企業(yè)信息管理課件：Managing Ethical and Legal Issues

ManagingEthicalandLegalIssuesLearningoutcomesAfterthislecture,youwillbeableto:Understandtheimplicationsofprivacyanddataprotectionlegislationformanagers;Assessapproachestoprovidingandmonitoringemployeeaccesstoinformation;Definetherisksofunauthorizeddataaccessandsolutionstocounterthem.ManagementissuesTypicalquestionsfacingmanagersrelatedtothistopic:Whatarethelegalconstraintsonmanagingcustomerandemployeedata?Whataretherisksofunauthorizedaccesstodataandhowcanweminimizethese?Whatisthebalancebetweenbusinessimperativeandmoralstanceformonitoringandcontrollingemployeedataaccess?LegalandethicalchallengesofIMMarketingwithdirectmailande-mail(SPAM)ManagingcustomerandemployeeprivacyIdentitytheftHackersandsabotageDisabilityanddiscriminationactCopyrightEthicsEthicalstandardsarepersonalorbusinesspracticesorbehaviourwhicharegenerallyconsideredacceptablebysociety.Acceptableethicscanbedescribedasmoralorjustandunethicalpracticesimmoralorunjust.Sometimes(often)businesspracticesarewithinthelaw,butcannotbeconsideredethical.LawsevolvetomandateethicalbehaviourUnethicalbusinesspracticesthatarenowcoveredbylawinclude:Sendingunsolicitede-mailcommunicationsPassingsensitivepersonalinformationontoathirdpartyUnauthorisedaccessedtocompetitordataCopyrightinfringementsSarbanesOxley(promptedbyEnron)In2002,theUSgovernmentpassedtheSarbanesOxleyAct(SarboxorSOXforshort),whichredefineslegallyacceptableaccountingpractices.Essentially,thelawrequiresseniormanagementtoberesponsiblefortheaccuracyoftheirfinancialreporting,inotherwordsinformationquality.Thekeyclauseis:Section302:CorporateResponsibilityForFinancialReports.‘TheCEOandCFOofeachissuershallprepareastatementtoaccompanytheauditreporttocertifythe‘a(chǎn)ppropriatenessofthefinancialstatementsanddisclosurescontainedintheperiodicreport,andthatthosefinancialstatementsanddisclosuresfairlypresent,inallmaterialrespects,theoperationsandfinancialconditionoftheissuer.’‘Sarbox’continuedFurthermore,Section404:ManagementAssessmentOfInternalControlsrequires: an"internalcontrolreport",whichshall: (1)statetheresponsibilityofmanagementforestablishingandmaintaininganadequateinternalcontrolstructureandproceduresforfinancialreporting;and (2)containanassessment,asoftheendoftheissuer'sfiscalyear,oftheeffectivenessoftheinternalcontrolstructureandproceduresoftheissuerforfinancialreporting.TheDigitalDivideTheUnitedNations,ina1999reportonhumandevelopmentnotedthatparallelworldsaredevelopingwhere‘thosewithincome,educationand–literally–connectionshavecheapandinstantaneousaccesstoinformation.Therestareleftwithuncertain,slowandcostlyaccess…theadvantageofbeingconnectedwilloverpowerthemarginalandimpoverished,cuttingofftheirvoicesandconcernsfromtheglobalconversation’.ApproachestomanagingtheinformationsocietyBoozAllenHamilton(2002)reviewsapproachesusedbygovernmentstoencourageuseoftheInternet.Theyidentifyfivebroadthemesinpolicy:1.Increasingthepenetrationof‘a(chǎn)ccessdevices’.ApproachesincludeseitherhomeaccessthroughSweden’sPCTaxReform,orinpublicplaces,asinFrance’sprogrammetodevelop7000accesspointsby2003.Francealsoofferataxincentivescheme,wherefirmscanmaketaxfreegiftsofPCstostaffforpersonaluse.2.Increasingskillsandconfidenceoftargetgroups.Thesemaytargetpotentiallyexcludedgroups,aswithFrance’ssignificant150million€campaigntotraintheunemployed.Japan’sITTrainingprogrammesuseexistingmentors.3.Establishing‘DrivingLicences’or‘Passport’qualifications.France,ItalyandtheUKhaveschemeswhichgrantsimpleITqualifications,particularlyatlowskilledgroupssuchasthelong-termunemployed.4.Buildingtrust,orallayingfears.AnexampleofthisintheUSisthe1998ChildOnlineProtectionActwhichusedschemestoprovide‘kitemark’-typeverification,orcertificationofsafeservices.5.Directmarketingcampaigns.Accordingtothereport,onlytheUK,withitsUKOnlinecampaign,ismarketingdirectlytocitizensonalargescale.EstherDysononInternetgovernanceInternetgovernanceisthecontrolputinplacetomanagethegrowthoftheInternetanditsusage.Governanceistraditionallyundertakenbygovernment,buttheglobalnatureoftheInternetmakesitlesspracticalforagovernmenttocontrolcyberspace.

Shesays:‘Now,withtheadventoftheNet,weareprivatisinggovernmentinanewway–notonlyinthetraditionalsenseofsellingthingsofftotheprivatesector,butbyallowingorganizationsindependentoftraditionalgovernmentstotakeoncertain“government”regulatoryroles.ThesenewinternationalregulatoryagencieswillperformformergovernmentfunctionsincounterpointtoincreasinglygloballargecompaniesandalsotoindividualsandsmallerprivateorganizationswhocanoperategloballyovertheNet.’InternetgovernanceissuesCanInternetcontent&activitybecontrolled?Towhatextentshouldthisbeenforced?WhatistherelationshipbetweentheInternetandfreedomofspeech?Whatroleshouldgovernmenttake?Whatroleshouldindustry&businesstake?InternetjurisdictionDyson(1998)describesdifferentlayersofjurisdiction.Theseare:1. Physicalspacecomprisingeachindividualcountrieswheretheirownlawssuchasthosegoverningtaxation,privacyandtradingandadvertisingstandardshold.2. ISPs–theconnectionbetweenthephysicalworldandvirtualworld.Jurisdiction

Thescopeorextentofcontrolofalawgeographically–whoitappliesto.Supra-governmentorganizationsForexample,TheInternetWatchFoundation(.uk)worksinpartnershipwithISPs,Telcos,MobileOperators,SoftwareProviders,PoliceandGovernment,tominimisetheavailabilityofillegalInternetcontentsuchaschildabuseorracistimagesAtthesametime,othernon-profitorganizationssuchasCyberRights()campaignforfreespeech(althoughtheydonotcondoneallmaterialon-line)Therearealsosupra-governmentorganistionswhocontroldifferentaspectsofthetechnologydescribedinChapter2suchasICANNE-governmentE-governmentreferstotheapplicationofe-commercetechnologiestogovernmentandpublicservices.E-governmentcoverselectroniccommunicationswith:Citizens–Findinginformation,payingtaxandbillsSuppliers–E-procurementInternalcommunications–theuseofintranetsforinformationcollectionanddisseminationande-mailandworkflowsystemsforimprovingefficiencycanbedeployedingovernmentdepartments.E-governmentactivities(Aus)Access,participationandskills–Encouragingallsectorsofthecommunitytoactivelyparticipateintheinformationeconomy.Adoptionofe-business–TheGovernmentisworkingtoprovidemoreefficientcommunicationbetweenbusinessestohelpimprovetheproductivityoftheAustralianeconomy.Apriorityfocusfor2002/2003istopromotetheuptakeofelectronicprocurementandbroaderelectronicbusinessprocesses,especiallybysmallandmediumenterprises.Confidence,trustandsecurity–TheGovernmentisworkingtobuildpublictrustandconfidenceingoingonline,andaddressingbarrierstoconsumerconfidenceinecommerceandotherareasofonlinecontentandactivity.e-Governmentstrategiesandimplementation–Theuseofnewtechnologiesforgovernmentinformationprovision,servicedeliveryandadministrationhasthepotentialtotransformgovernment.ThistransformationwillimprovethelivesofAustralians.NOIEprovidesaframeworkandcoordinateswholeofgovernmentapproachestosupportCommonwealthagencyeffortsinthisarea.EnvironmentforInformationeconomyfirms–Provideresearchontheenvironmentalvariablesthatdriveinnovationandgrowthintheinformationeconomyandunderpinitsfuturedevelopment.InternationalDimensions–NOIE,incooperationwithotherGovernmentbodies,representsAustraliainworldforumswheredecisionsaremadethatmayaffectnationalinterestsintheinformationeconomy.UKOnlineActionPlanTheGovernment'smaintargetis:‘Thatby2005,100%ofdealingswithGovernmentshouldbecapableofbeingdeliveredelectronically,wherethereisademand.’Otheraimsinthe‘electronicservicedelivery’programmeare:RefineanalysisofcustomergroupingsandcarryoutcustomerneedsanalysesandtheOfficeofthee-Envoywillworkwithdepartmentstointroducee-businessstrategiesforkeycustomersegmentsEnsurethereisastrategy,withameasurablebaseline,tomaximisetake-upofe-servicesRe-engineerdepartmentalbusinessprocessestofullyexploitnewtechnologiesEnsurethatkeytransactionalservicesaree-enabledviatheGovernmentGatewayDriveforwardcitizenparticipationindemocracyFurtherdevelopacross-GovernmentknowledgemanagementsystemContinuetodriveforwarde-procurementande-tenderingPrivacydefinedInthecontextofinformation,privacyreferstoanindividual’srightsasacustomer,employeeorcitizenaboutwhatpersonaldataisheldaboutthembythirdpartiessuchascompanies,employersandgovernmentagenciesandhowitisused.Personaldatareferstocontactdetailssuchasname,address,phonenumberande-mail.Foracustomeritalsoincludesdetailssuchasproductspurchased,credithistory,whenawebsitehasbeenvisitedorwhiche-mailshavebeenviewed.Foranemployeeitcanalsoincludedetailssuchassalary,sicknessandholidayrecords.PrivacyissuesMason(1986)hasusefullydividedissuesrelatedtoprivacyinto4areas:Privacy–whatinformationisheldabouttheindividual?Arepersonaldetailsheldwhicharenotarguablyrelevanttothebusiness?Accuracy–isitcorrect?Incorrectinformationmaydisadvantageanindividual.Property–whoownsitandhowcanownershipbetransferred?Accessibility–whoisallowedtoaccessthisinformation,andunderwhichconditions?Thisisthesecurityconcern.MoreprivacyissuesFletcher(2001)providesanalternativeperspective,raisingtheseissuesofconcernforboththeindividualandthemarketer:Transparency–whoiscollectingwhatinformation?Security–howisinformationprotectedoncecollectedbyacompany?Liability–whoisresponsibleifdataisabused?DirectmailexpenditureintheUKFigure12.1DirectmailexpenditureintheUKSource:RoyalMail(publishedbyDirectInformationService)Dataprotectiondefined Dataprotectionlegislation Lawintendedtoprotecttheprivacyofconsumers’datathroughdefininghoworganizationscangather,store,processanddisclosepersonalinformation

