1/12/2000

PKI - Making sure it works for privacy

The Office of the Privacy Commissioner has responded to government moves to use Public Key Infrastructures (PKI) by announcing its intention to issue guidelines on appropriate use of these technologies. The Office will be working with the National Office for the Information Economy on this enterprise.

"I believe that in the right circumstances, this technology can be used to enhance individual privacy" said the Privacy Commissioner Malcolm Crompton. He urged caution however, noting that in the wrong circumstances, Public Key technologies could compromise privacy.

"This is why we need to consult widely with consumers and other interested individuals" said Mr Crompton. The Commissioner indicated that the consultations will inform the guidelines, to be issued in mid 2001, that will guide government agencies in the use of Public Key technology in a way that respects privacy. Consumer views will be very important in identifying issues to be addressed by the guidelines.

"Greater provision for online services presents an exciting option for individuals in their dealings with government. This is particularly significant for regional and remote communities, as for example it would support online applications for a range of government services", said the Commissioner. "However, the Australian community needs to be confident that when they use these technologies in their dealings with Government, their privacy will be protected", he said.

"I will be working with key stakeholders including consumer representatives, interested individuals to make sure we ask the right questions of government agencies seeking to implement Public Key technologies. I will particularly be focusing attention on appropriate application of the technologies" said the Commissioner. Government agencies need to consider carefully how and when they use Public Key technologies, ensuring they allow their clients to continue to use other anonymous means of doing business with them when appropriate.

The guidelines will assist agencies in making these distinctions and delivering good privacy online.

"I welcome this opportunity to contribute to making government services more available, more reliable, and in a way that respects privacy", said Mr Crompton.

Note: for more information on Public Key Infrastructures, and government use of associated technologies, please download the PDF version (1.17MB) of a NOIE Report by the National Public Key Infrastructure Working Group available at the NOIE website. Public Key Infrastructures provide a means of ensuring security, non-repudiation, authentication, identity and confidentiality for online transactions.