New App's Data Privacy Assured

The LeaveHomeSafe mobile app has undergone the security risk assessment and audit as well as a privacy impact assessment conducted by independent third parties to ensure its compliance with the Personal Data (Privacy) Ordinance.

Secretary for Innovation & Technology Alfred Sit made the statement in the Legislative Council today, saying that the mobile app can be used immediately without the need for registration of any information.

Upon entering a venue, the public can use the app to record the visit themselves by scanning the venue's QR code.

He stressed that the data will be encrypted and stored in the user's own mobile phone, and will not be stored in any government or other systems. Such data will also be automatically erased after 31 days.

The app will not use the GPS function or other data in the mobile phone. It adopts the AES-256 encryption standard to protect the travel records saved in users' mobile phones, Mr Sit explained.

Mr Sit noted that there are over 10,000 public and private venues participating in the scheme to post LeaveHomeSafe venue QR codes. Passengers can also directly use the mobile app in over 18,000 taxis to record journeys.

He added that he believes relevant business operators will encourage and help their customers use the mobile app, but whether to use it or not remains their own choice.