DataProtectionlegislationistheretoprotecttheindividual;toprotecttheirprivacyandtopreventmisuseoftheirpersonaldata.IndeedthefirstarticleoftheEuropeanUniondirective95/46/EConwhichlegislationinindividualEuropeancountriesisbased,specificallyreferstopersonaldata.Itsays:'...Memberstatesshallprotectthefundamentalrightsandfreedomsofnaturalpersons[i.e.anamedindividualathomeoratwork],andinparticulartheirrighttoprivacywithrespecttotheprocessingofpersonaldata.'DPPrinciples1.Fairlyandlawfullyprocessed.Thisrequiresappointmentofadatacontrollerwhoisapersonwithdefinedresponsibilityfordataprotectionwithinacompany.Cleardetailsincommunicationssuchasonawebsiteordirectmailofhowa‘datasubject’cancontactthedatacontrollerorarepresentative.Beforedataprocessing‘thedatasubjecthasgivenhisconsent’ortheprocessingmustbenecessaryeither

fora‘contracttowhichthedatasubjectisaparty’(forexampleaspartofasaleofaproduct)orbecauseitisrequiredbyotherlaws.Sensitivepersonaldatarequiresparticularcare,thisincludestheracialorethnicoriginofthedatasubject;politicalopinions;religiousbeliefsorotherbeliefsofasimilarnature;membershipofatradeunionphysicalormentalhealthorconditionsexuallife.DPPrinciples2.Processedforlimitedpurposes

Thisimpliesthattheorganizationmustmakeitclearwhyandhowthedatawillbeprocessedatthepointofcollection.Forexample,anorganizationhastoexplainhowyourdatawillbeusedifyouprovideyourdetailsonawebsitewhenenteringaprizedraw.Youwouldalsohavetoagree(giveconsent)forfurthercommunicationsfromthecompany.Onlyprocessedasfarasnecessary.InformationflowsthatneedtobeunderstoodforcompliancewithdataprotectionlegislationFigure12.2InformationflowsthatneedtobeunderstoodforcompliancewithdataprotectionlegislationSource:BIMDPPrinciples3.Adequate,relevantandnotexcessive

