Scangate Document
Total Page:16
File Type:pdf, Size:1020Kb
1010011101110010101001101 > Identity matched > Access granted The proposed ' a c c e w hy w e need a national Trusting politicians to protect privacy is risky. wenty years ago, the Hawke-Keating a fatal drafting flaw was found in its enabling legislation. government announced a national identification Its successor, the tax file number system, removed the card (ID) system with the patriotically named and the central computer register, and added more ‘Australia Card’ as its centrepiece. It received serious privacy protections. Although it represented much public support and was the ostensible a reasonable political compromise at the time, Keating had cause of a successful double-dissolution election that reneged on promises not to expand it within two years, resulted in a Labor victory. But 18 months later, it was so and ‘data-matching’ had linked it to the social despised by most Australians that it was withdrawn after welfare system. 3 4 PRECEDENT ISSUE 78 JANUARY/FEBRUARY 2007 FOCUS ON PRIVACY AND FOI Two decades later, the Howard government vehemently THE TASKFORCE REPORT - A SHEEP IN denies that its proposed ‘health and social services access WOLF'S CLOTHING card’ (the Access Card) is a national ID card, saying that it Professor Alan Fels, former competition regulator, heads the rejected such an option. To decide whether this claim is true, ‘Consumer and Privacy Taskforce’, which is charged with comparison with the Australia Card proposal is worthwhile. advising the Minister for Human Services, Joe Hockey, on the The Access Card will effectively be compulsory and near- proposed Access Card. The taskforce also includes a former universal for adults, as was the Australia Card. Like the NSW privacy commissioner (Chris Puplick) and a former Australia Card, it will not have to be carried at all times, but deputy defence ombudsman (John Wood). The taskforce will only need to be produced for certain transactions. has no statutory basis or detailed terms of reference, and The Australia Card was primitive compared with its 21st must report to the minister (not the public). It is nonetheless century successor, a ‘smart card’ that will have considerable perceived by the media, politicians and public to be an chip storage capacity. The data on the face of the Access independent watchdog over this proposal, because of the Card resembles the Australia Card: a unique, universal, presumed credibility of its members. It published its first compulsory national ID number; name; photograph; report, containing 26 recommendations, on 8 November signature and card expiry date. The Access Card will also 2006, to which the government has already responded. record an up-to-date address, date of birth, details of children Is the taskforce living up to expectations, on the evidence and other dependants. The chip will also hold extensive of this report and its recommendations? If a national debate optional data including medical information, and an is required, as suggested above, is it helping to create one? ‘electronic purse’ for which the only use as yet announced is The report sheds no new light on the as-yet sketchy details to make emergency welfare payments directly to the card. In of the government’s proposals, which were not available at addition to its likely capacity to store much more information the time of its background paper almost nine months ago. than this, every aspect of the stored content of the Access Whatever the taskforce has learned, the government doesn’t Card, its accessibility and security, presents far greater want it to say To the suggestion that information concerning dangers than did the Australia Card. chip capacity (R22) should be made publicly available, the As with all ID systems, the card is only the visible part. government has somewhat evasively responded that it (not The back-end computer systems are just as important. Both the taskforce) can easily publish such information ‘when the Australia Card and the Access Card systems depend on it becomes available’. In other words, the less the public is » a central register: the Australia Card Register and now the ‘Secure Customer Registration System’ (SCRS). While the first contained little more than identification information and a current address, the SCRS will also contain a copy of all the s o n y s t y l e emergency contact, medical and other information ‘to allow 0 0 lost cards to be replaced’;1 concession status; and a copy of Be the First with the Latest! all documents initially produced by a person to establish Alliance members receive exclusive their identity, such as birth certificates. It would be hard to pricing on IT products such as: imagine a better source for ID fraud, but the government’s - Sony VAIO Notebooks and Accessories consultants claim it ‘will not contain any sensitive personal information’.2 - Sony 17*, 19* and 20’ LCD Monitors SCRS will be the