Kick-starting the discussion on EDLs
Two weeks ago, the provincial government of British Columbia announced that it would be making enhanced driver’s licences (EDLs) available to eligible B.C. residents. These licences – a first in Canada – would be recognized as an alternative to a passport at the Canada-U.S. border.
What makes them “enhanced”? The B.C. version of the EDL will feature a Canadian flag, a special code used by border authorities, and most importantly, a radio frequency identification (RFID) chip. These chips contain unique identifier numbers which can be read by RFID scanners at U.S. border entry points.
While the RFID chips in B.C.’s EDLs will only contain unique identifier numbers, it is possible to store other types of personal information on these chips. The technology also makes it possible to track the movements of individuals carrying driver’s licences enhanced with RFID chips.
The potential for misuse of personal information or a breach of security exists, and as other provinces consider whether they want to implement their own EDLs, there’s a need for a public discussion about those risks.
Today, Canada’s information and privacy commissioners kick-started that discussion by issuing a joint resolution outlining the steps that will need to be taken to ensure that the privacy and security of our personal information are respected if and when EDL programs are implemented. (You can also read the news release here.)
2 Responses
4:04 am
It looks like your joint resolution is severely (but fairly) harsh on these EDLs and RFIDs. Glad to hear it.
Will we have control over what personal information is stored on these RFIDs? Will we know what is and isn’t on there and available to those able to read them?
By the way, have you watched 24? Considering how many people watch it and believe it to portray very possible scenarios of doom and destruction at the hands of terrorists (if only we all had RFIDs Jack Bauer could save us!), how can the public get a realistic perspective on border security?
4:53 pm
Thanks for comment Tyler.
As for your follow-up questions, here is what we know to date.
Q. “Will we have control over what personal information is stored on these RFIDs?”
A. It’s a good question. The short answer is no. As we understand it, the cards will carry a unique 96-bit identifier number. Like an IP address or Social Insurance Number, individuals won’t have any choice there. If you sign up for the card, you get the identifier you’re issued.
Q. Will we know what is and isn’t on there and available to those able to read them?
A. This is a tricky point, and requires a longer answer. To be clear, as currently envisioned, the unique identifier is the only element of personal information on the chip. While there is no technical obstacle to adding data at a later time, for now only the 96-bit ID tag is needed.
The more important issue, which you allude to, is the database of personal information authorized users will access once they read the RFID chip from the EDL. That unique identifier will point them to a matching record in their screening system for that particular EDL holder. In turn, that detailed record will generate queries against various watch lists and criminal alert systems.
For more information on the information gathered in the EDL process, please refer to the Enhanced Driver’s License Personal Information Consent Form issued by BC authorities (http://www.icbc.com/licensing/pdf/EDL_Part_Guide.pdf).
Q. How can the public get a realistic perspective on border security?
Well, not too be all Canuckistan about it, but 24 is a far better gauge of political sentiment than security. For actual real-world information, Public Safety Canada has a decent site on how they actually manage the border day-to-day: http://www.safecanada.ca/link_e.asp?category=6&topic=98.
Leave a Reply