Credit: Thinkstock Yahoo Holdings (Hong Kong) could face a fine, a civil lawsuit or both if it is found to have illegally divulged personal data used to put a Chinese journalist in jail for 10 years.Hong Kong Legislator Albert Ho on Thursday filed a complaint with the government on behalf of convicted Chinese journalist Shi Tao and a friend who traveled to the city. They argue that a Hong Kong company has no reason to comply with a Chinese request for information, and requested that Hong Kong’s Office of the Privacy Commissioner for Personal Data investigate the matter.Tao, formerly an editorial department head at the Contemporary Business News in China’s Hunan Province, was convicted last year of divulging state secrets by Beijing, in part due to an e-mail Yahoo handed over to Chinese authorities that contained a government warning for commissars to be on guard for dissident activity ahead of the 15th anniversary of the Tiananmen Square massacre.“We are still looking into the facts to decide if we will carry out a formal investigation,” said Shirley Lung, a spokeswoman for the privacy commission. The agency is required to answer the complaint within 45 days, she said, adding that it will try to decide whether to move forward on this issue “as soon as possible.” Although a ruling by the privacy commission is not necessary for a civil lawsuit in Hong Kong, any censure of Yahoo Hong Kong would greatly help a civil case against the company. Any Hong Kong government fine or other penalty would be applied to Yahoo only after a privacy commission warning was issued. If the company failed to heed the warning and change its business practices, a penalty would be imposed.Yahoo denied any involvement in the case by its Hong Kong arm. “Yahoo Hong Kong was not involved in any way in the disclosure of information in Mr. Tao’s case,” said Mary Osako, a spokeswoman for Yahoo at the company’s Sunnyvale, Calif., headquarters, adding that it was Yahoo’s China unit that complied with the order.She was not immediately able to identify where the servers that contained Tao’s e-mail data were located.Yahoo has argued that it was only following Chinese law when it provided evidence that helped land Tao in jail, but the incident, along with other freedom of expression issues related to U.S. companies, has sparked a wave of indignation among U.S. lawmakers.In February, Rep. Christopher Smith introduced legislation that would bar U.S. Internet companies from locating Web servers inside “Internet-restricting” countries such as China, with stiff penalties for those that don’t comply. The bill says U.S. technology companies have succumbed to pressure by authoritarian foreign governments, and are failing to uphold their corporate responsibility to protect and uphold human rights.The bill would make it harder for foreign governments to force companies to turn over customer information by keeping the servers containing the data outside their borders. But it wouldn’t be an easy task for companies to comply with. China, for example, maintains firewalls and censors that significantly slow the transfer of data from offshore servers, making it important for companies to keep them inside the country. But placing servers in China gives authorities greater control over company activities and far easier access to user data.Representatives from Yahoo, Google, Microsoft and Cisco Systems were all lectured by U.S. lawmakers in a February meeting for failing to uphold free expression in China. The lawmakers harangued Yahoo over Tao, Google for censoring results at its China search engine, and Microsoft for removing from MSN Spaces a blog written by a Chinese journalist. They also questioned Cisco on whether it is helping the Chinese government block access to some websites by selling it network management equipment. -Dan Nystedt, IDG News ServiceCheck out our CIO News Alerts and Tech Informer pages for more updated news coverage. Related content opinion Website spoofing: risks, threats, and mitigation strategies for CIOs In this article, we take a look at how CIOs can tackle website spoofing attacks and the best ways to prevent them. By Yash Mehta Dec 01, 2023 5 mins CIO Cyberattacks Security brandpost Sponsored by Catchpoint Systems Inc. Gain full visibility across the Internet Stack with IPM (Internet Performance Monitoring) Today’s IT systems have more points of failure than ever before. Internet Performance Monitoring provides visibility over external networks and services to mitigate outages. By Neal Weinberg Dec 01, 2023 3 mins IT Operations brandpost Sponsored by Zscaler How customers can save money during periods of economic uncertainty Now is the time to overcome the challenges of perimeter-based architectures and reduce costs with zero trust. By Zscaler Dec 01, 2023 4 mins Security feature LexisNexis rises to the generative AI challenge With generative AI, the legal information services giant faces its most formidable disruptor yet. That’s why CTO Jeff Reihl is embracing and enhancing the technology swiftly to keep in front of the competition. By Paula Rooney Dec 01, 2023 6 mins Generative AI Digital Transformation Cloud Computing Podcasts Videos Resources Events SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe