Privacy Impact Assessment For The Automated Biometric Identification System

The legacy Immigration and Naturalization Service (INS) developed IDENT in 1994 as a law enforcement system for collecting and processing biometrics. In 2004, the Department of Homeland Security (DHS) established the U.S. Visitor and Immigrant Status Indicator Technology (US-VISIT) Program as the first large-scale biometric identification program to support immigration and border management. IDENT has evolved over the years into the central DHS-wide system for the storage and processing of biometric data. IDENT stores and processes biometric data-digital fingerprints, photographs, iris scans, and facial images-and links biometrics with biographic information to establish and verify identities. IDENT serves as a biographic and biometric repository for the Department. As a data steward, US-VISIT provides a service to its data providers and data users. US-VISIT identifies each collection by data provider and its authority to use, retain, and share it. IDENT enables sharing with authorized users after the data provider has approved the sharing. The process of retaining data provided to IDENT is referred to as enrollment. Each time an individual's biometrics are enrolled in IDENT, it is an encounter. Adding encounters to an already existing identity is referred to as an assignment. With each encounter, IDENT: Checks a person's biometrics against the IDENT watch list of known or suspected terrorists(KST), criminals, and immigration violators; Checks a person's biometrics against the entire database of fingerprints to help determine if a person is using an alias and/or attempting to use fraudulent identification; and Checks a person's biometrics against those associated with the identification document presented to help ensure that the document belongs to the person presenting it and not someone else.

This book offers an analysis of privacy impacts resulting from and reinforced by technology and discusses fundamental risks and challenges of protecting privacy in the digital age. Privacy is among the most endangered "species" in our networked society: personal information is processed for various purposes beyond our control. Ultimately, this affects the natural interplay between privacy, personal identity and identification. This book investigates that interplay from a systemic, socio-technical perspective by combining research from the social and computer sciences. It sheds light on the basic functions of privacy, their relation to identity, and how they alter with digital identification practices. The analysis reveals a general privacy control dilemma of (digital) identification shaped by several interrelated socio-political, economic and technical factors. Uncontrolled increases in the identification modalities inherent to digital technology reinforce this dilemma and benefit surveillance practices, thereby complicating the detection of privacy risks and the creation of appropriate safeguards. Easing this problem requires a novel approach to privacy impact assessment (PIA), and this book proposes an alternative PIA framework which, at its core, comprises a basic typology of (personally and technically) identifiable information. This approach contributes to the theoretical and practical understanding of privacy impacts and thus, to the development of more effective protection standards. This book will be of much interest to students and scholars of critical security studies, surveillance studies, computer and information science, science and technology studies, and politics.

Biometric recognition-the automated recognition of individuals based on their behavioral and biological characteristic-is promoted as a way to help identify terrorists, provide better control of access to physical facilities and financial accounts, and increase the efficiency of access to services and their utilization. Biometric recognition has been applied to identification of criminals, patient tracking in medical informatics, and the personalization of social services, among other things. In spite of substantial effort, however, there remain unresolved questions about the effectiveness and management of systems for biometric recognition, as well as the appropriateness and societal impact of their use. Moreover, the general public has been exposed to biometrics largely as high-technology gadgets in spy thrillers or as fear-instilling instruments of state or corporate surveillance in speculative fiction. Now, as biometric technologies appear poised for broader use, increased concerns about national security and the tracking of individuals as they cross borders have caused passports, visas, and border-crossing records to be linked to biometric data. A focus on fighting insurgencies and terrorism has led to the military deployment of biometric tools to enable recognition of individuals as friend or foe. Commercially, finger-imaging sensors, whose cost and physical size have been reduced, now appear on many laptop personal computers, handheld devices, mobile phones, and other consumer devices. Biometric Recognition: Challenges and Opportunities addresses the issues surrounding broader implementation of this technology, making two main points: first, biometric recognition systems are incredibly complex, and need to be addressed as such. Second, biometric recognition is an inherently probabilistic endeavor. Consequently, even when the technology and the system in which it is embedded are behaving as designed, there is inevitable uncertainty and risk of error. This book elaborates on these themes in detail to provide policy makers, developers, and researchers a comprehensive assessment of biometric recognition that examines current capabilities, future possibilities, and the role of government in technology and system development.

Virtually all organisations collect, use, process and share personal data from their employees, customers and/or citizens. In doing so, they may be exposing themselves to risks, from threats and vulnerabilities, of that data being breached or compromised by negligent or wayward employees, hackers, the police, intelligence agencies or third-party service providers. A recent study by the Ponemon Institute found that 70 per cent of organisations surveyed had suffered a data breach in the previous year. Privacy impact assessment is a tool, a process, a methodology to identify, assess, mitigate or avoid privacy risks and, in collaboration with stakeholders, to identify solutions. Contributors to this book – privacy commissioners, academics, consultants, practitioners, industry representatives – are among the world’s leading PIA experts. They share their experience and offer their insights to the reader in the policy and practice of PIA in Australia, Canada, New Zealand, the United Kingdom, the United States and elsewhere. This book, the first such on privacy impact assessment, will be of interest to any organisation that collects or uses personal data and, in particular, to regulators, policy-makers, privacy professionals, including privacy, security and information officials, consultants, system architects, engineers and integrators, compliance lawyers and marketing professionals. In his Foreword, surveillance studies guru Gary Marx says, “This state-of-the-art book describes the most comprehensive tool yet available for policy-makers to evaluate new personal data information technologies before they are introduced.” This book could save your organisation many thousands or even millions of euros (or dollars) and the damage to your organisation’s reputation and to the trust of employees, customers or citizens if it suffers a data breach that could have been avoided if only it had performed a privacy impact assessment before deploying a new technology, product, service or other initiative involving personal data.

