Mixed reactions to Digital ID draft law

[webfact]

Mixed reactions to Digital ID draft law

By ASINA PORNWASIN 
THE NATION

 

 

WORRIES OVER PRIVACY AND SECURITY OVERSHADOW PERCEIVED BENEFITS FOR COMMERCE, TRADE AND PROSECUTION 

 

CYBER EXPERTS are weighing the pros and cons of a draft law about digital identification that will allow government agencies to collect citizens’ digital ID.

 

Some pointed to the benefits of the proposed new legislation for both the digital economy and society while others voiced concern over security and privacy issues.

 

The Digital Identification Bill was approved by the Cabinet in principle last week and is expected to be passed by the National Legislative Assembly and take effect by the middle of next year, according to its drafters.

 

Under the proposed new law, a National Digital Identification (NDID) company will be set up to build a so-called NDID Platform, which will be a technology platform to identify and authenticate the digital ID of people. The NDID will issue licences to identification providers (IDP) to provide easy and secure digital identification for online transactions.

 

Paiboon Amonpinyokeat, a cyber-law expert, said the bill would establish regulations for online ID authentication and could strengthen cybersecurity. The law would help the government build database of people’s online ID, he added.

 

The government can collect identification authentication information and allow state agencies and the courts to use this information for prosecution in case of an offence or for posing a threat to the government’s system.

 

“In the past, there were no rules; it was difficult to investigate who had committed a wrongdoing,” Paiboon, who is the founder and legal counsellor of P&P Law Firm, said. 

 

Though the Internet service provider, mobile operator and social media platforms like Facebook and Google have online identity authentication, it is difficult to seek information from them when the government wants to investigate or file a lawsuit.

 

Financial sector to gain

 

He said it might be difficult to enforce this law, as most identification authentication providers are foreign companies, like PayPal, Facebook and Google.

 

Prinya Hom-Anek, an expert on cybersecurity, said the bill would help the legal authentication of digital identification, which could be used as e-evidence in court.

 

On the economic side, the bill is expected to benefit the financial sector and other industries, especially the government sector, that need digital identity authentication, said Bhume Bhumiratana, an adviser to the committee who drafted the Digital ID bill and a member of the working committee that designed the NDID system.

 

“It will cost less to get people identification authentication,” said Bhume.

 

The digital ID bill will enable people to open accounts and seek lending via the Internet or a smartphone.

 

Once this bill becomes a law, everyone can feel secure when doing online transactions as all transactions which need face-to-face for authentication will be moved online once the technology is ready may be in a year, he added.

 

For society, the bill would make it easier and more reliable for the public to collect names, make inquiries or lodge complaints, the bill drafter said.

 

It also can be linked to education and healthcare and make it easier to identify students and patients.

 

People will have their digital IDs on many IDPs and they can choose which one they want to use for a particular transaction.

 

Asked if the law could be implemented for an election, he said it was possible but the matter was more sensitive. “Election is not only about identity authentication, but a digital ID authentication can be used as part of the election process. For example, instead of presenting their ID cards, people might identify themselves with a mobile phone,” Bhume said.

 

Predee Daochai, chairman of the Thai Bankers’ Association, said that the law would help the entire process of digital ID authentication and proof to be more solid and trustworthy and acceptable to all stakeholders, both government and private sector.

 

It will encourage digital transactions, increase the number and efficiency of digital transactions while reducing the cost of operation, he said.

 

It would facilitate the digital transition, while helping increase the ease of doing business for the country, Predee said.

 

However, there are some concerns about the bill.

 

Cybersecurity risk is a point that remains an issue of concern although the NDID has been designed to be difficult for hacking, Bhume said.

 

Paiboon pointed out that the bill gives wide coverage to identification authentication, including PIN code, e-signature, fingerprint, username and password and so on.

 

To collect these types of identification authentication, which is personal data, into a portal manned by the government would raise issues of privacy violation, he added.

 

“The principle of taking care of people’s digital ID should be tied up with the Personal Data Protection Bill,” said Paiboon.

