ID card scheme 'at risk of fraud'

The National Identity Scheme could be at risk of fraud from the people running it, a Government-appointed panel has warned.

In its 2007 annual report, the Independent Scheme Assurance Panel (ISAP), set up to advise the Government on the implementation of ID cards, said the scheme would “aggregate a lot of valuable data”.

The panel said there was the “risk that it’s trusted administrators would make improper use of this data” and the scheme would “be subject to data errors and errors in decisions made”.

Richard Clayton, a security expert at Cambridge University, said: “The problem with this and all other databases that contain sensitive information is the honesty of staff.

"If you wave enough money at people working on this scheme, how many will actually be honest."

Clayton pointed out the report also found that the Government had no clear data-management standards for the National Identity Register. This is the proposed database that, according to the Government, will hold all UK citizens' identity details securely.

“One of the problems of the whole scheme is that there is too much information in one place,” he said.

“The single point of this scheme means a fraudster obtaining the information will be set up for life. They will not have to look for or pay for any other documents.”

To minimise the risk of staff stealing and selling on people’s data, the ISAP said the Government had to monitor individual staff members and how they were using data.

The Identity and Passport Service, the department in charge of the ID Card scheme, said it welcomed ISAP's recommendations. It said it would identify the right people to govern the data and work to get a clear view of the relationships between all the data held as well as the relevant legislation and policy.

See also:

ID cards to arrive in 2012

Leaked document suggests mass enrollment two years later than planned  23 Jan 2008

Clegg: 'scrap' ID card scheme

Lib-Dem leader says latest data loss shows the Government can't be trusted with people's data  21 Dec 2007

Air travellers targeted in anti-terror plan

Registration system would see personal data held for up to 13 years under EU commission's proposal  05 Nov 2007

Government data plan is 'sinister ploy'

General Register Office and Identity and Passport Service to merge  15 Oct 2007

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!