As soon as known as ‘the Functionality’, the Division of Residence Affairs constructed a system for the private and non-private sector to confirm individuals’s identities towards official paperwork like start certificates, passports, and state drivers’ licences.
The Id Matching Companies, as they’re presently identified, comprise three companies: one for verifying paperwork, one for verifying faces, and one for figuring out faces.
It’s the third of these, the Face Identification Service (FIS), that triggered explicit ire amongst privateness advocates who warned the inclusion of facial recognition expertise within the system may put us on “on a slippery slide to a really dystopic Australian tradition” of surveillance.
The FIS is a one-to-many facial recognition system, which means it will probably take a single picture of an individual and examine it towards a database of facial photos to, because the identify suggests, establish that particular person.
One-to-one facial recognition, alternatively, is used day by day for verifying an individual’s identification by matching one headshot of an individual towards one other. Consider going by way of a passport gate or signing up for an app that wants a photograph of your driver’s licence and a selfie.
In keeping with Lawyer Normal Mark Dreyfus, the one-to-one Face Verification Service (FVS) was used 2.6 million occasions within the 2022-23 monetary 12 months.
One-to-many facial recognition programs, just like the FIS, are particularly controversial.
That is what retailers like Bunnings and Kmart had been quietly working below the guise of catching banned clients – drawing the ire of the Workplace of the Australian Data Commissioner, and most people.
It is usually the type of facial recognition behind Clearview AI’s product that seeks to search out an unknown particular person from an enormous set of ill-gotten biometric information scraped from social media.
The laws governing this centralised ID system – the Id Matching Companies Invoice 2019 – has been criticised by the Regulation Council of Australia for failing to “embrace partial checks and constraints towards creep-past-the-line of respectable and proportionate makes use of”.
An early model of that invoice left open the chance for the FIS “for use for the detection, investigation or prosecution of minor offences”, the Regulation Council stated.
Finally, that invoice lapsed when parliament was dissolved forward of final 12 months’s federal election.
Second chew of ID matching cherry
On Wednesday, Dreyfus dredged it again up with little fanfare, providing legislative assurances – at the least in the intervening time – towards the usage of the FIS for mass surveillance.
Together with shifting the Id Matching Companies below the purview of the Lawyer Normal’s Division, and away from Residence Affairs, the Id Verification Companies Invoice 2023 places strict limits on use of the one-to-many FIS.
“There may be substantial public curiosity in permitting one-to-many matching to be undertaken in these circumstances, given the dangers to such individuals, if their true identification will not be appropriately protected,” Dreyfus stated.
“All different makes use of of one-to-many matching by way of identification verification companies might be prohibited.
“Let me be clear, one-to-many matching will be unable to be performed by way of identification verification companies for regulation enforcement, intelligence gathering, or group safety.”
An identification request have to be of a “single facial picture of a person” – not a video feed – and have the suitable authorisation and endorsements.
The invoice mandates that the division will publish the variety of requests, and whether or not they had been appropriately authorised, yearly in an try at transparency.
Dreyfus stated the invoice “meets public expectations” round privateness, oversight, and transparency and it is going to be reviewed inside two years of coming into power.
“The invoice permits Australians to conveniently and securely interact with the digital financial system and entry important companies whereas minimising the danger of identification fraud and theft,” he stated.