1. Pat Tyrrell Vale Atlantic Associates 5 June 2009AFCEA TechNet

2. The Plethora of Personal Data Government: ID Cards Health Records Tax Records Immigration records Car records Commercial World: Loyalty Cards Credit Card records 5 June 2009AFCEA TechNet

3. How is it managed? Mostly legacy systems Information Silos Poor integration of Data across silos Where data is integrated – considerable scope for information chaos. Global issue 5 June 2009AFCEA TechNet

4. Databases..... 5 June 2009AFCEA TechNet Separate databases with recognised, individual functions Extract, Transform and Load Integrated database with users at a different level

5. Setting the Requirement.... Looking for a “Date Centric” approach. “It’s the data, dummy!” What do you want the data for? Where is this necessary data stored? How is its accuracy and relevance tracked? Who has a need to access this data? Do we need to have the data integrated? 5 June 2009AFCEA TechNet

6. New Systems Data Handling Limitations Existing Sources Mission Data Knowledge Intelligence Decision Maker Information Intelligence Cycle Intelligence Requirement Imported Data  Analysts  Networks  Computing  Storage  Search Tools Standards Large Databases Multi-formats Multi-level security Update Requirement Defines Data Requirement  Partners  Commercial  Shared  Police  Government   Local Govt. Identified by “Gap Analysis” Data Centric Systems Other National and International Databases

7. Failure of Information Privacy Police National Computer (before audit systems introduced): Sale of sensitive data on car number plates to private companies. Release of data relating to criminal investigations. National Health Database (when available!): Hacking to see if Leo Blair had MMR jab. Discovering celebrity medical secrets. House of Commons: Data on MP’s expenses. 5 June 2009AFCEA TechNet

8. Who is Responsible? Data Owner? The Government? Data System Designer? The Public? All of the Above? It is a societal issue rather than a technical one! 5 June 2009AFCEA TechNet

9. Available Technology? Technology can integrate data rapidly and accurately. Recent advances in XML technology have shown ability to link heterogeneous datasets Research, involving 6 major, disparate, complex data bases, such as that found within large police forces, allowed cross searching for in excess of 5 million complex records (~ 1.5 Tbytes in RDBMS) Pressure on technology to deliver across the board. 5 June 2009AFCEA TechNet

10. Privacy Requirements Strategic Policy agreed at international level Public acceptability What assurance levels are required? Who can see what? What is the “need to know”? How do you police the system? Authentication and authorisation of system users. Reliable audit processes in real time. 5 June 2009AFCEA TechNet

11. Technical Solutions Integration of data requires single representation of data. Some users may have the right to see all of the data, others will have the right to see only partial sets of the data. XML tagging may provide the flexibility of approach in providing adequate and enforceable privacy indicators. Systems need to be accreditable. 5 June 2009AFCEA TechNet

12. AFCEA Role in International Identity Management Provide the technological understanding of ID management: What is feasible? What new technologies are emerging? What are the implications from a social perspective? Provide “thought leadership” on what, where, how and when: Privacy safeguards Public acceptability Work as a mentor and guide to policy makers. 5 June 2009AFCEA TechNet

13. Summary Effective management of personal data leaves much to be desired It is primarily a policy issue rather than a technical one A strategy needs to evolve to ensure privacy means Private! Traditional data systems are ineffective and innovative technologies need to be utilised. “If you always do what you’ve always done, You’ll always get what you’ve always got”! 5 June 2009AFCEA TechNet

14. PatrickJTyrrell@aol.com +44 7711 322541 5 June 2009AFCEA TechNet