The foundation for security and enterprise management
Recently I've been talking about identity-related initiatives from both the U.S. and Canadian governments. There was even a mention of some privacy issues raised by the Canadians. So as not to be overlooked, today I want to mention a new privacy initiative from the U.K. government.
The Information Commissioner's Office (ICO) is the United Kingdom's independent authority to promote access to official information and to protect personal information. It recently set up a three-month research project with the aim of producing a comprehensive business case for investing in proactive privacy protection. The project will explore methods involved in implementing business processes and procuring information systems, and will detail the role and value of personal information for organizations that handle it. Organizations in both the public and private sector will be included. Independent consultants Watson Hall are conducting the research. More details can be found here, which also contains a link for the public to comment.
Privacy was also on the minds of the folks at the Electronic Freedom Foundation (EFF). Andrew J. Blumberg, a professor at Stanford University, and Peter Eckersley, a Ph.D. candidate at the University of Melbourne, have co-authored a white paper, "On Locational Privacy, and How to Avoid Losing it Forever". Their thesis is that electronics, which make our lives richer, more efficient and less of a hassle, also make it easier for someone (such as "big brother") to keep tabs on us. They mention:
* Monthly transit swipe-cards
* Electronic tolling devices (FastTrak, EZpass, congestion pricing)
* Cell phones
* Services telling you when your friends are nearby
* Searches on your PDA for services and businesses near your current location
* Free Wi-Fi with ads for businesses near the network access point you're using
* Electronic swipe cards for doors
* Parking meters you can call to add money to, and which send you a text message when your time is running out
They then outline a worst-case scenario for government oppression (read the paper for the details). Fortunately, they do understand the difference between privacy and anonymity (which many in this conversation don't -- see my notes here, here and here.) and fall short of calling for an outright ban on locational data. They do ask that people building location-based applications build in a respect for privacy, and for that I applaud them.
Read more about security in Network World's Security section.
Dave Kearns is a consultant and editor of IdM, the Journal of Identity Management.