Menu Close

Two ways to not protect biometric data demonstrated by world’s most populous countries

Several civil society groups in India are highly concerned about the spread of facial recognition and other surveillance technologies in the country, particularly in the context of a legal and regulatory open season on private data.

In China, a recently-passed data privacy did not motivate a physical access control and human resources software provider to secure its databases of face biometric templates and license plate records.

A huge trove of exposed records, including biometric data, was discovered on a server hosted by Alibaba for Xinai Electronics, reports TechCrunch.

The database has held as many as 800 million records, and contained complete URLs for image files. Neither were protected, and both could be accessed from a normal web browser. The data included high-resolution facial photos, as well as resident ID numbers and other personal information.

Xinai offers facial recognition for access management, but also employee time and attendance and other applications.

The researcher who discovered the exposed data also found a ransom note demanding cryptocurrency in return for not releasing the data.

It is the second major breach, chronologically and by size, of personal data in China since the country’s Personal Information Protection Law came into effect last November.

Scepticism abounds in India

A panel discussion hosted by the Internet Freedom Foundation and titled Privacy Supreme featured representatives from the CivicDataLab and Amnesty International India, as well as privacy advocate Usha Ramanathan and others.

The discussion focused on the relationship between privacy and technology, but also on the relationships between individuals, businesses, and the government.

Both the government and businesses in India are using new technologies as tools to violate people’s privacy, panelists agreed. The result is apprehensiveness about those technologies and how they will be used, and ultimately resistance.

Not only are technologies outpacing people’s ability to understand them, but businesses and government entities are racing to ingest data, and in some cases share it.

“You can’t have facial recognition technology being rolled out,” in this context without robust debate, Ramanathan argued. “A moratorium doesn’t have to be for 10 or 15 years. But there has to be enough time for people to know what it is.”

India’s Constitution does not enshrine a right to privacy, so Ramanathan suggests that a court judgement is needed to establish privacy rights in the country.

She also said that more than 9 out of 10 people in Chennai have declined to link their Aadhaar and voter ID credentials. In the absence of a legal right to privacy, according to Ramanathan, this is among the only recourse available to people.

India has had legislation to regulate data protection on the books for years, but has failed to operationalize it. Each passing year makes an update to the unimplemented law more critical. Read More

Generated by Feedzy


Innov8 is owned and operated by Rolling Rock Ventures. The information on this website is for general information purposes only. Any information obtained from this website should be reviewed with appropriate parties if there is any concern about the details reported herein. Innov8 is not responsible for its contents, accuracies, and any inaccuracies. Nothing on this site should be construed as professional advice for any individual or situation. This website includes information and content from external sites that is attributed accordingly and is not the intellectual property of Innov8. All feeds ("RSS Feed") and/or their contents contain material which is derived in whole or in part from material supplied by third parties and is protected by national and international copyright and trademark laws. The Site processes all information automatically using automated software without any human intervention or screening. Therefore, the Site is not responsible for any (part) of this content. The copyright of the feeds', including pictures and graphics, and its content belongs to its author or publisher.  Views and statements expressed in the content do not necessarily reflect those of Innov8 or its staff. Care and due diligence has been taken to maintain the accuracy of the information provided on this website. However, neither Innov8 nor the owners, attorneys, management, editorial team or any writers or employees are responsible for its content, errors or any consequences arising from use of the information provided on this website. The Site may modify, suspend, or discontinue any aspect of the RSS Feed at any time, including, without limitation, the availability of any Site content.  The User agrees that all RSS Feeds and news articles are for personal use only and that the User may not resell, lease, license, assign, redistribute or otherwise transfer any portion of the RSS Feed without attribution to the Site and to its originating author. The Site does not represent or warrant that every action taken with regard to your account and related activities in connection with the RSS Feed, including, without limitation, the Site Content, will be lawful in any particular jurisdiction. It is incumbent upon the user to know the laws that pertain to you in your jurisdiction and act lawfully at all times when using the RSS Feed, including, without limitation, the Site Content.  

Close Bitnami banner