In the excellent Datonomy blog, Roger provides an interesting overview of the definition of ‘Identity’. Arguing that it is about the autonomy of the data subject to control their personal data, he points out that inadequacies in the EU Directive and its local implementation allow many data controllers to ride roughshod over subjects’ wishes when it comes to the handling of sensitive personal data.
‘Identity’ has become one of the most misused and misunderstood concepts in modern government and modern technology. Several years ago we seemed to collectively forget the word’s connections with totalitarian regimes throughout history, and the use of identity systems to police the population in times of crisis – or maybe we felt that we had a new and enduring crisis on our hands – and instead decided that ‘identity’ is aspirational, desirable and achievable. The word has entered common parlance in Whitehall and Westminster, forms part of the functional specification for who-knows-how-many systems, processes and initiatives, has spawned a new marketing approach for companies selling access control systems, and is fast becoming ‘part of the way we do things round here’.
This has to stop. We’re sleepwalking towards the precipice (insert scary metaphor of your choice here) simply because we’ve decided that the ‘I’ word – Identity – is what we aspire to. I don’t object to proving my identity, or owning identification credentials, it’s just that we so rarely ever need to identify ourselves. When does identity become an issue? Solely in establishing a trust relationship between two parties where there is a claim to entitlement and an imbalance of risk: for example, when claiming entitlement to enter the country, and there is so much for the individual to gain that they may make false claims about their identity or submit false credentials; or when opening a bank account or credit card that will allow them to borrow money. In such circumstances where the individual’s assertions about their identity might reasonably be expected to be fraudulent, it is proportionate to use other means to prove who they are – to identify them.
Once that initial identification has taken place, there is no further need for identity. Credentials are issued – a credit card, a digital certificate, a library card etc. – and thereafter the individual simply has to authenticate themselves as the legitimate bearer of the credential in order to obtain their entitlement. Identity processes only kick in again where there are grounds to doubt the legitimacy of the credential or the bearer. Of course there are other circumstances where the need to identify an individual is justifiable, normally in law enforcement and border control if a person can provide no credentials or refuses to disclose any details about themselves. I’m assuming that situation doesn’t arise for most of us on a day-to-day basis.
So why does the word identity get me so riled? Our problem is that policymakers lack the technological vocabulary to accurately describe what is required of a system or process. Under pressure to deliver, they demand a new system or process to identify benefits claimants, to identify underage drinkers, to identify passing cars, when in fact what they want is to check an existing credential, to confirm an attribute, or to bill an individual. Through these poor specifications we are unwittingly building a disproportionate and dystopian database state that in the short term strips autonomy from data subjects, but in the longer term will undermine the state itself: when the identity infrastructure becomes pervasive, errors and failures will become so punitive on the data subjects concerned that life will be unbearable for them.
Take the tragic example of Skhumbuzo Mhlongo, a 22-year old South African who was refused an ID Card because of a bureaucratic error that resulted in officials believing he was not a South African national. Unable to work or claim any form of entitlement, and effectively denied any sort of ‘official’ existence, he ultimately took his life. It would take very few such tragedies to collapse confidence in an identity infrastructure and turn individuals against the State.
My proposal is that we ban the use of the ‘I’ word in any situation where ‘authentication,’ ‘verification,’ ‘binding,’ or similar terms would more accurately describe what needs to be achieved without creating a panopticon to achieve the outcome. In fact, if anyone feels like setting up a website to monitor inappropriate uses of the ‘I’ word by government ministers, that might help to raise awareness – much in the same vein as Private Eye’s monitoring of the word ‘solutions’ (perhaps we could name it after their Colemanballs column – ‘Blunkettballs?’). It is our duty to stamp out inappropriate use of the ‘I’ word, to educate policymakers in a more balanced and descriptive language, and to ‘I’ and publicly ridicule those who believe that ‘I’ is a proportionate and necessary goal for the greater public good.
(Here ends a somewhat grumpy ‘back to school’ rant. Normal slightly irritable service will be resumed tomorrow)