[Linux-aus] Census data risks - retention and correlation of records (Was: Linux Australia Membership Team - Website Survey March 2016)
web at polynate.net
Tue Mar 29 21:55:23 AEDT 2016
On 29 March 2016 at 17:34, Kathy Reid <kathy at kathyreid.id.au> wrote (in her
website survey thread):
> Your responses are completely anonymous. Unlike say, an upcoming
> nationwide census. But that's a different topic ;-)
Is this something we should respond to, in our broader role? It's not
really an 'open' issue, it's kind of the opposite of data freedom in a
sense, but it is about data privacy...
I am quite unhappy about (a) the change in policy and (b) the lack of
consultation in the change.
For those who are unaware - the ABS now intend to retain your personal
information (previously destroyed) *and* correlate it with other data.
This change in policy was quietly announced in mid-December (Christmas
season), and has only recently hit the news (see news.com.au article
i) ABS already having a current example of leaked data
was *not* detected internally
ii) DHS having 63 cases of data breaches in one year
iii) SA police having 100 cases of data breach *each* year
and, as a working example, the US census data already being hacked
How many websites, financial institutions, insurers and government agencies
use your name, address and date of birth for security? That's all in the
census, along with your earnings.
An ABS census hack would be the most comprehensive identity theft of all
It is just too risky to provide key personal information on every single
Australian in a database that could be exploited by staff or hackers, and
there really is no good reason to do so. The ABS should return to their
previous policy of destroying personal identifying data and only retaining
census data itself.
PS: I responded to the LA website survey <http://opinahq.com/app/c/67076>
before responding to this email, so should you ;-)
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the linux-aus