Many people think of personal identification as only part of the security/surveillance apparatus. This is likely to be an oversimplification, which largely misrepresents the reality. 'Personal identity' means two separate concepts, namely that an individual belongs to specific categories and also that this individual is distinguished by other persons and understood as one. In other words, there are two different aspects involved in personal recognition: distinguishing between individuals and distinguishing between sets of people. The latter is likely to be the real issue. Dictatorships of any kind and totalitarian regimes have always ruled by categorizing people and by creating different classes of subjects. When rules want their subjects to humiliate themselves or their fellows, they create categories of people or exploit existing categories. From social and political points of view this allows a process known as 'pseudospeciation' to be produced. Pseudospeciation is a process which turns social and cultural differences into biological diversities. It promotes cooperation within social groups, overpowering the selfish interests of individuals in favor of collective interests, yet it also inhibits cooperation between groups, and it fosters conflict and mistrust. This work is dedicated to the thorny and multifaceted relations between identity, security and democracy. Identity, Security and Democracy shows how full of nuances the process of human identification is. IOS Press is an international science, technical and medical publisher of high-quality books for academics, scientists, and professionals in all fields.

Visions of Invasion: Alien Affects, Cinema, and Citizenship in Settler Colonies explores how the US government mobilizes media and surveillance technologies to operate a highly networked, multidimensional system for controlling migrants. Author Michael Lechuga focuses on three arenas where a citizenship control assemblage manufactures alienhood: Hollywood extraterrestrial invasion film, federal antimigration and border security legislation, and various immigration enforcement protocols implemented along the Mexico–United States border. Building on rhetorical studies, settler colonial studies, and media studies, Visions of Invasion offers a glimpse at how the processes of alien-making contribute to an ongoing settler colonial project in the US. Lechuga demonstrates that popular films—The War of the Worlds, Predator, Men in Black, and more—participate in the production of migrants as subjective terrorists, felons, and other noncitizen personae vilified in public discourse. Beyond just tracing how alien invasion narratives circulate in popular media, Lechuga describes how the logics motivating early US colonists materialize in both the US’s citizenship control policy and in some of the country’s most popular texts. Beneath each of the film franchises and antimigrant political expressions described in Visions of Invasion lies an anxious colonial logic in which the settler way of life is seemingly threated by false narratives of imminent invasion from abroad. The volume offers a deep dive into how the rhetorical figure of the alien has been manufactured as a political subjectivity, one that plays out the anxieties, guilts, and fears of colonialism in today’s science fiction landscape.

This important text/reference presents the latest secure and privacy-compliant techniques in automatic human recognition. Featuring viewpoints from an international selection of experts in the field, the comprehensive coverage spans both theory and practical implementations, taking into consideration all ethical and legal issues. Topics and features: presents a unique focus on novel approaches and new architectures for unimodal and multimodal template protection; examines signal processing techniques in the encrypted domain, security and privacy leakage assessment, and aspects of standardization; describes real-world applications, from face and fingerprint-based user recognition, to biometrics-based electronic documents, and biometric systems employing smart cards; reviews the ethical implications of the ubiquity of biometrics in everyday life, and its impact on human dignity; provides guidance on best practices for the processing of biometric data within a legal framework.

Face recognition technologies (FRTs) have many practical security-related purposes, but advocacy groups and individuals have expressed apprehensions about their use. This report highlights the high-level privacy and bias implications of FRT systems. The authors propose a heuristic with two dimensions -- consent status and comparison type -- to help determine a proposed FRT's level of privacy and accuracy. They also identify privacy and bias concerns.

This book is open access. This book undertakes a multifaceted and integrated examination of biometric identification, including the current state of the technology, how it is being used, the key ethical issues, and the implications for law and regulation. The five chapters examine the main forms of contemporary biometrics–fingerprint recognition, facial recognition and DNA identification– as well the integration of biometric data with other forms of personal data, analyses key ethical concepts in play, including privacy, individual autonomy, collective responsibility, and joint ownership rights, and proposes a raft of principles to guide the regulation of biometrics in liberal democracies. Biometric identification technology is developing rapidly and being implemented more widely, along with other forms of information technology. As products, services and communication moves online, digital identity and security is becoming more important. Biometric identification facilitates this transition. Citizens now use biometrics to access a smartphone or obtain a passport; law enforcement agencies use biometrics in association with CCTV to identify a terrorist in a crowd, or identify a suspect via their fingerprints or DNA; and companies use biometrics to identify their customers and employees. In some cases the use of biometrics is governed by law, in others the technology has developed and been implemented so quickly that, perhaps because it has been viewed as a valuable security enhancement, laws regulating its use have often not been updated to reflect new applications. However, the technology associated with biometrics raises significant ethical problems, including in relation to individual privacy, ownership of biometric data, dual use and, more generally, as is illustrated by the increasing use of biometrics in authoritarian states such as China, the potential for unregulated biometrics to undermine fundamental principles of liberal democracy. Resolving these ethical problems is a vital step towards more effective regulation.