Data Protection
Biometric Databases Catch Criminals By the year 2021, the European Union will have a database of fingerprints, photographs for facial recognition, passport numbers and birth dates of all its 350 million citizens. Data that are measurements of a person’s body, such as a photograph of their face, are known as biometric data. In the EU, the biometric database will be called CIR, for Common Identity Repository. The database will also allow searches of other databases to match citizens posing with multiple identities, which will aid border control and security agencies. Critics are concerned that with so much information in one database, it will be a target for security breaches.
With many agencies having shared access to the biometric database, there could be more exposure and risk to cybercrime and no entity, be it private or government, is invulnerable to security breaches. Although the United States does not have a country-wide biometric database such as the EU’s CIR, law enforcement agencies around the country have access to various databases containing biometric data such as photographs. Many of these agencies are now using facial recognition software to search the database for a specific criminal. This searching is controversial because the US lacks most laws governing the use of searching databases for a facial match. For example, in the states of Maryland and Indiana, the police are allowed to search a database of driver’s license photos to recognize a potential criminal, whereas in Oregon, only the database of mug shots is allowably searchable. Legally, driver’s licenses photographs are not considered public record, which presents a dilemma to law enforcement.
In the spring of 2019, San Francisco banned the use of facial recognition by police and city agencies. Lawyers are beginning to weigh into the discussion. At the Georgetown Law Center of Privacy and Technology, a spokesperson, Ms. Garvie said “There is a fundamental absence of transparency around when and how police use face recognition technology. The risks of misidentification are substantial.” (Bosman & Kovaleski, 2019) US citizens and lawyers are not the only groups to be concerned about the government’s use of biometric databases. In 2019, the House of Representatives’ House Oversight Committee has support from bipartisan groups to control the use of biometrics in government agencies.
Although the US might not have a domestic biometric database for law enforcement, other agencies are currently searching biometric databases to catch criminals. The US Department of Homeland Security has created a large bio-metric database called HART, short for Homeland Advanced Technical System. The biometrics in this database include facial photos, fingerprints, irises and other distinguishing features like tattoos. In addition, HART can share data from other agencies such as the FBI and the State Department.
The HART database is stored on Amazon’s Web Ser-vices, AWS. Amazon serves the government’s data storage needs through GovCloud. Other government agencies use GovCloud such as NASA, the CIA, and the Defense Department. GovCloud complies with all government regulation requirements and also commercial security and privacy standards. The physical databases are stored in different zones in the United States to ensure continuous data avail-ability and low latency. (Latency is the time it takes for data to travel from the data center to the user.) Each site has its own power supply including air-conditioning in a secured setting. Multiple copies of data are stored (redundancy). “The use of technology and data is becoming increasingly important to law enforcement,” said Major Mike White, Assistant Chief of Staff with the Indiana State Police Department. “With advancements, come the need for secure connectivity and storage without draining the budget. Storage for databases, reports, and video are part of today’s challenges for law enforcement technology managers. AWS is quickly becoming a go-to solution for technology needs that won’t break the bank.”(Business Wire, 2018).
Critical Thinking Questions:
1. Distinguish between the terms data management and data governance. How are biometric databases being managed and how are they being governed? What are the concerns in each segment?
2. Describe the ethical dilemma of using facial recognition by law enforcement agencies. If in the classroom, hold a debate of the pros and cons.
How Biometric Databases Are Being Managed and Governed:
-
Management: The article mentions technical aspects like:
- Storage: Cloud storage (AWS GovCloud) is used for large databases like HART. This offers scalability and cost-effectiveness.
- Security: Measures like physical security of data centers, redundant data storage, and compliance with security standards are employed.
- Retrieval: Facial recognition software is used to search the databases.
-
Governance: The governance aspects are less clearly defined in the article, which is a key part of the problem. We see:
- Varying Legal Frameworks: Different states have different rules about accessing driver's license photo databases. This reflects a lack of consistent national governance.
- Lack of Transparency: Concerns are raised about the lack of transparency in how police use facial recognition technology.
- Ethical Debates: Discussions around the balance between security and privacy are ongoing, highlighting the need for clear ethical guidelines.
- Oversight Efforts: The House Oversight Committee's involvement suggests an attempt to establish more formal governance at the federal level.
Concerns in Each Segment:
-
Management Concerns:
- Security Breaches: Large databases are attractive targets for hackers. A breach could expose sensitive biometric information of millions of people.
- Data Accuracy: Errors in data collection or facial recognition technology could lead to misidentification and wrongful accusations.
- Cost: Storing and managing such massive amounts of data can be expensive.
-
Governance Concerns:
- Privacy Violations: The potential for government overreach and misuse of biometric data is a major concern. How is the data being used? Who has access? What are the limits?
- Lack of Due Process: Misidentification could lead to wrongful arrests and accusations, violating due process rights.
- Discrimination: Facial recognition technology has been shown to be less accurate for people of color, raising concerns about discriminatory use.
- Scope Creep: There's a risk that the use of biometric data could expand beyond its initial purpose (e.g., from criminal investigations to general surveillance).
2. Ethical Dilemma of Facial Recognition by Law Enforcement:
The core ethical dilemma is the tension between public safety and individual privacy rights.
-
Arguments for Facial Recognition (Public Safety):
- Faster Identification: Facial recognition can quickly identify suspects, helping to solve crimes and prevent future ones.
- Deterrence: The knowledge that facial recognition is used may deter criminal activity.
- Investigative Tool: It can be a valuable tool for investigators, especially in cases where traditional identification methods are difficult.
-
Arguments Against Facial Recognition (Privacy/Civil Liberties):
- Potential for Misidentification: Errors in the technology can lead to wrongful accusations and arrests.
- Privacy Invasion: Constant surveillance through facial recognition erodes individual privacy and creates a chilling effect on freedom of expression.
- Abuse of Power: The technology could be used to track individuals' movements and activities, leading to potential abuse of power by law enforcement.
- Discrimination: Bias in the technology can disproportionately affect people of color, leading to discriminatory targeting.
Debate Format (In a Classroom Setting):
- Divide the class into two groups: one arguing for the use of facial recognition and the other against.
- Each group should research and develop arguments to support their position, using the points above and any other relevant information.
- Hold a formal debate, with each side presenting their arguments and rebutting the other side's points.
- Encourage critical thinking and respectful discussion of the complex ethical issues involved.
This debate format allows students to explore the different perspectives on this issue and to develop their own informed opinions.
Let's break down these critical thinking questions about biometric databases.
1. Data Management vs. Data Governance:
-
Data Management: This refers to the technical processes of handling data. It includes activities like data storage, retrieval, organization, security (preventing unauthorized access, ensuring data integrity), and maintenance. Think of it as the "how" of dealing with data.
-
Data Governance: This focuses on the policies and procedures that dictate how data is used. It addresses who has access to what data, under what circumstances, and for what purposes. It also deals with compliance with laws and regulations related to data privacy and security. Think of it as the "who," "what," "when," "where," and "why" of data usage