UK Parliament / Open data

Identity Cards Bill

Proceeding contribution from Lord Bhattacharyya (Labour) in the House of Lords on Monday, 31 October 2005. It occurred during Debate on bills on Identity Cards Bill.
My Lords, it is difficult to follow that. First, I congratulate my noble friend Lord Soley on a brilliant speech. Only he could do it in that style. Obviously, most of the reasons that I shall give in support of identity cards will be based on my own experience. This ongoing debate about identity cards has been one of claim and counterclaim. Those who have championed the cards see them as a golden bullet that will eliminate terrorism and all crime. Those who oppose them see them as a monstrous diversion with the Government spending billions which would be better spent on better and more effective policing, and an enormous attack on civil liberties. As usual, in these situations, the truth lies somewhere in the middle. I see the development of identity cards as part of the ongoing technological evolution of our passport system. It is inevitable. Today, as my noble friend Lord Giddens said, because of globalisation our very way of life and the structure of our economy and society require the international movement of people to a degree that would have staggered our forefathers. The figures that my noble friend gave regarding the number of people travelling through airports were staggering. Of course, we need secure methods of proof of identity to facilitate, and not hinder, free movement. Driving economical and social integration, that freedom of movement is available to those with the good intentions of doing business, creating jobs and opening up markets, but it is also available to those with less noble intentions. It is in that environment that I believe the question of identity and identity theft becomes a major problem. The explosion in information technology has made the world a much smaller place. When there was a paper trail, identity fraud was always possible but it was difficult. One irony is that, with electronic systems, identity theft has become a great deal easier. The scope for a catastrophic error over identity is greatly amplified by the information being passed through a computer. To some extent, new technology has been the source of the problem but it also has the power to be the solution. It is not the computer that is important; it is the way that data are entered. In this new world, I believe that the move towards an electronic system of identity in the form of a national identity card system is an inevitable process. As someone who undertakes complex transactions internationally, proof of identity is one of those significant botheration factors with which one has to contend in every transaction. I am not complaining. The regulations and rules that have been put in place are there to protect me as much as anyone else. They are essential if we are to combat money laundering and illegal trafficking. But the problems highlighted by the noble Lord, Lord Thomas, in relation to botheration will arise anyway. We should not be alarmed by this process. After all, our system of issuing passports has, over time, gone through a process of constant evolution. Today, of course, as travel has become even more common and criminals have become ever more sophisticated, we are constantly trying to stay one step ahead of the criminals by developing our passports as ever more secure documents. However, as technology develops, the factors that we are able to use for identification purposes have expanded vastly. That is a good thing. The more factors we can employ in a person’s identification, the higher the chance of getting it right. Clearly, the statistical use of biographical data or biometrics has opened up some new possibilities. Biometric identification becomes possible with modern sensors and modern information technology. That is why biometric systems are sweeping the world. Already more than 30 countries have embarked on using biometric systems for identity purposes. As a technologist, I have no doubt whatever about the security of the system. Some of the systems that are being, and have been, developed are so sophisticated that a high degree of information is not needed for the unique identification of a person . I am sure that noble Lords are well aware that since 9/11 extra levels of security have been demanded for entry into the United States. On entry into the US, all visitors have their fingerprints and facial biometrics recorded. That has had a knock-on effect across the world. Particularly for those of us who are non-Anglo-Saxons, even with UK passports, getting into the US is very time-consuming and seems to make us somehow more suspicious to the authorities. It is not just the US where that happens. Except in India, I am a member of an ethnic minority wherever I go, and one gets used to the fact that one is always randomly stopped and searched in most advanced countries. That is not just paranoia. Recently on returning to the UK, I was asked by officials whether I could speak English. Naturally I said, ““Yes, just a little””. So is it any wonder that, even with my passport, I feel that my identity would be better demonstrated if I had a more secure and definitive identity document. Biometric identity cards are therefore a necessary part of a modern state’s toolkit when it comes to protecting the citizen. What is more, they are also a necessary protection for the member of an ethnic minority who seeks to demonstrate his identity and his right to be in a particular place at a particular time. I am not averse to carrying identity cards all the time. In Britain, we have a tremendous record of letting people travel without let or hindrance, and that is something that we must protect. We need to be able to prove our identity wherever we may be. It is true that in many ways modern security