Data protection watchdog blasts ID card database

The UK's data protection watchdog has slammed the government's ID card plans saying there is no justification for storing so much personal and biometric information in a central national identity register (NIR).

Information commissioner Richard Thomas warns that the extensive personal information to be retained on the NIR and the requirement for individuals to keep notifying changes in circumstances is "excessive and disproportionate".

The government's Identity Cards Bill, which was given the green light by a majority of MPs earlier this month, will force individuals to disclose all the addresses they have previously lived at and any future change in address.

In a paper outlining his concerns, Thomas says it is difficult to see the relevance of such details once a person's identity has been established by recording their biometric details and issuing the ID card.

He said: "The extent of the information retained as a core part of the NIR is unwarranted and intrusive. The measures in the bill go well beyond establishing a secure, reliable and trustworthy ID card."

Thomas also has concerns about the data trail that will be generated. Details of each ID card will be recorded when it is checked against the NIR and, says Thomas, this will create a snapshot of individuals' card use. From this, a detailed picture of how card holders live their lives could be built up.

He also warns that the ID card data trail could easily be linked with other initiatives such as CCTV surveillance using automatic facial recognition, the use of automatic number plate recognition (ANPR) recording vehicle movements for law enforcement and congestion charging, and proposals to introduce satellite tracking of vehicles for road use charging purposes.

He added: "Each development puts in place another component in the infrastructure of a 'surveillance society'. To avoid this it is important that each component limits to the minimum the recording of information about individuals, otherwise we risk unleashing unwarranted intrusion into individuals' lives by government and other public bodies."

Other ID card concerns outlined by the Information Commissioner include the technical and administrative arrangements for the scheme, the breadth of organisations with access to the NIR and the lack of power for checks on data protection compliance and the investigation of problems experienced by individuals.

The ID cards bill is due to begin its passage through the House of Lords next week where it is expected to get a tougher reception than it did from MPs. Just this week two separate reports by House of Lords committees slammed the bill over the lack of safeguards for privacy, security and human rights.