Credit Report Authorization Form Template for Hong Kong

When you need to access someone's credit information in Hong Kong, you must obtain their explicit written consent through a Credit Report Authorization Form. This document is not just a formality—it's a legal requirement under Hong Kong's Personal Data (Privacy) Ordinance that protects individuals' financial privacy while enabling legitimate credit assessments.

When do you need this document?

You'll need a Credit Report Authorization Form whenever you're applying for credit facilities, renting property, or seeking employment where financial background checks are required. Banks and licensed money lenders require this form before processing loan or credit card applications. Property management companies use it to assess potential tenants' financial reliability. Employers in financial services often request authorization to verify candidates' creditworthiness. Insurance companies may also require credit checks when determining premium rates or coverage eligibility.

Key legal considerations

The form must include specific elements to be legally valid in Hong Kong. You need to clearly identify the individual providing consent with their full legal name and HKID or passport number. The authorization statement must explicitly mention which credit reference agencies are authorized to release information. The purpose declaration section should specify exactly why the credit report is needed—vague statements like "business purposes" are insufficient. The scope of authorization must detail what types of credit information can be accessed and any limitations on use. Include data retention periods and specify who will have access to the information once obtained. The form should also inform the individual of their rights under the Personal Data (Privacy) Ordinance, including their right to access and correct their personal data.

Legal requirements in Hong Kong

Hong Kong's Personal Data (Privacy) Ordinance requires that consent for credit checks be freely given, specific, and informed. The Code of Practice on Consumer Credit Data provides additional guidelines that credit reference agencies and financial institutions must follow. Under these regulations, the authorization must be in writing and cannot be bundled with other consents—it must be a separate, clear agreement. The Banking Ordinance and Money Lenders Ordinance also impose specific requirements on how financial institutions handle credit information. Organizations must ensure they only collect credit data that is necessary for the stated purpose and must implement appropriate security measures to protect the information. The individual providing authorization has the right to withdraw consent at any time, and organizations must have procedures in place to handle such requests. Failure to comply with these requirements can result in significant penalties under Hong Kong law.