requirements are the bane of our lives, but they are the necessary flipside of the enormous social and economic benefits of globalisation and freedom of movement. I know that, for many, the very thought of having to carry proof of identity is offensive. Yet only the other day I was caught without any identification when I tried to pick up a parcel from the post office. As someone who does not carry his gas bill around with him, I had none of the necessary approved documents that would have demonstrated my identity, and that meant that I had to make a return journey. The questions that we have to answer at this stage are really of a technical nature: what information do we need to keep on an individual; how secure is the information being stored on us; and, is the whole project feasible? That is entirely to do with vaulting in computers. It is not rocket science; it is purely a question of how we vault information in the computer and how we retrieve it. Today, a huge amount of information or data are already stored on us. Someone asked why we should answer when asked for our mother’s maiden name. If you do not give your mother’s maiden name, you cannot get into some of the funds into which you want to invest. You will be asked your mother’s maiden name and your date of birth before you do anything. Today, the information held on individuals has to be correct and the individual must have the right to know what is kept on his record. That is already the case under data protection legislation. That is very important. We all know that misinformation and plain untruths often travel a great deal faster than the truth. We must have absolute confidence in the privacy and security of the National Identity Register. After all, if identity theft is a problem now, imagine what a problem it would be if an identity could be stolen from the register. It is vital to ensure that we have in place the necessary constitutional checks and balances and that both the accuracy of any register and its security are safeguarded. That is the role of the National Identity Scheme Commissioner. We must also remember that we are talking about an IT system and we must have an unprecedented level of security. It can be designed in such a way as to prevent failure and attacks in all forms, including data theft, disruption, distortion and corruption. Importantly, that will mean not subcontracting the work out to the lowest bidder, not allowing the private sector to use the register for commercial exploitation or outsourcing any aspect of the register, including data entry, to some low-cost foreign centre. The final question is whether the project is feasible. I believe the answer has to be yes. We have the ability to manage large databases on this scale and they will be able to deliver the information we want quickly enough for it to be usable. It is also possible to build in the necessary stability and resilience into the system to ensure full failure protection with zero downtime. After all, we cannot have a system which, when one arrives at Heathrow at 11 o’clock at night, says, ““Your identity is occupied at the moment, please try later””. There are ways to avoid pitfalls and to overcome the teething problems that any system will bring with it; that is by rolling out the system gradually and fine-tuning the processes and equipment as we go along, setting the parameters to the application. We have to understand the capabilities of this technology. Equally, we have to know what it cannot do and set ourselves the task of delivering a system that is effective but practical. If I have a fear, it is not that the system will not work, but that it will succeed beyond our expectations. About five years ago, I was hospitalised—rushed into A&E at midnight. A young, overworked casualty doctor came to me and said, ““Can you speak English? What is the matter with you, and be quick?””. Fortunately, once diagnosed, I was quickly on the road to recovery. A national identity card would not eliminate rudeness, but I can see that there would be pressure to include on a successful identity system key medical questions, prescriptions, medical reports and, as we move towards genetic fingerprinting, our DNA. As the Government face pressure to reduce the number of separate back-office systems for different government departments, pressure will mount for common data sets. Tax or employment information, VAT registration, and so on could all be incorporated into a data set. That is where the issues of organisation and the right to access documents becomes critical. That has nothing to do with the technical problems. There is a point where knowledge about a person becomes power over that person. That is the point at which we become a police state. I believe that when the Government ask to increase the amount of information centrally held on a person, that has to be decided by Parliament. Lastly, on the issue of access, I am reassured that the mechanisms put in place to ensure security of access are now being handled very well. They are easily handled because some of the very secure information that is held in computers now is pretty secure, but what about when one is overseas? What access will foreign governments have to information about us? There are some, I am sure noble Lords will agree, who cannot be trusted with more than the basic facts of identification. I believe that those issues can be resolved as one of our ambitions is to protect our freedom of movement. However, we have to be conscious of how our systems fit into a complex international picture, where many countries will not be as technologically advanced as we are. I welcome the opportunity to raise these issues but, none the less, ask the House to support the Second Reading of the Bill.

About this proceeding contribution

Reference

675 c52-5 

Session

2005-06

Chamber / Committee

House of Lords chamber
Back to top