Passport May Violate Euro Privacy
good-n-nappy writes: "More shocking news about Passport. The EU thinks Passport may violate privacy. Of course, Microsoft claims that all data is supplied voluntarily (for now... cue evil laugh). Too bad we in the U.S. will likely have to continue sacrificing privacy for national security." Part of a continuing series.
The UK Data Protection Act 1998 (http://www.hmso.gov.uk/acts/acts1998/19980029.htm ) governs how 'data-holders' make capture and process personal data.
a ta_Protection.html ) and replaces a similar act from 1984
This Act is an EU treaty obligation ( http://www.privacy.org/pi/intl_orgs/ec/final_EU_D
The UK Government can be rightly criticised on many aspects of IT legislation, however the Data Protection is not one.
The Act codifies 'Eight Principals'.
1. fairly and lawfully processed;
2. processed for limited purposes;
3. adequate, relevant and not excessive;
4. accurate;
5. kept no longer than necessary;
6. processed in accordance with the data subject's rights;
7. secure;
8. not transferred to countries without adequate protection.
It seem likely to me that the MS-Passport violates several of these, though most notable numbers 7 and 8.
The Data Protection Registra/Commissioner.
http://www.dataprotection.gov.uk