Clear - Secure Data?

Secure data is just a dream until companies and governments work out just what they are dealing with. The basic problem is that processes to access and store data are inadequate. This is why until proper processes and procedures are in place we need to accept that "secure" data is just not possible particularly in large scale systems, such as the NHS Spine, which transport data to and from many smaller systems or access points.

The simple example shown in this article where supposedly highly secure data on verified travellers show just how dangerous this problem could be. The company operating the system, FlyClear, is now not accepting new customers as they "upgrade" their systems. Interestingly as late as July 2008 they were still extolling their privacy and how they were secure, including details of an audit performed by Ernst and Young. Their parent company is intriguingly called Verified Identity Pass Inc.

It may also find out the hard way that one error in this type of market can lead to the end of the business. Significantly the system causing the problem was called "Clear" and obviously this is how they liked to view their data.

The Times today also has another example, not new, of how the supposed "Fakeproof" E-Passport can be cloned in minutes.

What this shows is that anything claimed as "uncrackable" or "unbreakable" just isn't at the moment so don't believe it.

Slashdot | "Clear" Air-Travel Pass Data Stolen From SFO

Broken Spine

After todays news that the Government via the HMRC has managed to lose 25 million peoples personnel and banking data how safe do you feel about having your health details held on a National Database.

According to the Guardian

Nearly two-thirds of family doctors are poised to boycott the government's scheme to put the medical records of 50 million NHS patients on a national electronic database, a Guardian poll reveals today.

Now this is doctors who won''t put your details onto the system so they must not trust it for some reason otherwise they would happily put your details onto the database as it would be tremendously useful.

In a poll for the Guardian three-quarters of family doctors said medical records would become less secure when they are put on a database that will eventually be used by NHS and social services staff throughout England. Half thought the records would be vulnerable to hackers and unauthorised access by officials outside the NHS. A quarter feared bribery or blackmail of people with access to the records and 21% suspected that social services staff would not adhere to the confidentiality rules. I am unsure if there was a tick mark for all the data being given away to all and sundry by junior staff.

The poll of more than 1,000 doctors was conducted by Medix, a healthcare online research organisation previously used by the Department of Health to test medical opinion. It found GPs are increasingly concerned about the department's plan to automatically upload the records of everyone who does not register an objection.

I would venture to suggest that after today the polling figures amongst Doctors would be even worse.

Also in the the Guardian's Comment is Free, Ann Robinson says a second opinion is required on The Spine and it's use. Don't forget you will have to actively register an objection to having your details put on The Spine by replying to a letter telling you of the the changes.

Afters todays inept showing by the Government I would prefer not to have to give my details to them at all. I wonder if we could refuse to give details to HMRC as we believe they are in breach of the Data Protection Act and as such should not be allowed to store confidential data.

Just in case you wondered the total cost of the Spine system for the NHS is currently running at about £12.4 billion.

Family doctors to shun national database of patients' records | Society | The Guardian