gather only relevant data to operate transactions. As younger children and teenagers may be able to register an account in certain platforms, the PCPD recommended parents provide appropriate guidance to their children on privacy protection.<\/p>\n<p><strong>4.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/strong><strong>Advertising or promotional messages<\/strong><\/p>\n<p>Samsung, Carousell, Fortress and BKmall supply options during account registration, allowing users to select whether they accept promotional messages. For PlayStation App, HKTVmall, eBay and Price.com.hk the default setting is \u201cagreed\u201d.<\/p>\n<p>Taobao does not provide similar options but instead authorises users to activate and deactivate these personalised recommendations in their settings.<\/p>\n<p>JD.com does not have a mechanism to obtain user consent for advertising or promotional messages.<\/p>\n<p><span style=\"text-decoration: underline;\">Recommendations<\/span><\/p>\n<p>Users should be able to accept or deny the use of their personal data for direct marketing, advertising and promotional messages. The default option for direct marketing consent should not be \u201cagreed\u201d. In addition, all privacy-related options should be set to protect user privacy by default.<\/p>\n<p><strong>5.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/strong><strong>Account deletion<\/strong><\/p>\n<p>All Reviewed Platforms allow for account deletion. Furthermore, JD.com, Price.com.hk, Carousell and eBay provide clear and coherent means for account deletion.<\/p>\n<p><span style=\"text-decoration: underline;\">Recommendations<\/span><\/p>\n<p>Users should be able to easily delete their accounts. This will minimize data retention for users who no longer use the relevant Platform.<\/p>\n<p>The PCPD also published a leaflet titled Tips for Users of Online Shopping Platforms for users to increase vigilance for online shopping safety and decrease risks posed to consumers. The PCPD offered tips to users of online shopping platforms to:<\/p>\n<ul>\n<li>supply the minimum amount of data required;<\/li>\n<li>be aware of the direct marketing settings;<\/li>\n<li>adjust privacy settings to eliminate unnecessary tracking or access to data;<\/li>\n<li>only use reliable third-party payment channels;<\/li>\n<li>read and understand the privacy policies;<\/li>\n<li>delete unused accounts to protect personal data privacy;<\/li>\n<li>verify the authenticity of the relevant Platform;<\/li>\n<li>employ strong passwords;<\/li>\n<li>avoid using public Wi-Fi in transactions;<\/li>\n<li>avoid providing personal data arbitrarily;<\/li>\n<li>report to the PCPD or the Hong Kong Police if there is a suspicion of fraud.<\/li>\n<\/ul>\n<p>The report on \u201cPrivacy Protection in the Digital Age: A Comparison of the Privacy Settings of 10 Online Shopping Platforms\u201d (Chinese version only) can be found <a href=\"https:\/\/www.pcpd.org.hk\/english\/resources_centre\/publications\/files\/pcpd_digitalage_pamphlet.pdf\" target=\"_blank\" rel=\"noopener\">here<\/a>. The Leaflet on Tips for Users of Online Shopping Platforms of the Office of the PCPD (in Chinese) can be found <a href=\"https:\/\/www.pcpd.org.hk\/english\/resources_centre\/publications\/files\/pcpd_digitalage_leaflet.pdf\" rel=\"noreferrer noopener\" target=\"_blank\">here<\/a>.<\/p>\n<p class=\"has-text-align-right\"><strong><em>P\u00e1draig Walsh and Christy Cheung<\/em><\/strong><\/p>\n<p>If you would like to discuss any of the matters raised in this article, please contact:<\/p>\n<p class=\"has-text-align-right\"><a href=\"https:\/\/www.tannerdewitt.com\/our-people\/padraig-walsh\/\" rel=\"noreferrer noopener\" target=\"_blank\">P\u00e1draig Walsh<\/a><\/p>\n<p class=\"has-text-align-right\">Partner | <a href=\"mailto:padraigwalsh@tannerdewitt.com\" rel=\"noreferrer noopener\" target=\"_blank\">padraigwalsh@tannerdewitt.com<\/a><\/p>\n<p>Disclaimer: This publication is general in nature and is not intended to constitute legal advice. You should seek professional advice before taking any action in relation to the matters dealt with in this publication. This article was last updated on 3 July 2023.<\/p>\n\n<\/div><\/div>\n\n<\/div>\n\n\n\n\n<\/div>","protected":false},"excerpt":{"rendered":"<p>In June 2023, the Office of the Privacy Commissioner for Personal Data (\u201cPCPD\u201d) published a report (\u201cReport\u201d) on the privacy settings of ten common online shopping platforms in Hong Kong, including Baby Kingdom (\u201cBKmall\u201d), Carousell, eBay, Fortress, HKTVmall, JD.com, PlayStation App, Price.com.hk, Samsung and Taobao (together, the \u201cReviewed Platforms\u201d). The PCPD compared privacy aspects of [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"tags":[],"insight-category":[1121],"insight-month":[1160],"insight-practice-area":[],"insight-year":[1161],"class_list":["post-29097","insight-and-news","type-insight-and-news","status-publish","hentry","insight-category-legal-updates-and-insights","insight-month-july","insight-year-1161"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.tannerdewitt.com\/zh-hant\/wp-json\/wp\/v2\/insight-and-news\/29097","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tannerdewitt.com\/zh-hant\/wp-json\/wp\/v2\/insight-and-news"}],"about":[{"href":"https:\/\/www.tannerdewitt.com\/zh-hant\/wp-json\/wp\/v2\/types\/insight-and-news"}],"author":[{"embeddable":true,"href":"https:\/\/www.tannerdewitt.com\/zh-hant\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":1,"href":"https:\/\/www.tannerdewitt.com\/zh-hant\/wp-json\/wp\/v2\/insight-and-news\/29097\/revisions"}],"predecessor-version":[{"id":30317,"href":"https:\/\/www.tannerdewitt.com\/zh-hant\/wp-json\/wp\/v2\/insight-and-news\/29097\/revisions\/30317"}],"wp:attachment":[{"href":"https:\/\/www.tannerdewitt.com\/zh-hant\/wp-json\/wp\/v2\/media?parent=29097"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tannerdewitt.com\/zh-hant\/wp-json\/wp\/v2\/tags?post=29097"},{"taxonomy":"insight-category","embeddable":true,"href":"https:\/\/www.tannerdewitt.com\/zh-hant\/wp-json\/wp\/v2\/insight-category?post=29097"},{"taxonomy":"insight-month","embeddable":true,"href":"https:\/\/www.tannerdewitt.com\/zh-hant\/wp-json\/wp\/v2\/insight-month?post=29097"},{"taxonomy":"insight-practice-area","embeddable":true,"href":"https:\/\/www.tannerdewitt.com\/zh-hant\/wp-json\/wp\/v2\/insight-practice-area?post=29097"},{"taxonomy":"insight-year","embeddable":true,"href":"https:\/\/www.tannerdewitt.com\/zh-hant\/wp-json\/wp\/v2\/insight-year?post=29097"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}