Home arrow Publications
Publications

Publications,papers and slides relating to our 'public' events are available here.Internal research papers and slides from members-only meetings aredistributed privately.


Privacy-friendly fraud detection and payment enforcement

Thecomplex issues of detection and enforcement are critical to buildingand maintaining trust in road pricing. But achieving this whilstsafeguarding the privacy of road users is a considerable challenge.

On17th September 2007 the Department for Transport and the EnterprisePrivacy Group hosted a conference to examine the most appropriatestrategies for privacy-protecting detection and enforcement withinpossible future road pricing schemes. A combination of presentationsand facilitated debate gave delegates the opportunity to develop theirown solutions to the problem, and hence inform the Department forTransport’s thinking in this area.

The presentations from this conference are available for download below.

 
 Title Date Size
 
Toby Stevens
18/01/2007
0.76MB
 
Uwe Leinberger, T-Systems
18/01/2007
0.34MB
 
Louisa Stillwell, Information Commissioners Office
18/01/2007
0.34MB


Supporting UK Business with Identity Management

Despitenumerous predictions that ID Management will become a significantbusiness enabler, we have yet to see widespread adoption of IDManagement technologies and processes: few online banks offer hardwaretokens; biometrics are rarely used in the private sector; contactlesscard technologies are generally confined to simple physical accesstokens; and there is little or no use of federation technologies tobind providers together. The government now has several scheme –including the National Identity Scheme – which will radically changethis position, and is keen to understand how best to implement them.

TheChancellor of the Exchequer has appointed Sir James Crosby, the formerChief Executive of HBOS, to establish a public-private Forum onIdentity Management to explore the potential benefits, to consumers andother citizens, of ID Management to the UK economy and investigate howthose benefits might be achieved through cooperation between the publicand private sectors. The Forum is due to deliver an interim report tothe Chancellor by Easter, so that report will be written in the comingweeks. The work of the Forum is supported by a small Secretariat in theTreasury and project management groups in the Identity and PassportService of the Home Office.

HM Treasury has joined the EnterprisePrivacy Group on behalf of the Forum, and has invited Members tocontribute their input to the Forum report. A workshop has beenscheduled for 14 February, and in preparation for that event we haveprepared a questionnaire to capture input for the event and the report.

Thequestionnaire can be completed by Members and non-Members alike,although the event on 14 February is open to EPG Members only. Tocontribute, download the linked files, complete the questionnaire andreturn it in accordance with the instructions provided in the document.Please note that the deadline for returns is midnight Friday 9thFebruary.

 
 Title Date Size
 
HM Treasury Biometrics Questionnaire
5 February 2007
328kB


Demystifying Identity Theft Conference – 18 Jan 2007

Download information relating to the 'Demystifying Identity Theft Conference' here.

 
 Title Date Size
 
Toby Stevens
18/01/2007
2MB
 
Stephen Mason
18/01/2007
1MB
 
David Evans
18/01/2007
0.2MB
 
Tom Ilube
18/01/2007
1.2MB


4 May 2005: EPG publishes RFID Privacy Code of Conduct

EnterprisePrivacy Group has developed a Privacy Code of Conduct for organisationsthat are adopting Radio Frequency Identification (RFID) technologies ina commercial, healthcare or public sector environment.

The Code of Conduct is based upon EPG's work for Aegate, a PA Groupcompany, that is rolling out mass serialisation technologies -including RFID - to protect the safety of patients when dispensingprescription pharmaceuticals.

Similar schemes have, in the past, proven to be a lightning rod forcivil liberties groups. Companies that have ignored the privacy impactof RFID have faced huge criticism resulting in product boycotts,adverse media publicity and even lawsuits.

To help control such issues for Aegate, EPG created a set of practicalstandards to ensure that each stakeholder understands theirresponsibilities for protecting patient privacy, and acts accordingly.Aegate's programme is a milestone in the responsible use of RFIDtechnologies to protect patient safety without compromising patientprivacy.

Since developing Aegate's privacy policy, EPG has further developed thedocument to make it applicable to RFID users in a broad spectrum oforganisations. Whilst it is not intended as a cure-all for RFID-relatedprivacy issues, the Code should provide a firm foundation for anyorganisation that is concerned about the possible privacy impact of itsRFID implementation.

The RFID Privacy Code of Conduct is available here.