 

Prinya asked how reliable and secure the system would be, as well as how the concept of the bill would be implemented successfully in the real world.

 

What is the benefit of the new digital ID platform for all government organisations as they already have their own digital ID database? he asked.

 

Poomjit Sirawongprasert, president of the Thai Hosting Club, said that digital ID would help reduce offline fake ID cards, as faking a card is made easy but hard to prove. 

 

But she was concerned about the accuracy of the identity authentication algorithm as once the algorithm is wrong, the onus would be on the people to prove that they are not the ones accused of the wrongdoing.

 

The Digital ID bill is one of bills issued by the government to promote a digital economy and society. Another important bill, the Cybersecurity bill, will be going before the Cabinet for consideration by the end of this month.

 

Source: http://www.nationmultimedia.com/detail/national/30354611

 

-- © Copyright The Nation 2018-09-17

[Samui Bodoh]

"...However, there are some concerns about the bill.

Cybersecurity risk is a point that remains an issue of concern although the NDID has been designed to be difficult for hacking, Bhume said.

Paiboon pointed out that the bill gives wide coverage to identification authentication, including PIN code, e-signature, fingerprint, username and password and so on..."

 

Given that this would the proverbial 'Holy Grail' for anyone wanting to hack stuff in Thailand, perhaps there should be something better than "designed to be difficult for hacking"?

 

We have seen all over the world that companies and governments get hacked, thus it is not a good idea to have a central repository for all the information on the Thai people. Further, having a central repository for the Thai people is a bit frightening considering the sheer number of coups and/or authoritarian governments here. Finally, while it may simplify business on-line, it is inevitable that people's data would be stolen at some point; too many people would need access to the database in order to run it. And, even if some people's data isn't hacked, we all know that bureaucrats here are... willing to be persuaded?

 

While a centralized system of data storage sounds like a good idea, the question of what happens when (not if) it gets hacked needs to be answered in advance.

 

I wouldn't want my data in that database (I am even uncomfortable filling out the immigration form!); is there anyone happy to have their data in it?

 

It sounds like a disaster waiting to happen...

 

 

[bluesofa]

3 hours ago, webfact said:

The NDID will issue licences to identification providers (IDP) to provide easy and secure digital identification for online transactions

So the weak link already is the IDP who will be able to (irresponsibly) access the data.

 

3 hours ago, webfact said:

Once this bill becomes a law, everyone can feel secure when doing online transactions as all transactions which need face-to-face for authentication will be moved online once the technology is ready may be in a year, he added.

Call me cynical, but I'm sure like a lot of others, I'll be waiting to hear the stories of 'processing errors' here that cause people to become non-existent, or gain an 'erroneous' bad credit rating that will be nearly impossible to clear.

Those are the nightmare stories we have seen in countries that for decades already have online transactions.

 

I suppose some foreigners could end up with instant Thai citizenship for a 'consideration'.

 

[Antonymous]

Incredible that everyone on ThaiVisa isn’t all over this thread. The end of privacy is nigh. Really. Don’t you care?

 

I have to say this again. As I wrote on the thread about CCTV in Chiang Mai, the trend towards total surveillance is unstoppable the world over. Very sad for those of us old enough to have enjoyed the relative freedom of another era in our salad days, but totally normal to millennials, who can't understand why we still hang on to our quaint notions of privacy.

 

Never trust a bureaucrat. Never trust the system to do what is right, especially a junta!. Privacy is the single most effective means of preserving freedom against an encroaching state. The state wants to know everything about you. They use Google, Facebook and other social media if they can get it and because it may be difficult in Thailand to access that, they need their own law to monitor everything you do. Total control of an individual’s identity is taking place now the world over and it leads to this: censorship and state control.

 

I was brought up in an era where privacy was considered a fundamental right in any free society. I believe that my identity – and that includes any of my personal information that I want to keep to myself – belongs to me and not to the state.

[Surasak]

Big Brother on the loose again. Nothing more than an invasion of privacy. Just proves how close to a communist state this country is. The Chinese invasion?