30 of travel platforms fail to state data retention policies : Hong Kong watchdog

Data retention policies are crucial for protecting personal data in the digital age.

The Importance of Data Retention Policies

In the digital age, online travel platforms have become an essential part of our daily lives. From booking flights and hotels to planning our dream vacations, these platforms have revolutionized the way we travel. However, with the increasing reliance on technology, concerns about data privacy and security have grown. One crucial aspect that has gained attention in recent years is the lack of transparency regarding data retention policies.

The Problem of Unclear Data Retention Policies

According to a recent report by Hong Kong’s privacy watchdog, one-third of online travel platforms do not state their data retention policies.

The Importance of Data Retention in Privacy Policies

Data retention is a crucial aspect of any organization’s privacy policy. It outlines how long personal data is stored and when it is deleted. This information is essential for users to understand how their data is being used and protected.

Key Considerations for Data Retention

Purpose: What is the purpose of retaining personal data? Duration: How long is the data retained for? Security: How is the data protected during retention? * Access: Who has access to the retained data? ## A Review of the 10 Platforms**

A Review of the 10 Platforms

The review covered the websites and mobile applications of 10 platforms. Among the 10, only Agoda, EGL Tours, Expedia, Trip.com and WWPKG had sections on data retention in their privacy policies.

Platform Review

Agoda: Agoda’s privacy policy states that they retain personal data for as long as necessary to provide services, unless a user requests deletion. They also have a data retention schedule that outlines the duration of data retention for different types of data. EGL Tours: EGL Tours’ privacy policy states that they retain personal data for as long as necessary to provide services, unless a user requests deletion. Expedia: Expedia’s privacy policy states that they retain personal data for as long as necessary to provide services, unless a user requests deletion.