{"id":32404,"date":"2021-07-22T14:42:31","date_gmt":"2021-07-22T14:42:31","guid":{"rendered":"http:\/\/citizenshiprightsafrica.org\/?p=32404"},"modified":"2021-07-22T14:42:31","modified_gmt":"2021-07-22T14:42:31","slug":"mauritius-storing-biometric-data-on-identity-cards-violates-privacy-un-human-rights-committee","status":"publish","type":"post","link":"https:\/\/citizenshiprightsafrica.org\/en\/mauritius-storing-biometric-data-on-identity-cards-violates-privacy-un-human-rights-committee\/","title":{"rendered":"Mauritius: Storing biometric data on identity cards violates privacy \u2013 UN Human Rights Committee"},"content":{"rendered":"<p>GENEVA (22 July 2021) \u2014 The UN <a href=\"https:\/\/www.ohchr.org\/en\/hrbodies\/ccpr\/pages\/ccprindex.aspx\">Human Rights Committee<\/a> has found that Mauritius\u2019 2013 National Identity Card Act violates its citizens\u2019 privacy rights, as there are no sufficient guarantees that the fingerprints and other biometric data stored on the identity card will be securely protected.<\/p>\n<p>The Committee\u2019s <a href=\"https:\/\/tbinternet.ohchr.org\/_layouts\/15\/treatybodyexternal\/Download.aspx?symbolno=CCPR\/C\/131\/D\/3163\/2018&amp;Lang=en\">decision<\/a> responds to a complaint filed by M.M., a 67-year old Mauritius national, who claimed that the country\u2019s smart identity card system has contravened his privacy right under Mauritius\u2019s Constitution and the <a href=\"https:\/\/www.ohchr.org\/EN\/ProfessionalInterest\/Pages\/CCPR.aspx\">International Covenant on Civil and Political Rights<\/a>.<\/p>\n<p>Mauritius launched the country\u2019s first identity card scheme back in 1995. In order to prevent multiple applications for an identity card with faked names and information, the authority amended its legislation in 2009 with additional biometric data requirements and increased penalties for non-compliance.\u00a0 A new smart identity card was subsequently launched in 2013 to replace the old identity card.<\/p>\n<p>In addition to the printed information such as name, date of birth and gender, the new electronic ID card also contains a microchip storing data including fingerprints that can be read by an e-reader. The government explained that the fingerprint requirement was essential to tackle identity fraud.<\/p>\n<p>M.M. refused to apply for the new smart ID card and took the Mauritius government to court, challenging the constitutionality of the new ID card scheme. The Supreme Court in 2015 ruled that even though there was expert evidence showing that biometric data retention was insecure and notoriously difficult to protect, the new ID card requirements had been made \u201cin the interests of public order\u201d.<\/p>\n<p>M.M then turned to the UN Human Rights Committee. In the course of the proceedings, Mauritius did not address the security lacunae concerning the possibility that fingerprint data could be copied onto falsified cards if the smart identity card was lost or stolen.<\/p>\n<p>The Committee took note of M.M.\u2019s argument, which was based on the expert evidence submitted to the Mauritius Supreme Court, concerning the radio frequency identification (RFID) technology used to store the biometric data. The expert explained that the biometric data can be copied, without physical contact of the card and without the card holder\u2019s knowledge, with RFID readers that can easily be bought online.<\/p>\n<p>Given the lack of information provided by the authorities of Mauritius concerning the implementation of measures to protect the biometric data stored on identity cards, the Committee found that M.M.\u2019s right to privacy was violated.<\/p>\n<p>\u201cIt is of paramount importance that any biometric identity scheme by any country is accompanied by robust safeguards to protect the right to privacy of individuals,\u201d said Photini Pazartzis, Chair of the Committee.<\/p>\n<p>\u201cWe regret that Mauritius did not provide enough information about such measures and look forward to receiving clarification in the framework of the implementation phase,\u201d she added.<\/p>\n<p>The Committee called on Mauritius to review the grounds for storing and retaining fingerprint data on identity cards based on the existing data security concern and to provide M.M. with an effective remedy.<\/p>\n<p>Read original: <a href=\"https:\/\/www.ohchr.org\/EN\/NewsEvents\/Pages\/DisplayNews.aspx?NewsID=27329&amp;LangID=E\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/www.ohchr.org\/EN\/NewsEvents\/Pages\/DisplayNews.aspx?NewsID=27329&amp;LangID=E<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"GENEVA (22 July 2021) \u2014 The UN Human Rights Committee has found that Mauritius\u2019 2013 National Identity Card Act violates its citizens\u2019 privacy rights, as there are no sufficient guarantees that the fingerprints and other biometric data stored on the identity card will be securely protected. The Committee\u2019s decision responds to a complaint filed by [&hellip;]","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-32404","post","type-post","status-publish","format-standard","hentry","category-uncategorized","region-mauritius","type-news-articles","item-year-676","item-theme-id-documents-and-passports"],"acf":[],"_links":{"self":[{"href":"https:\/\/citizenshiprightsafrica.org\/en\/wp-json\/wp\/v2\/posts\/32404","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/citizenshiprightsafrica.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/citizenshiprightsafrica.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/citizenshiprightsafrica.org\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/citizenshiprightsafrica.org\/en\/wp-json\/wp\/v2\/comments?post=32404"}],"version-history":[{"count":1,"href":"https:\/\/citizenshiprightsafrica.org\/en\/wp-json\/wp\/v2\/posts\/32404\/revisions"}],"predecessor-version":[{"id":32405,"href":"https:\/\/citizenshiprightsafrica.org\/en\/wp-json\/wp\/v2\/posts\/32404\/revisions\/32405"}],"wp:attachment":[{"href":"https:\/\/citizenshiprightsafrica.org\/en\/wp-json\/wp\/v2\/media?parent=32404"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/citizenshiprightsafrica.org\/en\/wp-json\/wp\/v2\/categories?post=32404"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/citizenshiprightsafrica.org\/en\/wp-json\/wp\/v2\/tags?post=32404"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}