Privacy advocates are making a last-ditch effort to muster public opposition to the controversial Real ID bill, which proposes to create a national US standard for issuing state drivers' licences and other forms of state-issued identification.
A broad coalition of more than 40 organizations has launched a national campaign urging the public to submit comments to the US Department of Homeland Security (DHS) expressing opposition to Real ID.
The deadline for submitting comments on a set of draft regulations for implementing Real ID is May 8. Those regulations were released by the DHS in March.
"Basically this large coalition is trying to solicit public comment to stop the national ID system created by the Real ID Act," said Melissa Ngo, senior counsel for the Electronic Privacy Information Center (EPIC), a US-based privacy group. "There already is a large groundswell of public support against this national ID program. What we are trying to do is rally the public. They didn't get a chance to speak out when Real ID was pushed through Congress attached to a military funding bill."
The Real ID Act of 2005 was passed as part of a wider effort to combat terrorism. It establishes certain minimum national standards that states must use when issuing drivers' licences and other forms of identification. This includes a photo ID, documentation of birth date and address, proof of citizenship or immigration status and verification of Social Security numbers. States are required to hold digital images of each identity document for periods ranging from seven to 10 years. The cards themselves will include all of the standard elements found on most drivers' licences today and will be machine-readable to allow for the easy capture of information from the card.
Under the Act, all state driver's licence databases would be linked, with shared access across them. The system will allow information in a person's record in any state to be accessible by officials in other states and by the federal government. The database could include images of birth certificates, marriage licences, Social Security numbers, divorce papers and other information used to issue state identification cards.
Though states are not required to issue Real ID cards, individuals would need Real ID-compliant cards for air travel or for getting into federal buildings such as courthouses and nuclear facilities - even for receiving federal benefits such as Medicaid or Social Security.
"Make no mistake, this is a national identification system that will affect your everyday life" and could eventually be used for a wider range of purposes than the DHS has stated, Ngo said.
The act substantially changes how drivers' licences are issued and used, said Pam Dixon, executive director of the World Privacy Forum, a US-based advocacy group.
"The biggest difference is that a licence will be linked to a centralized database" accessible from anywhere, Dixon said. The sheer size of the database, the kind of information it will contain and the number of access points it offers make it more susceptible to security threats, she said. But the DHS has set no minimum privacy or security safeguards to protect the data from external or internal compromise or misuse, she said.
"The stated goal of this system is to make the country more secure, but no studies have been done to really substantiate that," Dixon said. "This has been done backwards. We need a vigorous national debate on this," she said.
Machine readable drivers' licences and identity cards that are linked to a central access point raise privacy implications for library users, said Tara Olivero, assistant director of government relations at the American Library Association. "[Real ID] would create a national database of information," she said. "We are concerned that the data could be used for purposes that were never intended such as profiling and even surveillance. All of us are for the security of the community and we are all aware of the new threats. We are a smart and innovative group of individuals in this country. We can develop new security that also protects privacy and civil liberties."
The Act would also result in significant administrative burdens and expenses for state governments, which will need to update driver's licence issuing processes and systems, she said.
Montana, Maine, Idaho, Arkansas and Washington have already said they will not issue Real ID cards as defined by the DHS. Several members of Congress have also expressed their opposition to the bill. Senators Daniel Akaka and John Sununu in February introduced a proposal called the Identification Security Enhancement Act of 2007 that would fix some of the shortcomings in the Real ID Act. The bill's co-sponsors include Senators Patrick Leahy and Jon Tester.
Meanwhile, Tom Allen introduced similar legislation in the House in February. His bill, the Real ID Repeal and Identification Security Enhancement Act of 2007, seeks to address some of the concerns raised about the Real ID Act.
- +
Ticked Off at Tick the Box Mentality 04 February, 2008 13:01:15
Does your executive search firm know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?Does your executive search firm know its MIS managers from its elbow? Does it even know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients? - +
Strategies for Dealing With IT Complexity 24 December, 2007 10:30:47
Every innovation, every business process improvement, comes with an IT complexity tax that must be paid by CIOs in time, money and sweat. Here are strategies to mitigate the increasing complexity of IT as it enables new business.Every innovation, every business process improvement, comes with an IT complexity tax that must be paid by CIOs in time, money and sweat. Here are strategies to mitigate the increasing complexity of IT as it enables new business.
Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II 05 October, 2007 06:00:00
For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders. - +
CIO Live Podcast #78: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires 28 September, 2007 17:34:25
For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders. - +
CIO Live Podcast #77: Panasonic Speeds Up Trans-Pacific File Transfers, Part III 21 September, 2007 07:00:00
Part three in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance. - +
CIO Live Podcast #76: Panasonic Speeds Up Trans-Pacific File Transfers, Part II 14 September, 2007 07:00:00
Part two in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance. - +
CIO Live Podcast #75: Panasonic Speeds Up Trans-Pacific File Transfers, Part I 07 September, 2007 07:00:05
Part one in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
- +
Chris Hoff on Virtualization and Cloud Computing 20 November, 2008 10:55:00
Chris Hoff, chief security architect for the systems and technology division at Unisys and an advisor on the Skybox Security customer advisory board, is one of the biggest critics of virtualization security out there. Not because it isn't important - but rather because it is vital and needs to mature rapidly. - +
Dilip Sarangan on Physical Security M&A 20 November, 2008 11:18:00
Dilip Sarangan tracks physical security companies for Frost & Sullivan. He expects the industry's "need to have" products to weather the economic storm well, with the big players (now including IBM and Cisco) looking for value-priced acquisitions. - +
International Challenges in PCI Security 20 November, 2008 09:15:00
In a country that's seen many regulatory compliance challenges this decade, the headaches of PCI security tend to be analyzed from a largely American perspective. - +
Cybersecurity is focus of new start-up incubator 20 November, 2008 07:19:00
Texas uni announces the Institute for Cyber Security.The University of Texas at San Antonio Tuesday announced a technology incubator aimed at fostering IT security-based start-ups within the state. - +
PCI council sharpens oversight of security auditors 19 November, 2008 10:53:00
Quality assurance plan targets security assessors and scanning vendorsThe PCI Security Standards Council Monday unveiled a plan to sharpen oversight of the hundreds of security-service providers now authorized to evaluate merchant networks under the organization's Payment Card Industry data standards.
PGP and Ponemon Institute Unveil Inaugural Australian Data Breach Study 2008 20 November, 2008 17:34:00
Symantec Cloud Services Transform Data Centre Operations Through Proactive Management 20 November, 2008 12:06:00
Verizon Business Offers Tips to Building a Successful Unified Communications and Collaboration Plan 20 November, 2008 12:04:00
AARNet Brings 4K Digital Cinema to Australia: First 4K HD Video Signal delivered into Australia by AARNet 20 November, 2008 12:02:00
NetApp Named 2008 Citrix Ready Solution of the Year by Citrix Systems 20 November, 2008 11:33:00
|
||
|
||
|
|
||
|
Security Inside Out
A security breach has the potential to impact your bottom line, damaging reputation, customer loyalty and profitability. Managing security risks in today's environment requires a framework that extends beyond traditional network perimeter measures to protect applications, middleware, and data infrastructures. Read on to discover how you can create an enterprise security framework to protect your business.














