We’re paying for a high-tech Broadway show that’s themed
around ’security,’ but we’re actually watching the equivalent of a catastrophic
performance in a low budget community theatre. The price of admission? Only
millions of dollars and your privacy.
As of June 1, 2009, Canadians and Americans alike require an
Enhanced Drivers License (EDL), a NEXUS card, a FAST card, a passport, or a
Secure Certificate of Indian Status to cross a Canadian-American land border.
In Canada, only Ontario, Quebec, b.c. and Manitoba have moved ahead to develop provincial
EDLs; the Saskatchewan, New Brunswick and Prince Edward Island governments have
all decided not to provide these high tech, low privacy, cards to their constituencies
(Source).
To apply for an EDL in a participating province, all you
need to do is undergo an intensive and extensive 30-minute face-to-face
interview at your provincial equivalent of the Department of Motor Vehicles.
Your reward for being verbally probed? A license that includes a Radio
Frequency Identification (RFID) tag and a biometric photograph. The RFID tag
includes a unique number, like your Social Insurance Number (SIN), that is
transmitted to anyone with an RFID reader. These readers can be purchased off
the shelf by regular consumers, and the number your EDL emits is not encrypted
and does not require an authentication code to be displayed on a reader.
Effectively, RFID tag numbers are easier to capture than your webmail password.
EDLs are an incredibly expensive ’solution’ for individual
Canadians to purchase, given that in Ontario alone an EDL
will cost almost $30 more than a passport. Further, Manitobans have turned
a cold shoulder to these cards; only
a few thousand residents have adopted them out of an expected hundred thousand
or so. In Ontario, my contacts have told me that the responsible ministry
has yet to provide policy documents or manuals to the frontline staff who are
tasked with issuing these licences. Without their scripts, how will these staff
members play their parts in issuing each Canadian a little piece of the great
North American security theatre?
EDL programs are big ticket items that Canadian provinces
are being pressured to pay for in order to satisfy the Western Hemisphere
Travel Initiative (WHTI), a unilateral American policy directive. While fiscal
conservatives might argue that in this period of reduced government incomes and
ballooning debts, such big ticket items should be carefully evaluated, we might
ask them why government should be any more careful of spending money on EDLs
than it is in otherwise ’securing’ the border? As recently reported by Dean
Beeby, $8.7
million dollars have been spent since 2006 on gates, barriers, fences,
sirens and signs to catch people who are trying to illegally cross the border.
The catch? Gates have fallen on cars. Cameras can’t actually catch the license
plates of illegal nighttime border crossers. Automated video analysis systems
don’t work. It would seem as though the various props of our Broadway security
show should be returned to the manufacturer as defective or even dead on
arrival!
If broadcasting an equivalent of a radio-accessible SIN and
high financial costs to individual Canadians weren’t enough, there are
additional privacy-related issues with EDLs. While the Office of the
Information and Privacy Commissioner/Ontario is promising that future
generations of EDLs will integrate ‘privacy by design’ principles, insofar
as future
cards won’t broadcast their unique identification numbers without first being
activated, the current licenses that are being deployed in that province
are absolutely devoid of any real protections (the
much touted ’security sleeve’ is demonstrably faulty).
While integrating privacy by design is a positive step
forward, Ontario is the only province that has publicly discussed this at
length. Moreover, even in Ontario there has been little comment about the
worries of government creating massive databanks of facial images that are
designed to be rapidly searched. As it stands, facial recognition technologies
are sub-par at meeting the expectations that the public has developed from
watching 24, Heroes, and other works of science fiction. In fact, massive
amounts of research needs to be done to improve accuracy rates of facial
recognition technologies, and a large database to conduct tests on to develop
the technology is just what the scientist ordered. Thus, while the facial
images that are taken of individuals will be of minimal use to government
agencies at the moment, we cannot assume that ‘privacy by technological
incompetence’ will be something Canadians can rely on over the long term.
Perhaps most importantly, privacy advocates’ underlying
worries about these cards have not been addressed. As I have previously noted,
“In the cases of both radio tags and biometric data, there
exists a serious danger of function creep. As more and more members of the
Canadian and American public carry these devices, increased pressures will
extend how these documents are used, exceeding their initial purpose of
securing American borders” (Source).
While various RFID proponents have insisted that RFID tags
cannot, in practice, be used to track user data, the web cookies that we download
after visiting websites were never intended to let companies track us. Just
last year however, the Wall Street Journal published an article revealing that,
lo and behold, the company that will do no evil (i.e. Google) is using web
cookies as an “Internet tracking technology that enables it to more precisely
follow Web-surfing behavior across affiliated sites” (Source).
