Wednesday, January 11, 2012

Biometric Information Sharing and the Five Country Conference

[UPDATE: Paid subscription required to view older articles]
Biometrics programs prompt privacy concerns (Embassy.ca) 

The linked article contains a wealth of information on the mechanics of how Canada, the United States, United Kingdom, Australia, and New Zealand (the Five Country Conference) have agreed to share biometric information on people seeking entrance into the named countries.
A third party did a privacy impact assessment of the sharing protocol in 2009 with recommendations to mitigate privacy risks, to which all government agencies involved agreed and began implementing. Canada is working with its Five Country Conference partners to ensure privacy by, for instance, making sure all fingerprints are anonymously shared and can't be linked to a person unless a match is made, destroying fingerprints once a search is done, and exchanging more information only after a match is made.

They use encryption and security tools to protect files shared electronically. Everything passes through a secure central server in Australia.

Canada knows information shared between countries is being kept secure because they've each signed memoranda of understanding with each other governing how the information is to be managed, said Ms. Caron.