Octopus Cards Limited
| Company type | Subsidiary |
|---|---|
| Industry | Payment systems |
| Predecessor | Creative Star |
| Founded | 1994 |
| Headquarters | Hong Kong , Hong Kong |
Key people | Prudence Chan (CEO) |
| Products | Octopus card, Octopus System |
| Parent | Octopus Holdings Limited |
Octopus Cards Limited () is responsible for operating the Octopus rechargeable contactless smart card payment platform in Hong Kong.
As a fully owned subsidiary of Octopus Holdings Limited, Octopus Cards Limited was founded in 1994 under the name "Creative Star" by key transportation companies in Hong Kong. The company oversees the Octopus System and is the issuer of the Octopus card.
Introduced in 1997 to facilitate easier fare payments for public transit, Octopus later expanded its functionality to include micropayments for retail transactions, building entry, and identity verification. The company adopted the name Octopus Cards Limited in 2002 and became part of Octopus Holdings Limited following a corporate restructuring in 2005. Presently, more than 440 service providers accept Octopus cards, with continuous efforts to broaden its range of applications.
Once acclaimed internationally as a pioneering contactless smartcard system with extensive market penetration and transaction volume, Octopus now contends with challenges posed by the swift adoption of mobile payment technologies.
Controversy over use of personal data
In mid-2010, Octopus encountered public backlash after reports emerged of unsolicited marketing calls allegedly made by its business associates. CEO Prudence Chan initially refuted claims that personal data had been shared but acknowledged that cardholders consented to data usage when enrolling in the Octopus reward program, which included an option to opt out. The situation escalated when a former employee of CIGNA alleged that Octopus had acquired data on 2.4 million reward program members. During a Privacy Commission inquiry, it was disclosed that Octopus sold personal information to CIGNA and other parties for HK$44 million, revealing that six vendors had accessed such data since 2002, with two partnerships still active. Criticism grew over inadequate protections preventing the transfer of data beyond Hong Kong's jurisdiction. Chan issued an apology before the Legislative Council's finance committee, conceding she might have mischaracterized the term "selling" regarding personal data. Lawmakers from all political factions called for her resignation, citing public deception and harm to the company's credibility and consumer trust.