I suggest supplying the salary before actually complaining.
Or perhaps the complaint could be about the process… (requiring a jpeg which is less secure than a PDF)
Mind explaining that bit?
With PDF you can encrypt them and put a strong password on them etc…
PDF also has logs that show if they have been tampered with
More like this. I don’t really want to let them know my salary paid in HK.
Why require someone to make a jpeg from a PDF file. HSBC HK PDF’s should be enough.
Yeah and then provide password in the same email/form. But I see where you’re coming from.
Just asking about the security part. As for why they don’t want pdf… could be because jpg is easier to deal with. PDF is actually a complex format and can have scripts inside. Jpg is just a bunch of pixels. Not an excuse for a big bank though.
When I worked at the bank we actually ALL external attachments blocked on our emails. We instead had a secure link we could send out where clients could upload their images, pdfs etc before being scanned an emailed to me through a secure internal system.
It may sound complex but very simple and much better than the often “line me the…” that you get from banks in Taiwan
Well I could use a PDF to Jpeg convertor. Can’t be arsed. When I bought my car got a loan PDF was fine. I’m just lazy. Also why cannot my current spending and payments be enough it’s not like I am a new person with no credit history ffs
that’s the only PCI secure way of sharing sensitive data.
Uploading also to a webportal or mailing in or handing in at branch is PCI compliant.
Sharing unprotected documents via email is a nono, funny we could actually report this to the PCI council and get them stripped of their certification. they wouldn’t be able anymore to handle card and banking data, since you are required to have PCI certification to work with networks and SWIFT.
Maybe I should complain then? FSC? Might do some quarrel picking lol
not FSC tbh, not their job.
either PCI council
or maybe the privacy watchdog. It seems here the Ministry of Justice and the NDC is in charge of the privacy enforcement.
Thanks I will look into this. I am learning from you a lot hahahaha
I’ve been too comfortable doing nothing.
Really? That would be funny! Pick a bank you don’t like. Apply for a credit card and then ask the PCI council why this bank can accept documents over email now
need to check again the certification docs (the security officer dealt with this mostly), but there is a definite set of info you can only share or be shared to via secure channels only, i.e. proprietary webportals or restricted communication channels (like online proprietary chats with highend encryption), courier/post, fax or physical submission.
Not really helpful, but I have a Chinatrust card with a 450k limit. The trick is to work for a famous company, and then get the executive secretary (not mine, my boss’s) to call them and make you sound super important. If you don’t have one of those, an actor would probably work 
makes sense with their concept of face. BS tbh though
Total BS, yeah. But when in Rome …
But did they supply your salary level to CT?
Probably, but I was only making ~120k/mo at the time.
subtle 
but ok