Note: this blog is a mirror of my HP Labs Blog, on the same topic, accessible at: http://h30507.www3.hp.com/t5/Research-on-Security-and/bg-p/163

Monday, July 23, 2007

United States’ “REAL ID Act”: a Threat to Privacy?

An interesting post by “Burton Group Identity Blog” (http://identityblog.burtongroup.com/bgidps/2007/05/reporting_on_a_.html) highlights various privacy threats and consequences that the “REAL ID Act” (http://en.wikipedia.org/wiki/REAL_ID_Act) might have on US citizen, as reported by the DHS’ Data Privacy and Integrity Advisory Committee. This Act will be enforced from the end of December 2009 …
I tend to agree about the potential issues this Act could bring – in particular with some of the conclusions drawn by the Advisory Committee (http://www.dhs.gov/xlibrary/assets/privacy/privacy_advcom_05-2007_realid.pdf):
“The REAL ID Act is one of the largest identity management undertakings in history. It would bring more than 200 million people from a large, diverse, and mobile country within a uniformly defined identity system, jointly operated by state governments. This has never been done before in the USA, and it raises numerous policy, privacy, and data security issues that have had only brief scrutiny, particularly given the scope and scale of the undertaking …”
Recommendations made by the Committee are actually about principles (on consent, notifications, access to data, accountability, etc. - see OECD privacy guidelines - http://www.oecd.org/document/18/0,2340,en_2649_34255_1815186_1_1_1_1,00.html) that are at the very base of privacy rights – rights that should be taken for granted in these days. Hopefully there will be enough time to take these recommendations into account …

No comments: