Bookmark and Share | Log in | CONTACT US | HOME | SEARCH
 
 

 Subscribe in a RSS reader Subscribe via Email

Police retention of surveillance photos “breached privacy right”

Posted May 29, 2009

A man, who is a shareholder of a company, attends the company’s AGM and asks a question from the floor, about the company’s recent acquisition of another firm – one which organises trade fairs for the arms business. On the way out of the shareholder meeting, the man is followed by police, photographed repeatedly and asked for his personal details.

He is not detained, arrested or charged, and there is no suggestion that an offence has been committed.

The police create a new dossier on their ‘Crimint’ system and use it to retain the man’s photographs.

This is what allegedly happened to Andrew Wood in London in 2005. At the time, Mr Wood was in charge of media relations for CAAT – the Campaign Against the Arms Trade; according to their account here, that organisation had taken the precautionary step of liaising with the Metropolitan Police before the AGM, and it had been agreed that two of their members would leaflet attendees in front of the meeting. Several other accounts are available online, including this one by the Guardian, and this one written by Wood himself.

The reason the story is back in the headlines is that Mr Wood has just won an Appeals Court case against the police retention of his photographs. The court ruled that while the surveillance itself could be justified, the retention of the photographs represented an infringement of the Human Rights Act. Interestingly, when Mr Wood appealed for judicial review of the case, the police barrister denied that such a record had been made.

The Appeal Court judges ruled that the Privacy right “was important to the individual”, and the the “object pursued by the interference” was not sufficient to justify keeping the photographs. Specifically, Lord Collins rejected the idea that they could be kept in order to make it possible to identify the perpetrators of any crime which might have been committed at the AGM… This would not, he said, justify retention beyond a few days. In a conclusion which is likely to have far-reaching effects, he also rejected the idea that the photographs could be retained in case Mr Wood subsequently committed an offence at an arms fair some months later. This justification, he said, had nothing to do with the decision to take the photographs and was “plainly an afterthought”.

For a much more detailed legal analysis of this distinction between “taking” and “retaining” the photographs, I recommend this document, which is the judgement in Mr Wood’s application for judicial review of the case (given in 2008). While it is paragraphs 51 onwards which set out that judge’s opinion on “taking” versus “retention”, paragraph 37 of the judgement (which, slightly confusingly, cites paragraph 51 of an earlier European Court of Human Rights finding) sets out the principles in a particularly interesting way. Here’s what the ECHR says:

50. The Court reiterates that the concept of private life extends to aspects relating to personal identity, such as a person’s name, or a person’s picture.

Furthermore, private life, in the Court’s view, includes a person’s physical and psychological integrity; the guarantee afforded by Art.8 of the Convention is primarily intended to ensure the development, without outside interference, of the personality of each individual in his relations with other human beings. There is therefore a zone of interaction of a person with others, even in a public context, which may fall within the scope of “private life”.

This, as clearly as anything, draws a distinct line between “privacy” and “secrecy”. It is clear, here, that privacy rights can apply to an individual’s exercise of relations with others. Privacy, in other words, is about disclosure – but disclosure with appropriate control and consent on the part of the individual.

Back to the current UK Appeals Court ruling, though, which specifically cited Article 8.2:

“There shall be no interference by a public authority with the exercise of this right [to a private and family life] except such as is in accordance with the law and is necessary in a democratic society in the interests of national security, public safety or … for the prevention of disorder or crime … or for the protection of the rights and freedoms of others …”.

As I say, it was the retention of the photographs beyond any reasonable period associated with the AGM itself which was considered to be a disproportionate interference with Mr Wood’s Article 8.2 rights.

Interestingly, the judge in the judicial review held that Article 14 was not applicable in this case, and the Appeal Court did not overturn that conclusion Article 14 establishes “the right to exercise the other rights without being subject to discrimination” … “on any ground such as sex, race, colour, language, religion, political or other opinion, national or social origin, association with a national minority, property, birth or other status”.

To be frank, I don’t yet grasp the logic behind that decision, but will keep at it. It seems to me that, as Mr Wood was not suspected of having done anything illegal before or at the meeting, he was indeed being discriminated against (relative to other attendees who were not photographed) on the basis of actions which arose directly from his ethical opinions about the arms trade – but then, I’m not a judge.

The case is particularly relevant from a privacy/policy/technology perspective because of what Lord Justice Dyson had to say in his summing-up:

“In deciding whether the interference is necessary, the court must have regard to the nature of the Convention right in issue, its importance for the individual, the nature of the interference and the object pursued by the interference.”

” … the protection of personal data is of fundamental importance to a person’s enjoyment of his or her article 8 rights and the domestic law must afford appropriate safeguards to prevent any such use of personal data as may be inconsistent with the guarantees of article 8. The need for such safeguards is all the greater where the protection of personal data undergoing automatic processing is concerned, not least when such data are used for police purposes.”

––posted by Robin Wilton, Director of Privacy and Public Policy, Liberty Alliance

 Subscribe in a RSS reader Subscribe via Email

What do Electronic Patient Records mean?

Posted May 21, 2009

OK, it’s a trick question. The answer, as with much data and all personal data, is “it’s contextual”… which is basically a fancy way of saying “it depends”. This CNet News article from yesterday throws up some of the questions, in a US-centric context, though there are many more, and even those it raises, the article doesn’t necessarily resolve.

So, what do I mean by contextual? Well, I’ve already given one example of that; the CNet News article (entitled “What you need to know about e-health records”) is fairly useful if you’re in the US healthcare system – but a lot of it is irrelevant if you aren’t. One huge contextual factor is which country you live in, with the associated factors like that country’s attitude towards state- vs. privately-funded healthcare, preventive medicine, health insurance, family doctors, privacy law and so on.

Here are a few more examples of contextuality which the CNet article illustrates:

* at a “political” level, Electronic Patient Records (EPRs) ‘mean’ money. If you’re a techno vendor only interested in cornering a chunk of President Obama’s stimulus package for commercial gain, the data is incidental (in fact, paying to secure it only reduces your bottom line): what’s important is the subsidy;
* if you’re an insurer, EPRs mean being able to get sufficient detail to judge – automatically if at all possible – whether a given treatment is covered under the policy or not. In that context, the distinction between “cancer which has spread to the brain” and “cancer which has spread to the spine” may well be irrelevant, as the article notes;
* if you’re the patient or the physician, of course, that distinction might be highly relevant… but in the example given, the data in the EPR was ambiguous because it was designed primarily to meet the insurer’s requirements, rather than those of the other relevant stakeholders.

So what EPRs mean depends on things like who you are, what you’re doing with the data, where you’re doing it, why you’re doing it, and very often even when you’re doing it… (it’s one thing to need data urgently in the heat of emergency treatment – it’s another to need it forensically post mortem).

Why’s all this an issue? Well, as the CNet article points out, the stimulus package is driving a lot of efforts to standardise EPRs and make them portable, interoperable and consistent. At a syntactic level, that raises one set of problems (which experience suggests are solvable with time and effort). At a semantic level, as the contextual examples show, the problems are of a quite different order of difficulty.

That’s the point at which the technical work on interoperability needs to be complemented by work on contextual factors like policy, regulatory measures, user consent and control, and matching purpose of collection against purpose of use. These are the kinds of question we have worked on for some time in the Liberty Alliance Public Policy Expert Group (PPEG), and which I confidently hope will continue to grow into a compelling work stream under the Kantara Initiative. Also in the Kantara structure there is a proposal for a Health Information Assurance (HIA) Work Group, whose draft charter you can find here. I will be adding a draft charter for the Privacy and Public Policy Work Group (P3WG) within the next few days, and that will include a goal of effective liaison with the HIA group.

Precisely because EPRs raise so many issues – both within and between different national healthcare and regulatory systems – this work needs to be able to draw on a broad range of expertise. Please have a good look around the Kantara website; there are many levels at which you can participate in this work, and I would encourage anyone with a stakeholder interest in EPRs to do so.

–posted by Robin Wilton, Director of Privacy and Public Policy, Liberty Alliance

 Subscribe in a RSS reader Subscribe via Email

Concordia Project Federation Survey Use Results

Project Concordia, a Kantara Initiative co-founder, recently responded to a need of one of its members and issued a simple survey to learn more about the community’s use of identity federation. 112 respondents viewed the survey (which weeded-out organizations who were not participating in a federation, resulting in 103 survey respondents). Some interesting highlights (the full survey is available here) include:

• The most popular federation protocol was SAML 2.0 (75.6%). The next highest response category (respondents could select all that applied) was SAML 1.x at 53.5%.
• Between two and ten federated relationships, for both Service Providers and Identity Providers, was the most popular number of relationships, although the next most popular category for both was “more than 10”, so clearly where there’s traction, it’s growing (proving getting over that first hump is often the hardest task).
• Commercial federation products were popular (59.8% of respondents using), although open-source toolkits also had a strong showing (46.3%).
• Many recognized benefits had more than 50% of respondents, including single sign-on benefits (87.8%), enhanced user experience (64.6%), greater security (63.4%), and reduced costs to support partners (63.4%).
• But there are still challenges, chief among them potential partners lacking identity federation technology (78%) and lack of experience in implementing federation technology (65.9%)

Most telling of all was the ending free response area, which is best summed up with the very first comment: [We] need to find ways to make people realize [federation is] a business partnership first before technical; more emphasis gets placed on technical, but should be placed on business.” Several others went on to point to the importance of trust, legal relationships, clear administrative boundaries, and a common identity assurance framework (yes, some of our prospective members have some thoughts here!).

Clearly the time is ripe for federation. Where the audience is educated and relationships exist, benefits are being realized. But we still have a huge opportunity ahead of us to better educate and make it easier to “do” federations by solving some of those business partnership issues in a more consistent way. Those who are succeeding seem very happy and realizing great results—they just want more partners to federate with—now!

Looking forward to some more research from the Concordia community! Survey suggestions appear to be welcome on the survey page.

 Subscribe in a RSS reader Subscribe via Email

Kantara Initiative and IIW – It’s all about collaboration

Kantara Initiative has become a sponsor of this month’s IIW (Internet Identity Workshop) taking place at the Computer History Museum in Mountain View California. We join Information Card Foundation, Google, Microsoft, OASIS ID Trust, OpenID Foundation, OUNO, Plaxo and Yahoo Developer Network in sponsoring the May 18-20 event.

 

IIW was launched in 2005 by Kaliya and Phil and since then developers and those working in the identity industry have found these “un-conference” sessions incredibly valuable for addressing a wide variety of digital identity issues. Next month’s event features some great proposed topics as well as some really cool demos.

 

The registration page is here. We’re pleased to be part of IIW and hope to see many of you there!

Subscribe via email

Enter your email address:

Delivered by FeedBurner

 

WIKI | Schedule | Groups | Membership | Connect | Contact Us | Home

Privacy Statement


© Copyright 2009 - Kantara Initiative. All Rights Reserved