Thisspecifiesthattheminimumnecessaryamountofdataisrequestedforprocessing.Forexample,itwouldnotbeapplicableaprizedrawforthecompanytoaskaboutyourcredithistory.Thereisdifficultyinreconcilingthisprovisionbetweentheneedsoftheindividualandtheneedsofthecompany.Themoredetailsthatanorganizationhasaboutacustomer,thenthebettertheycanunderstandthatcustomerandsodevelopproductsandmarketingcommunicationsspecifictothatcustomerwhichtheyaremorelikelytorespondto.DPPrinciples4.AccuracyItisclearlyalsointheinterestofanorganizationinanongoingrelationshipwithapartnerthatthedataiskeptaccurateanduptodate.TheguidelinesontheActsuggeststhatadditionalstepsshouldbetakentocheckdataisaccurate,incasetheyareinerror,forexampleduetomis-keyingbythedatasubject,organizationorsomeotherreason.Inaccuratedataisdefinedintheguidelinesas:‘incorrectormisleadingastoanymatteroffact.’Stepsmustbeinplacetokeepdataup-to-date.DPPrinciples5.Notkeptlongerthannecessary

Theguidelinesstate:‘TocomplywiththisPrinciple,datacontrollerswillneedtoreviewtheirpersonaldataregularlyandtodeletetheinformationwhichisnolongerrequiredfortheirpurposes.’DPPrinciples6.Processedinaccordancewiththedatasubject'srights

Oneaspectofthedatasubject’srightsistheoptiontorequestacopyoftheirpersonaldatafromanorganization,thisisknownasa‘subjectaccessrequest.’Forpaymentofasmallfeesuchas￡10or￡30,anindividualcanrequestinformationwhichmustbesuppliedbytheorganizationwithin40days.Thisincludesallinformationonpaperfilesandoncomputer.Ifyourequestedthisinformationfromyourbanktheremaybeseveralboxesofalltransactions!Principle6continuedOtheraspectsofadatasubject’srightswhichthelawupholdsaredesignedtopreventorcontrolprocessingwhich:causesdamageordistress(forexamplerepeatedlysendingmailshotstosomeonewhohasdied);isusedfordirectmarketing(forexample,intheUKconsumerscansubscribetothemail,e-mailortelephonepreferenceserviceortelephonepreferenceservicestoavoidunsolicitedmailings,

e-mailsorphonecalls);isusedforautomaticdecisiontaking–automatedcreditchecks,forexamplemayresultinunjustdecisionsontakingaloan–thesecanbeinvestigatedifyoufeelthedecisionisunfair.DPPrinciples7.SecureInfull:‘Appropriatetechnicalandorganizationalmeasuresshallbetakenagainstunauthorisedorunlawfulprocessingofpersonaldataandagainstaccidentallossordestructionof,ordamageto,personaldata.’Appropriatesecurityismandatory.DPPrinciples8.Nottransferredtocountrieswithoutadequateprotection

Infull:‘PersonaldatashallnotbetransferredtoacountryorterritoryoutsidetheEuropeanEconomicArea,unlessthatcountryorterritoryensuresanadequatelevelofprotectionoftherightsandfreedomsofdatasubjectsinrelationtotheprocessingofpersonaldata.’TransferofdatabeyondEuropeislikelyformulti-nationalcompanies.Thisprinciplepreventsexportofdatatocountriesthatdonothavesounddataprocessinglaws.Ifthetransferisrequiredinconcludingasaleorcontractorifthedatasubjectagreestoit,thentransferislegal.ProblemswithDPActinterpretation1InDecember2003anelderlycoupleintheUKdiedthroughhypothermiaaftertheirutilitycompanyhadcutofftheirgassupply.Initiallythepresssupportedthecompanysuggestingthattheutilitysupplierhadmadeeveryefforttoassistthecouple,butdataprotectionlawspreventedthempassingsensitivepersonaldataontosocialwelfareandcharityorganizations.ProblemswithDPActinterpretation2Guardian(2004)quotedthecommissionerassayingthatorganizationsusedtheactasa‘smokescreenfortheirownshortcomings’.Hesuggestedthatcommonsenseshouldbeapplied.Commentingontheutilitiescasehesaid:‘Whereagascompanyisdisconnectingpeopletheyknowtobevulnerable,Idon’thaveaproblemwithtellingsocialservices.Iwouldfinditwhollyunacceptableiftheytoldabankorcreditcardcompany.’

