• Welcome to DOSBODS

     

    DOSBODS is free of any advertising.

    Ads are annoying, and - increasingly - advertising companies limit free speech online. DOSBODS Forums are completely free to use. Please create a free account to be able to access all the features of the DOSBODS community. It only takes 20 seconds!

     

Sign in to follow this  
Democorruptcy

Businesses face privacy minefield over contact-tracing rules

Recommended Posts

Nice little side earner selling contact details to fraudsters? ID cards back on the agenda?

Quote

 

Bars, restaurants, hairdressers and churches face a minefield, privacy campaigners have warned, after the government instructed them to record people’s contact details in case they need to assist with test-and-trace efforts.

From 4 July, hospitality businesses and other venues in England will be able to reopen. To minimise customer contact, restaurants will be limited to table service inside, Boris Johnson said on Tuesday, and will be asked to help NHS Test and Trace “by collecting contact details from customers, as happens in other countries”. He added: “We will work with the sector to make this manageable.”

But privacy groups said the industry had been given no guidance on how to gather and store potentially sensitive data, while customers had been given no assurance that their information would be handled safely.

Related: Concerns raised over proposed registration for England's drinkers and diners

“This sounds like an excessive and intrusive move designed to paper over the cracks of a much bigger contact tracing failure,” said Silkie Carlo, the director of the Big Brother Watch campaign group. “It also poses privacy risks. Asking pubs and restaurants to become data controllers overnight is unfair – and could see personal data hoarded, lost or misused – whether for marketing or unwanted personal contact. We’ll be monitoring to ensure the scheme is voluntary, safe and respects privacy.”

The Information Commissioner’s Office (ICO) said it was “assessing the potential data protection implications of this proposed scheme and is monitoring developments”.

Some establishments will find it easy to follow the guidance. Since all customers must be seated, many bars will require reservations, creating a list of customers’ contact details. Online booking services such as OpenTable provide secure systems on which to store data.

In New Zealand, where a similar requirement was implemented in late March, businesses without online bookings were asked to record customers’ full names and phone numbers or email addresses on paper forms. The registers would be destroyed after eight weeks, according to the New Zealand privacy commissioner.

The system still led to privacy breaches. One woman found herself at the receiving end of numerous approaches, friend requests and text messages from a Subway sandwich maker, who had taken her name from his store’s contact-tracing form. “I felt pretty gross, he made me feel really uncomfortable,” the woman, identified as Jess, told the Newshub website in May.

In late May, New Zealand’s register system was superseded by a more sophisticated approach that asked customers to scan a QR code upon entering a shop or restaurant to register their attendance. No such system has been set up in the UK.

“The sad reality is that people’s contact details could potentially be inappropriately handled by pub staff, opening consumers up to all kinds of privacy and security risks, including the potential of stalking or other unwanted criminal activities,” said Ray Walsh, a digital privacy expert at security site ProPrivacy. “These privacy risks are particularly concerning in regards to women, minorities and other vulnerable or discriminated-against groups who could find themselves targeted or harassed.”

https://www.hl.co.uk/news/2020/6/24/businesses-face-privacy-minefield-over-contact-tracing-rules-say-campaigners?

 

 

Share this post


Link to post
Share on other sites

It would be trivial for them to introduce a number for everyone.  Just have an online system that converts NI numbers into a 'code' (just take the hash of the NI number), and then use that code for registering that you've entered a building (either write it down or scan as QR).  The computer would store the computation so that the NI was linked to the hash, and they'd have contact details for the NI numbers.

The reason they don't do this is because a) they know there are too many non-NI people and b) they know too many NI numbers don't have accurate addresses associated with them.

It is a weird situation (but increasingly 'normal' these days). 

[Not that I want this system -- I don't think it matters at this stage (summer), and when nCoV does resurface (winter) everyone will ignore it and lockdown won't work anyway]

Share this post


Link to post
Share on other sites
13 minutes ago, dgul said:

It would be trivial for them to introduce a number for everyone.  Just have an online system that converts NI numbers into a 'code' (just take the hash of the NI number), and then use that code for registering that you've entered a building (either write it down or scan as QR).  The computer would store the computation so that the NI was linked to the hash, and they'd have contact details for the NI numbers.

A new online system that's converted everybody's NI number would be worth the hacker's time.

Share this post


Link to post
Share on other sites
1 hour ago, dgul said:

It would be trivial for them to introduce a number for everyone.  Just have an online system that converts NI numbers into a 'code' (just take the hash of the NI number), and then use that code for registering that you've entered a building (either write it down or scan as QR).  The computer would store the computation so that the NI was linked to the hash, and they'd have contact details for the NI numbers.

The reason they don't do this is because a) they know there are too many non-NI people and b) they know too many NI numbers don't have accurate addresses associated with them.

