According to the Data (Privacy) Ordinance