What data can Hong Kong insurers collect?
Hong Kong Insurance Connect: Insurers may need relevant personal and medical data, but collection must be justified. Read the collection statement and use PDPO access and correction routes where appropriate. [C1, C2, C3] Checked on .
Checked on · Public sources; general information, not advice.
What should the collection statement explain?
PCPD guidance says the statement should explain the collection purpose, whether supplying data is compulsory or voluntary, the consequences of not supplying it, possible recipient classes, and access and correction contacts. Before uploading identity or financial records, ask which entity receives them and why they are needed. A broad request deserves clarification; do not treat every requested document as automatically necessary. [C1]
Can an insurer ask for my entire medical history?
PCPD insurance guidance requires insurers to consider whether each medical-data item is necessary; collection should be lawful, fair and not excessive. Ask how the requested records relate to underwriting or the claim. This does not remove your duty to disclose material health information honestly. Resolve unclear scope with the insurer or a licensed broker rather than silently omitting relevant information. [C2, C9]
How do I request access or correction?
Use the prescribed data access form and identify the personal data sought, with enough information to locate it. Identity verification and statutory exceptions can affect the response. If the supplied data are inaccurate, make a written correction request with evidence. For a disputed underwriting or claim decision, separately ask the insurer to explain the policy terms and consult a lawyer about disputed legal rights. [C3, C9]
Can the insurer charge for access to a medical report?
An access fee is possible, but PCPD says it must not be excessive or calculated on a commercial basis. Its insurance case explains that buying a report from a medical provider does not automatically make that purchase price the access fee. Ask for the fee basis and keep the request, response and payment correspondence. Raise unresolved privacy concerns with PCPD. For coverage questions, ask the insurer to clarify the policy terms. [C3, C4, C9]
What do readers ask?
Is a collection statement worth reading?
Yes. It explains purposes, recipients and access contacts. [C1]
Can medical records be collected for underwriting?
Yes, where justified; relevance and necessity still matter. [C2]
Can privacy concerns justify concealing health facts?
Do not conceal material facts; clarify the collection scope. [C2, C9]
Must I identify the data I want?
Provide enough detail for the data user to locate it. [C3]
Can I correct inaccurate personal data?
Use a written correction request with supporting information. [C3]
Must an access request always be free?
No, but an excessive or commercial access fee is inappropriate. [C4]
Who should clarify disputed policy terms?
Ask the insurer directly; seek a lawyer for disputed legal rights. [C9]
Where can I read more or ask a process question?
Health disclosure Signing documents Country guides Trust checks Historical fulfillment ratios Life-stage hub Ask a general process question
We provide information and referrals to a licensed Hong Kong broker; regulated advice and arrangements belong with that broker. Mainland visitors must sign in Hong Kong. Do not send identity, tax or medical documents through the general enquiry form. [C9]
Where are the sources?
Checked on . Public official sources; linked documents remain on their publishers’ sites.
-
[C1] PCPD — Newsletter, Personal Information Collection Statement explanation. https://www.pcpd.org.hk/misc/dpoc/newsletter155.html
-
[C2] PCPD — Guidance on the Proper Handling of Customers’ Personal Data for the Insurance Industry, medical data collection. https://www.pcpd.org.hk/english/publications/files/GN_insurance_e.pdf
-
[C3] Hong Kong Observatory / PCPD — Exercising Your Data Access Rights Under the PDPO. https://www.hko.gov.hk/en/privacy/leaflet.htm
-
[C4] PCPD — Case note, Insurance company imposed excessive fee on a customer’s data access request. https://www.pcpd.org.hk/english/enforcement/case_notes/casenotes_2.php?content_nature=&content_type=&id=2024C09&msg_id2=600
-
[C9] IA — Tips on buying insurance; Mainland visitor sales and signing requirements. https://education.ia.org.hk/en/faq.html
Public sources; general information, not advice.