RFID tags are meant to track cattle as they move around the world; surveillance
is the reason for their very existence. Why would we ever assume that this
technology would not ultimately be used for some other purpose as soon as it
were applied to human targets, when other evidence demonstrates that
non-surveillance technologies are readily requisitioned to monitor our daily
activities?
This worry about pervasive surveillance is something that
Dr. Andrew Clement has discussed in various presentations through the Canadian IDentity Forum. He
has noted that, despite government assurances, there is no evidence that real
speed enhancements will be realized at the border. At most, Canadians can
expect to pass through borders 5-10 seconds faster than they do right now.
Moreover, while there are claims that EDLs are somehow ‘more secure’ than
present licenses, this is just another part of the script in the
Canadian/American security theatre. You see, to qualify for an EDL, individuals
must show foundational documents (e.g. birth certificates) to prove that they
are who they claim to be; where a foundational document is successfully forged
the ’security’ offered by the EDL is defeated. Moreover, the RFID tag can be
copied, letting another person clone the tag’s unique number. When Ms. Daghum
comes to the border with her cloned tag, she can have Ms. Ouziel’s profile
brought up on the border guard’s screen. If Ms. Daghum physically appears like
Ms. Ouziel, then a border guard could be fooled about the authenticity of the
RFID tag based on the information called from government databases. The RFID is
insecure and the biometric image currently unreliable -- how, again, do these
cards actually make us safer (as opposed to making us feel safer) from terror
threats?
If high costs, minimal border-crossing efficiencies,
unreliable biometric images, and easily duplicated RFID tag numbers aren’t
enough to make you wonder about the capacity of EDLs to secure the border, I’ll
leave you with two concluding points. RFID tags, and the data that they emit,
contribute to what scholars such as David Lyon and Kevin Haggerty have termed
‘the surveillance society,’ or a society where “[w]e are inadvertently handing
over to centralized authorities an infrastructure of visibility the likes of
which no society has ever seen before” (Source).
Canadians regularly moan that they can’t protect their own
privacy but, by refusing to adopt an EDL and using a passport instead, they
will find that protecting their privacy is actually cheaper than buying into
the surveillance society. Get a passport, and congratulate yourself on being a
privacy advocate by taking yourself out to dinner on your EDL-related savings!
Second, as has been noted by Canadian civil liberties groups:
“ . . . a passport is an internationally recognized travel document that gives
the holder certain rights, while a driver’s licence is not . . . If the U.S.
decides to deport a Canadian while she is carrying her passport, she must be
deported back to Canada.
“A Canadian carrying a driver’s licence could be deported to
anywhere in the world” (Source).
We are all unfortunately aware of the horrors that can occur
when suspected ‘terrorists’ are sent to places such as Syria. While Maher Arar’s case does demonstrate
that a passport will not necessarily persuade American authorities to act
within the confines of law, an EDL will not legally persuade foreign
authorities that you should be sent to Canada instead of a torture cell in
Syria. Even in a world where a passport has diminished legal standing in the
eyes of American authorities that diminished standing is better than the
absolute lack of legal standing that EDL-holders are left with.
In summation, you’d be well advised not to take part in this
most recent act of the Canadian-American security theatre. You’ll pleasantly
find that there’s a reduced entry fee to the security show with a passport
(with money left over to buy a drink and snack!). Far more importantly, the
passport might actually prevent the ushers/border guards from deporting you to
a truly horrible place to ‘enjoy’ unspeakable acts of barbarity. Be your own
privacy advocate, boycott the EDL, and buy yourself a passport if you want to
cross a Canadian-American land border.
Christopher Parsons is a PhD Student in the
political science department at the University of Victoria, and is a member of
the New Transparency Project. He is interested in how privacy
(particularly informational privacy, expressive privacy, and accessibility
privacy) is affected by digitally mediated surveillance, and the normative
implications that this has in contemporary Western political systems. His
research currently focuses on the technologies that enable digitally mediated
surveillance, such as deep packet inspection, behavioural advertising, and
radio frequency identification, and how these technologies influence citizens
in their decisions to openly express themselves or engage in self-censoring
behaviour. His current thoughts and thinking can be found at his website, where he regularly writes about current
and developing technologies and practices as they relate to surveillance and privacy.