Report - Guardian

The LSE Identity Project Report: June 2005 71Instead, any information that is collected for the ID card system is stored locally at theregistration offices. A private contractor, Bundesdruckerei GmbH, uses this informationto issue the card, but as soon as the document is completed, all personal data is deletedand destroyed. 167No federal agency or private sector organisation can use the ID card number forregistration. The scheme is organised at the level of the Länders (provinces), whichcollect the address, and details of secondary places of residence. This information is notprotected by law because it is not considered private; as a result, it is made generallyavailable for a fee. 168Biometric identification cards have not yet been developed. The German Prevention ofTerrorism Act of 2002 includes a specific provision that biometric data in passports andID cards may only be stored on the cards and not in centralised databanks. However, theFederal Government is pursuing the policy through the EU.Data Protection authorities are concerned that a biometric system must meet some basiccriteria. Firstly, the biometric data must not be used to gain other information aboutpersonal attributes (for example, reviewing photos in order to determine race).Secondly, individuals must know which biometric data will be stored and how it will beused. Thirdly, the biometric data should only be used for the purpose of identification.Finally, mechanisms must be put into place to ensure accuracy in the use of biometrics,and to prevent discrimination. 169 These criteria are simply a restatement of Germanprivacy law.The costs and feasibility of biometrics are an issue. The Federal Parliament’s Office ofTechnology Assessment advised against complex systems involving centraliseddatabases, warning of “a gigantic laboratory test”, and varying costs. The report saysthat, depending on different scenarios and document features, the cost could range fromEUR 22 million to EUR 700 million for implementation and from EUR 4.5 million toEUR 600 million for annual maintenance of systems for passports and ID cards. 170As there are other cards in use within Germany, including a separate card for access tohealth care, identity cards are not required for access to all public services. In May2002, the Government announced plans for the development of an electronic universalhealthcare card. The proposed card will contain, among other data, a patient'sidentification and emergency healthcare information. Patients will be able to use thecard to fill prescriptions and disclose healthcare information to physicians on avoluntary basis. 171An interesting controversy arose surrounding a proposed “smart jobcard”, envisionedfor all employees in Germany. It was intended that data such as current employer, salary167 ‘A National Identity Card for Canada?’, Report of the Standing Committee on Citizenship and Immigration,October 2003.168 HAC report, July 2004.169 Konferenz der Datenschutzbeauftragten des Bundes und der Länder, March 7-8, 2002, available athttp://www.bfd.bund.de/information/DS-Konferenzen/63dsk_ent1.html.170 ‘Introduction of biometric ID cards and passports to cost up to EUR 700m in Germany’, eGovernment News,November 18, 2004, http://europa.eu.int/idabc/en/document/3495/336.171 ‘Privacy and Human Rights 2004’, EPIC and PI.