January 17, 2006

ID Cards - Will This Be the UK Government's Next - if Biggest - IT Failure?

The UK Government wants to push through ID Cards to use biometric data to connect the card, its data ("basic personal information") and its owner. Uh huh. While one can theoretically imagine how such a scheme would work (and the govn't is dealing in theory since its own site says it doesn't know yet what the cards will actually be like), you would be hard pressed to find any technologist (not funded by a biometrics company) who would say that such a scheme is practical at scale. Indeed, the summary of the consultation exercise on ID cards, which found largely against the practicality or efficacy of such a scheme is - no longer to be found on the Govn't web site. You can still find news articles quoting various computer science experts who spoke to the committee on the multiple problems with ID cards.

And you'd think that such concerns might be part of why the house of lords chucked out the ID Card Bill yesterday. Apparently, though, they were worried about costs - the fact that they weren't well enough defined by the government. Who knows, maybe that's a really good first act rejection: because if the government comes back with a better cost breakdown, perhaps the House will get to the gnarly question of "how can we trust those figures."

Why would they ask such a question? Because the Government has a lousy track record when it comes to specifying and delivering - no matter what the budget - national IT systems. And if they can't get a national database right on the smaller scale of specialist IT systems like the Magistrates court, Ambulance Services [additional research paper pdf], doctor's surgery systems, the police's IMPACT program or Tax Credits, how on earth can they be trusted to get an even more complex system like an ID registry with databases, specialized hardware for collection of biometric data, specialized hardware and software for matching biometric data, specialized training, and specialized secure documents delivered?

So the question is pretty simple the next time the house of lords gets the ID Card Bill back: even if delivering an excellent ID Card system were possible, and even if there were no questions about the technology, about the biometrics, the database security, the security layers between the system itself and humans accessing it, the hackability of the cards, and never mind the social, moral, or economic issues, or for that matter the political ones about whether or not such a system could even stop a terrorist [look here for a list of all these issues and the organizations that query them], disregarding all that and cutting to the chase, would the UK Government simply have the wherewithall to deliver it?

Posted by mc at January 17, 2006 9:47 PM