ID Scanners code of practice and Legislation
Dear Information Commissioner’s Office,
If you're under 25, pubs, clubs, cinemas and shops selling age-restricted products will ask you for proof of age.
In recent years these businesses are scanning in these identity documents i.e. driving license or passports.
What is the practice and legislation that safeguards the public from identity theft from these devices?
Is the information scanned verified by any government department i.e passport/driving license or any other government body that issues documents with information that is in these documents that are scanned?
Certain scanners display the customers (public members) information for anyone to view.
These scanners take the most important data from the public, and we are constantly told not share to this data, however in this instance the public hand it over unquestionably?
For example: Full Name, D.O.B and Address, Birth Place, Passport Number, Nationality, Age etc..
How long can a business keep this information?
Where and how should the information be kept?
Is information scanned and stored? If yes, where?
I believe there is no guidance or practice to safeguard identity theft for the businesses that are using these systems.
Yours faithfully,
Louie Freeman
Thank you for contacting the Information Commissioner’s Office. We confirm
that we have received your correspondence.
If you have made a request for information held by the ICO we will contact
you as soon as possible if we need any further information to enable us to
answer your request. If we don't need any further information we will
respond to you within our published, and statutory, service levels. For
more information please visit [1]http://ico.org.uk/about_us/how_we_comply
.
If you have raised a new information rights concern - we aim to send you
an initial response and case reference number within 30 days.
If you are concerned about the way an organisation is handling your
personal information, we will not usually look into it unless you have
raised it with the organisation first. For more information please see our
webpage ‘raising a concern with an organisation’ (go to our homepage and
follow the link ‘for the public’). You can also call the number below.
If you have requested advice - we aim to respond within 14 days.
If your correspondence relates to an existing case - we will add it to
your case and consider it on allocation to a case officer.
Copied correspondence - we do not respond to correspondence that has been
copied to us.
For more information about our services, please see our webpage ‘Service
standards and what to expect' (go to our homepage and follow the links for
‘Report a concern’ and ‘Service standards and what to expect'). You can
also call the number below.
If there is anything you would like to discuss with us, please call our
helpline on 0303 123 1113.
Yours sincerely
The Information Commissioner’s Office
Our newsletter
Details of how to sign up for our monthly e-newsletter can be found at
[2]http://www.ico.org.uk/tools_and_resource...
Find us on Twitter at [3]http://www.twitter.com/ICOnews
References
Visible links
1. http://ico.org.uk/about_us/how_we_comply
2. http://www.ico.org.uk/tools_and_resource...
3. http://www.twitter.com/ICOnews
Dear Ms Freeman
Thank you for contacting the Information Commissioner's Office (ICO) through the whatdotheyknow.com (WDTK) website.
The WDTK website was created to help people request information from public authorities under the Freedom of Information Act (FOIA) and the Environmental Information Regulations (EIRs).
The ICO is the regulator responsible for overseeing information rights legislation. We are also subject to the legislation we oversee.
As a public authority the ICO is subject to the FOIA and EIRs and so if people want to request information we might hold about our work as a public body, they can do this through WDTK.
The correspondence you have sent to us is not a request for information we might hold. It is an enquiry about the legislation we oversee. We provide a range of advice services for organisations and for the public. However, we do not provide these through the WDTK website.
Please visit our website at www.ico.org.uk where you will find a great deal of advice about the legislation we oversee. You can also contact our helpline on 0303 123 1113 where a member of our team will be happy to help you.
If you would like to submit your enquiry in writing you should email it to [email address] . We aim to respond to most of the enquiries we receive within 7 days.
Please do not reply to this message. We make no commitment to respond if you do.
Yours sincerely
Information Access Team.
Information Commissioners Office.
Dear AccessICOinformation,
Does the ICO collect any information on companies that specifically process/scan/store documents such as driving licenses and passports?
Is the ICO aware of companies utilizing government departmental databases to verify documents such as passports and driving licenses?
If so what government departments and whom are the organisations accessing these government databases?
What is the government's revenue generated by them providing access to private organisations in verifying specific documents?
Yours sincerely,
Louie Freeman
Thank you for contacting the Information Commissioner’s Office. We confirm
that we have received your correspondence.
If you have made a request for information held by the ICO we will contact
you as soon as possible if we need any further information to enable us to
answer your request. If we don't need any further information we will
respond to you within our published, and statutory, service levels. For
more information please visit [1]http://ico.org.uk/about_us/how_we_comply
.
If you have raised a new information rights concern - we aim to send you
an initial response and case reference number within 30 days.
If you are concerned about the way an organisation is handling your
personal information, we will not usually look into it unless you have
raised it with the organisation first. For more information please see our
webpage ‘raising a concern with an organisation’ (go to our homepage and
follow the link ‘for the public’). You can also call the number below.
If you have requested advice - we aim to respond within 14 days.
