In striking a reasonable balance between public health and personal privacy, we have to recognise that the right to privacy is by no means absolute. Even so, Hong Kong’s vaccine pass adopts privacy protection by design and has undergone security assessments and audits by independent third parties.