Drivers’ Licenses a De Facto Law Enforcement Database

. . . notes the ACLU’s Chris Calabrese in this story about the use of license photos to search for criminal suspects.

Jim Harper • October 15, 2009 @ 4:15 pm
Filed under: Law and Civil Liberties; Telecom, Internet & Information Policy

  Print This Post

Assessing the Claim that CDT Opposes a National ID

It was good of Ari Schwartz to respond last week to my recent post querying whether the Center for Democracy and Technology outright opposes a national ID or simply “does not support” one.

Ari says CDT does oppose a national ID, and I believe that he honestly believes that. But it’s worth taking a look at whether the group’s actions are consistent with opposition to a national ID. I believe CDT’s actions — most recently its support of the PASS ID Act — support the creation of a national ID.

(The title of his post and some of his commentary suggest I have engaged in rhetorical excess and mischaracterized his views. Please do judge for yourself whether I’m being shrill or unfair, which is not my intention.)

First I want to address an unusual claim of Ari’s — that we already have a national ID system. If that is true, his support for PASS ID is more sensible because it is an opportunity to inject federal privacy protections into the existing system (putting aside whether it is a federal responsibility to manage a state system or systems).

Read the rest of this post »

Jim Harper • July 28, 2009 @ 2:04 pm
Filed under: Law and Civil Liberties; Telecom, Internet & Information Policy

  Print This Post

Does the PASS ID Act Protect Privacy?

I’ve written about PASS ID here a couple of times before – first on whether or not it’s a national ID and, second, on the politics of this REAL ID revival bill. Now I’ll take a look at whether it fixes the privacy issues with REAL ID. Privacy is complicated. Buckle up.

The day the bill was introduced, the Center for Democracy and Technology issued a press release giving it a privacy stamp of approval.

“The PASS ID Act addresses most of the major privacy and security concerns with REAL ID,” said Ari Schwartz, Vice-President of CDT. The release cited four ways that PASS ID was an improvement over the bill it’s modeled on, REAL ID.

Interstate Data Sharing?

First, CDT said, PASS ID “[r]emoves the requirement that states ‘provide electronic access’ allowing every other state to search their motor vehicles records.” It’s technically true: The language from REAL ID directly requiring states to share information among themselves came out of PASS ID. But the requirements of the law will cause that information sharing to happen all the same.

Like REAL ID did, PASS ID would require states to confirm that “a person submitting an application for a driver’s license or identification card is terminating or has terminated any driver’s license or identification card” issued by another state.

How do you do that? You check the driver license databases of every other state. Maybe you do this by directly accessing other states’ databases; maybe you do this indirectly, through a “pointer system” or “hub.” But to confirm that you’re talking about the right person, you don’t just compare names. You compare names, addresses, pictures, and other biometrics.

Read the rest of this post »

Jim Harper • July 7, 2009 @ 10:50 am
Filed under: Telecom, Internet & Information Policy

  Print This Post

EDLs on the Ropes

With the REAL ID Act floundering in state resistance, DHS officials and government contractors have been pinning their hopes on “enhanced drivers licenses” or EDLs. These are state-issued driver’s licenses that the Department of Homeland Security and State Department have agreed to treat as proof of citizenship for purposes of border crossings.

With the flexibility of doing things by fiat, outside of a statutory process, the bureaucracy had gotten some traction with this ID system — most notable for its use of long-range RFID (radio frequency identification tags) to track people.

But news comes today that the Canadian province of Saskatchewan is scrapping its plans to create EDLs for U.S. border crossings, mostly due to cost.

“I was comfortable in the $25 to $50 range, but when I saw those costs (for an enhanced driver’s licence) go above $50 and nearing the cost of getting a passport, the argument for just having a passport became stronger and stronger and I think logically we’ve made the right decision here,” [Crown Corporations Minister Ken] Cheveldayoff said.

With more vocal opposition to RFID-based tracking in EDLs south of the border (that is, here in the states), the U.S. EDL may run into more than just cost concerns. And there is discomfort brewing with federal agencies cooking up an identity system on their own.

For all its faults, at least REAL ID had a statutory mandate. EDLs could end up being anything bureaucrats want them to be, which could be worse than what Congress put together in REAL ID.

Jim Harper • March 25, 2009 @ 8:30 am
Filed under: Foreign Policy and National Security; Telecom, Internet & Information Policy; Trade and Immigration

  Print This Post