only comprehensive photographic - Sony LCD Data Projectors database of Australians and will allow ‘one-to-many matching’:3 a national, searchable, photo library technically ALA Members also receive up to 10% off* capable of searching for photos of people appearing in CCTV the rest of the Sony cosumer range! tapes, or in photos taken at demonstrations and strikes. - N Fortunately no such uses have yet been proposed. The For more information please email: proposed extent of networked access to the two registers is [email protected] V___________________________ J much the same as far as government agencies are concerned but, this time, whenever a person visits a GP or pharmacist, Order online: their card will be used to check their eligibility for non www.lawyersalliance.com.au permanent concessions with SCRS. The Australia Card came with a legislative package that through the Alliance Rewards Club section of the website included measures - albeit flawed - to limit potential uses of the number and the card. But the government’s current Terms and Conditions of Use: 1. Offer only available through Sony Style and no other retail outlet. proposals on this point are still extremely vague. 210% applies to all consumer goods (excludes VAIO and Playstation This time around, the government has a docile rather than Products). 3. Offer not redeemable for cash. a hostile senate, so we can expect no deliverance from that 4. Please vist the Australian Lawyers Affiance Rewards Website for direction. What we need is a national debate about whether latest offers - www.lawyersaHiance.com.au we want a national ID card - otherwise we will have such a card imposed on us. JANUARY/FEBRUARY 2007 ISSUE 78 PRECEDENT 3 5 FOCUS ON PRIVACY AND FOI told the better. Nor has the government released the Privacy a person registers for a card, should not be scanned, Impact Assessment on the proposal that it received over copied or permanently stored online in the back-end nine months ago. Its repeated protestations of intended database once they have been verified (R20), contrary transparency therefore continue to ring hollow. to the extraordinarily intrusive recommendation of the Does the taskforce make any substantive KPMG ‘business case’. The governments response is that recommendations? First is a category that could politely be it ‘partially supports’ this recommendation, adding that it called ‘uncontroversial’: ‘will explore relevant legislation and business procedures • Human Services Minister Hockey in a speech to with a view to implementing this recommendation’.6 In the National Press Club, successfully focused media other words ‘we will tell you later which data we would attention on government acceptance of the taskforce like to keep forever, but we might not keep everything’. recommendation that individuals should have ‘ownership’ Ultimately, then, every single taskforce recommendation that of their Access Card (R8). This is different from the would seriously restrict the surveillance potential of the ID ownership of passports, credit cards, etc, which remain card system has either been rejected by the government or the property of the issuing party. Touted as some kind obfuscated sufficiently to allow future rejection. of privacy protection and a guarantee that the Access Two other taskforce recommendations in key areas Card will not become an ID card, this is an exceptionally (the national photo database in R12 and the national silly and trivial proposal. Ownership of a physical signature database in R16) boil down to little more than token provides nothing except some protection against a warning of serious risks, and the consequent need for confiscation (which becomes larceny). What is important strong security controls. One would have to be foolish to about ID cards is that others wish to see them (for the disagree with that. But no particular security requirements photo, name and signature), copy details (the ID number) are specified, or anything of substance suggested by way or scan them (the chip content), none of which has any of appropriate criminal offences or damages for misuse particularly relevance to property in the physical token. or abuse of information stored on the card. Hong Kong’s If anything, this is a reductio ad absurdum of property as recent experience, where 20,000 police complaint files from privacy protection. the previously presumed high-security Independent Police • The lace of a card should be able to show your alias, Complaints Council appeared on the internet, gives an provided its use is not deceptive (RIO). It would be indication of the stakes involved.7 » surprising and alarming if people in the entertainment industry or others who legitimately use names other than their given name in daily life could not do so, so this was accepted. However, an unexpected sting was revealed in the minister’s speech: if you use an alias, the chip on your card will also contain your ‘real’ name.