Focusing on the wrong problem [LWN.net]

Focusing on the wrong problem

Posted Jul 14, 2005 22:10 UTC (Thu) by kleptog (subscriber, #1183)
In reply to: Focusing on the wrong problem by martinfick
Parent article: The Personal Data Privacy and Security Act

Not entirely futile. Laws targeting just identity theft arn't particularly useful because, as you say, there are many more reasons why you'd want to protect information.

However, you can get a long way by establishing some basic principles like restricting how and why people can collect information and for what purposes. Even things like: "If an organisation holds personal information about an individual, it must provide the individual with access to the information on request by the individual" can be a huge benefit. I should be able to go to any data collection company and ask if they have anything on me, what it is and let me check it for accuracy.

I'd prefer outlawing all selling of private identifing information since I can't think of any situation where it could be considered a good thing.

(Log in to post comments)

Focusing on the wrong problem

Posted Jul 14, 2005 23:41 UTC (Thu) by giraffedata (subscriber, #1954) [Link]

I don't think such efforts are futile, but they make me sick anyway because they are in fact focusing on the fringes of a problem rather than attacking the root.

Free flow of information is a good thing, not a bad thing. And information such as social security numbers and bank account numbers don't even have personal privacy value.

The root of the identity theft problem is people reporting false, slanderous information to credit reporting bureaus. A bank says "John Doe borrowed $5000 from me and never paid it back," when in fact the bank has never dealt with John Doe (it dealt with some stranger who said he was John Doe).

The penalties that should be enhanced are those for reporting this false information. And also for using it to deny someone credit. Those penalties would cause creditors to demand more proof of identity than just, "I know his account number."

And then we should provide a convenient way to prove identity. Digital signatures would work great, but need some kind of push, probably from government, to get to the practical level. Same with smart cards.

As long as measures like keeping social security numbers secret keep the problem beat down, there isn't going to be motivation to tear it out by the roots.