The privacy commissioner for personal data mr . raymond tang has approved the scope and content revealed in the first privacy compliance audit report ( " the report " ) submitted by the transunion information services limited ( " transunion " ) 个人资料私隐专员邓尔邦先生审核了环联资讯有限公司(下称环联)呈交的首次循规审核报告，并就其范畴及内容予以核准。
From june 2004 to 31 march 2005 , the pco conducted 95 compliance checks most of which ( 87 ) were related to practices of private sector organizations and the rest 8 were related to government departments and statutory bodies 自去年六月至本年三月三十一日，公署共进行了95次循规查察行动。当中大部分( 87次)与私营机构的行事方式有关，其馀8次则关乎政府部门及法定机构。
A cra should implement an access log record system of all instances of access to its credit database by credit providers and keep it for not less than 2 years for examination by its compliance auditor andor the privacy commissioner 信贷资料服务机构应建立一个查阅记录系统，以记录信贷提供者查阅其信贷资料库的所有情况。这些记录应保留最少两年，以便循规审核人或私隐专员审阅。
Pursuant to the code , transunion is required to arrange for the succeeding annual compliance audit within 12 months from the approval date of the first report , and submit it to the privacy commissioner within three months from the commencement of the compliance audit 根据守则，环联应在首份报告的核准日期起计12个月内进行下一份循规审核，并在开始进行循规审核后三个月内向专员呈交报告。
Having assessed measures such as practices , processes , procedures , internal controls and access security in place at the transunion , the auditor came to the conclusion that transunion had adequate control measures in place to comply with the requirements of the code applicable to a cra 循规审核人评核了环联的实际工作情况、程序、步骤、内部管制及查阅的保安措施后，认为环联有作出足够管制措施以遵从守则内有关信贷资料服务机构的规定。
" many of my peers and i have invested ever more than before in fostering a compliance culture in our own companies . i have recently appointed an officer to work full - time on compliance matters - upgrading system control , injecting integrity elements to our workforce and clients , etc . " , added mr lee 李先生继续说：我和不少同业积极在公司内培育守法循规文化，最近我聘请了一位监察部主任，全职负责加强系统监控，向员工及客户推广廉洁讯息等。
The second revision of the code , which took effect on 2 june 2003 , stipulated that a cra should carry out the first compliance audit within six months from the effective date and the report should be submitted to the privacy commissioner within three months from the commencement of the audit 守则的第二修订版在二零零三年六月二日生效，订明信贷资料服务机构应在守则生效日期后六个月内进行首次循规审核，并于开始进行循规审核后三个月内向专员呈交审核报告。
The major duties of the chief privacy compliance officer include undertaking examination , inspection , standards assurance and compliance audit of personal data systems of organizations in the private and public sectors , monitoring actions taken to ensure compliance with the requirements of the ordinance as well as reviewing , assessing and advising on privacy protection policies development in relation to organizational practices or public policies 首席审核主任主要工作范围包括：对公私营机构的个人资料系统进行审查、视察、标准保证及循规审核等工作；遵守条例规定的措施作出监察；以及就机构作业方式或公共政策涉及的私隐保障方针作出检订、评估及提供意见等。
The credit provider should then undertake a prompt investigation of the incident . ensuring compliance as a matter of good practice , a cra is recommended , at its own expense , to commission an independent compliance audit annually to verify whether its data management practices are adequate in terms of enabling the agency to comply with the requirements of this code 作为一项良好的行事方式，现建议信贷资料服务机构应每年自费进行独立的循规审核，以查对本身的资料管理措施是否足以确保机构符合本守则的规定，藉以令循规审核人在由开始进行审核日期起计三个月向私隐专员提交审核报告。
Pursuant to the code of practice on consumer credit data ( " the code " ) , a credit reference agency ( " cra " ) is required to engage an independent compliance auditor to conduct regular compliance audits to ensure that it has taken adequate and efficient measures to comply with the requirements of the code in terms of protection of consumers personal data privacy 根据《个人信贷资料实务守则》 (下称守则) ，信贷资料服务机构应聘用独立循规审核人定期进行循规审核，确保该机构为遵守守则的规定已经采取了充份及有效的措施来保障客户的个人资料私隐。