It is a weird situation (but increasingly 'normal' these days). 

[Not that I want this system -- I don't think it matters at this stage (summer), and when nCoV does resurface (winter) everyone will ignore it and lockdown won't work anyway]

90% died with it, not of it. The lungs of someone breathing their last would probably test positive for everything in the vicinity anyway 

Share this post


Link to post
Share on other sites
59 minutes ago, Democorruptcy said:

A new online system that's converted everybody's NI number would be worth the hacker's time.

The government already have your NI number, and hold it in whatever form they like, secure or not.

It would be a hash, so it wouldn't be possible to convert the published 'covid number' back to a NI number (if anyone could do this they'd be better off hacking the banking system).

Share this post


Link to post
Share on other sites
2 minutes ago, Stuey said:

90% died with it, not of it. The lungs of someone breathing their last would probably test positive for everything in the vicinity anyway 

Oh, I don't think it is necessary* -- just that the government is being useless.

[* at this point.  I think it might be necessary next spring -- but it won't be useful because by then all the feral types will have decided there's nothing to worry about and will ignore lockdown2]

Share this post


Link to post
Share on other sites

This occurred to me yesterday.

Every pub will now need to nominate a data handler, register with the ICO, pay up their £40 and jump through lots of hoops.

As if they didn't have enough to do in the next 10 days.

 

Share this post


Link to post
Share on other sites
4 hours ago, dgul said:

The government already have your NI number, and hold it in whatever form they like, secure or not.

It would be a hash, so it wouldn't be possible to convert the published 'covid number' back to a NI number (if anyone could do this they'd be better off hacking the banking system).

I know I have a NI number, I've had it for years. I'd still be more worried about a new online system to convert it. I don't fancy it being introduced into buying a pint.

Share this post


Link to post
Share on other sites

It just seems to be more half assed measures gassed out loud for now.  The idea is maybe sound if this wasn't spread everywhere already as well as a lot of people not bothering to give direct details... As well as people just ignoring texts or whatever.

I mean back in January or February where you had those strict measures taken for Wuhan returnees staying in hotels, police escorts high security... At the same time as thousands of flights coming in daily from around the world.  It plays like some bad comedy honestly.

 

Share this post


Link to post
Share on other sites
6 hours ago, Wight Flight said:

This occurred to me yesterday.

Every pub will now need to nominate a data handler, register with the ICO, pay up their £40 and jump through lots of hoops.

As if they didn't have enough to do in the next 10 days.

 

I thought the rules had been relaxed at the beginning of lockdown?

https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2020/03/data-protection-and-coronavirus/

*I will also be named Barry and will be giving a random number to them, they don't need anything else.

Share this post


Link to post
Share on other sites
2 minutes ago, stockton said:

I thought the rules had been relaxed at the beginning of lockdown?

https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2020/03/data-protection-and-coronavirus/

*I will also be named Barry and will be giving a random number to them, they don't need anything else.

I wouldn't want to rely on that woolly wording in court.

Share this post


Link to post
Share on other sites
7 hours ago, Wight Flight said:

I wouldn't want to rely on that woolly wording in court.

Fair enough, thinking about it more now some pubs that serve food will already be handling this data (if you reserve a table) so it may not be a big issues.

I also think the ico would rather go after a big multi national that has lost massive amounts of data not some little pub that has passed on names and numbers.

Share this post


Link to post
Share on other sites

I've been having second thoughts about giving your name as Barry Gardiner MP.

I'm now thinking "Dominic Cummings" would be better.

Can you imagine the consternation when, after the inevitable immediate data breach via Twitter, a group of protesters turn up and realise they've been well and truly trolled.

Carole Cadwalladr would go ballistic at the thought of an evil right-wing conspiracy aimed entirely at showing up her friends' hypocrisy. As well as the prospect of yet another major journalistic award for her exclusive scoop being torn out of her dreams....

Share this post


Link to post
Share on other sites
Posted (edited)

.

Quote

As for the rest of the regulations — no loud music, no singing, no dancing,...

Naturally no more knees up in a land of bend the knee.

It would be false pretences to call them pubs even if they still serve beer.  To continue the fervent and religion like killjoy theme likely that'll be the next to go..

Edited by twocents

Share this post


Link to post
Share on other sites
7 hours ago, twocents said:

.

Naturally no more knees up in a land of bend the knee.

It would be false pretences to call them pubs even if they still serve beer.  To continue the fervent and religion like killjoy theme likely that'll be the next to go..

They'd probably be better having a van and delivering pints to your door.

The beeman could travel round on a nice electric float dropping pints of beer and cider off.

Share this post


Link to post
Share on other sites
1 hour ago, sarahbell said:

They'd probably be better having a van and delivering pints to your door.

The beeman could travel round on a nice electric float dropping pints of beer and cider off.

Could well be the end game IMO

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.