If your correspondence relates to an existing case - we will add it to
your case and consider it on allocation to a case officer.
Copied correspondence - we do not respond to correspondence that has been
copied to us.
For more information about our services, please see our webpage ‘Service
standards and what to expect' (go to our homepage and follow the links for
‘Report a concern’ and ‘Service standards and what to expect'). You can
also call the number below.
If there is anything you would like to discuss with us, please call our
helpline on 0303 123 1113.
Yours sincerely
The Information Commissioner’s Office
Our newsletter
Details of how to sign up for our monthly e-newsletter can be found at
[2]http://www.ico.org.uk/tools_and_resource...
Find us on Twitter at [3]http://www.twitter.com/ICOnews
References
Visible links
1. http://ico.org.uk/about_us/how_we_comply
2. http://www.ico.org.uk/tools_and_resource...
3. http://www.twitter.com/ICOnews
17 February 2018
Case Reference Number IRQ0726019
Dear Mr Freeman
Request for Information
Thank you for your message which we received on 12 February, in which you
have made a request for information held by the Information Commissioner's
Office (ICO).
Your request has been passed to the ICO’s Information Access Team, and is
being dealt with in accordance with the Freedom of Information Act 2000
under the reference number shown above.
As you are probably aware the FOIA provides individuals with the right of
access recorded information held by public authorities. It is important to
note that a release under FOIA is applicant blind and therefore
effectively a release to the wider world.
We will respond to your FOIA request promptly, and no later than 12 March
which is 20 working days from the day after we received your request.
Should you wish to reply to this email please be careful not to amend the
information in the ‘subject’ field. This will ensure that your reply is
added directly to your case.
Yours sincerely
Danny Langley
Lead Information Access Officer
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 01625 545784 F. 01625 524510 [1]ico.org.uk [2]twitter.com/iconews
Please consider the environment before printing this email
References
Visible links
1. http://ico.org.uk/
2. https://twitter.com/iconews
12 March 2018
Case Reference Number IRQ0726019
Dear Mr Freeman
Request for Information
Further to our acknowledgement of 17 February we can now respond to your
request for information of 12 February.
We have dealt with your request in accordance with your ‘right to know’
under section 1(1) of the Freedom of Information Act 2000 (FOIA).
Request
In your email you asked:
“Does the ICO collect any information on companies that specifically
process/scan/store documents such as driving licenses and passports? Is
the ICO aware of companies utilizing government departmental databases to
verify documents such as passports and driving licenses? If so what
government departments and whom are the organisations accessing these
government databases? What is the government's revenue generated by them
providing access to private organisations in verifying specific documents?
Our response
Request: Does the ICO collect any information on companies that
specifically process/scan/store documents such as driving licenses and
passports?
Response: We hold a limited amount of information regarding companies that
‘process/scan/store’ government provided identity documents.
This, for example, is information we have been provided with when working
with organisations that process data collected from scanned IDs in the
entertainment industry, for example nightclubs and bars.
In such instances, we wanted to ensure that the data processing undertaken
by such organisations complied with the data protection principles. The
information we have collected therefore is in relation to the processing,
and whether it complies with the principles, rather than collecting
information on the companies themselves.
Request: Is the ICO aware of companies utilizing government departmental
databases to verify documents such as passports and driving licenses? If
so what government departments and whom are the organisations accessing
these government databases? What is the government's revenue generated by
them providing access to private organisations in verifying specific
documents?
Response: I have conducted searches of our files relating to our
engagement work and liaised with relevant colleagues, but can confirm we
do not hold information regarding ‘companies utilising government
departmental databases to verify documents such as passports and driving
licenses’ nor regarding any government revenue by providing access to such
information.
Review Procedure
I hope this response is helpful. However, if you are dissatisfied with
this response and wish to request a review of our decision or make a
complaint about how your request has been handled you should write to the
Information Access Team at the address below or e-mail
[1][ICO request email].
Your request for internal review should be submitted to us within 40
working days of receipt by you of this response. Any such request received
after this time will only be considered at the discretion of the
Commissioner.
If having exhausted the review process you are not content that your
request or review has been dealt with correctly, you have a further right
of appeal to this office in our capacity as the statutory complaint
handler under the legislation. To make such an application, please write
to our Customer Contact Team at the address given or visit our website if
you wish to make a complaint under the Freedom of Information Act.
A copy of our review procedure can be accessed from our website.
[2]here.
Yours sincerely
Danny Langley
Senior Information Access Officer
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 01625 545784 F. 01625 524510 [3]ico.org.uk [4]twitter.com/iconews
Please consider the environment before printing this email
References
Visible links
1. mailto:[ICO request email]
2. https://ico.org.uk/media/about-the-ico/p...
3. http://ico.org.uk/
4. https://twitter.com/iconews
We work to defend the right to FOI for everyone
Help us protect your right to hold public authorities to account. Donate and support our work.
Donate Now