ProblemswithDPActinterpretation3Inafurthercaseinformationaboutsomeonewithsexallegationsagainstthemwasnotpassedonfromonepoliceauthoritytoanotherwhentheywerecheckedforajobasacaretakerandsubsequentlymurderedstudentsbecauseoffearsofpassingonthecaretakerspersonaldata.Commentingonthiscase,thecommissionersaidhehadbeen‘justastonished’bythepoliceforce’sclaimthattheactrequiredthemtodeleteinformationaboutallegationsaboutindividualsthatdidnotleadtoaprosecution.Infactthelawenablesholdingofdataforalongperiodforlegitimatepurposes.PrivacyandElectronicCommunicationsRegulationsAct.Requiresconsenttoreceivee-mailcommunications(Opt-in)Requiresunsubscribeoption(Opt-out)Currentlyappliestoindividualsubscribersi.e.residentsandsmallnon-incorporatedcompaniesAlsoopt-inisunnecessaryforexistingcustomersPrivacystatementmustclearlyexplainhowcookiesareusedViralmarketingmustinvolveasinglefollow-upmessageandincentivesshouldnotbeusedtoprovideotherpeople’saddresses,e.g.winaphoneifyouprovide10otherpeople’se-mailaddressesOnlineforms(a)Opt-out(b)Opt-in(c)Implicitopt-inFigure12.3Onlineforms(a)Opt-out(b)Opt-in(c)Implicitopt-inSource:BIMCookies1Cookiesarestoredasindividualtextfilesinadirectoryonapersonalcomputer.Thereisusuallyonefileperwebsite.Forexample:dave_chaffey@british-airways.txt.Thisfilecontainsencodedinformationasfollows:FLT_VIS|K:bapzRnGdxBYUU|D:Jul-25-1999|/042525990429357426117074793629284034*Cookies2Therearetwoformsofcookies;sessioncookiesandpersistentcookies.Sessioncookiesareusedtomanageasinglevisitorsession,forexampleitmanagestheprocessofaddingitemstoashoppingbasketandthencheckingoutasthewebsitevisitormovesfrompagetopage,theyarestillrecognized.Persistentcookiesremainonthecomputerafteravisitorsessionhasended.Theirmainpurposeistheidentificationofreturningvisitors.Withouttheuseofpersistentcookiesitisnotpossibletouniquelyidentifyanindividualreturningtoawebsitewithoutrequestingtheyidentifythemselvesthroughausername.CookieapplicationsCookiesareusedtoidentifyusersandretrievetheirpreferencesfromadatabase.Forexample,IsubscribetotheE-consultancyservice()forthelatestinformationaboute-business,eachtimeIreturnIdonothavetheannoyanceofhavingtologinbecauseitremembersmypreviousvisit.Manysitesfeaturea‘RememberMe’option.RetailerssuchasAmazoncanalsorecognisereturningvisitorsandcanrecommendrelatedbookspurchasedbyotherreaders.Advertisingnetworksusecookiestotrackthenumberoftimesaparticularcomputerhasbeenshownaparticularbanneradvertisement,theycanalsotrackadvertsservedonsitesacrossanadnetworkandtherewasanindividualrightsoutcryinthelate1990ssinceDoubleclickwasusingthistoprofilecustomers.Doubleclicknolongeroperatesanad-network.SoftwaresuchasWebtrends()whichanalysesstatisticsonvisitorstowebsitesreliesonpersistentcookiestofindtheproportionofrepeatvisitorstoawebsite.Cookies4TheNewPECRlawlimitstheuseofcookie.Itstates:‘a(chǎn)personshallnotuseanelectroniccommunicationsnetworktostoreinformation,ortogainaccesstoinformationstored,intheterminalequipmentofasubscriberoruserunlessthefollowingrequirementsaremet’.Therequirementsare:‘(a)theuserisprovidedwithclearandcomprehensiveinformationaboutthepurposesofthestorageof,oraccessto,thatinformation;and(b)isgiventheopportunitytorefusethestorageoforaccesstothatinformation.’Legal–Sparrow’seightareasMarketingyoure-commercebusiness

(Domainsquattingandcompetitormetatags)

Forminganelectroniccontract

Makingandacceptingpayment

AuthenticatingcontractsconcludedovertheInternetE-mailrisks

ProtectingIntellectualProperty

AdvertisingontheInternet

Dataprotection

FreedomofInformationActTheUKFOIAdoesnotaddresspersonaldataandprivacy,ratheritistoencourageopennessamongstpublicauthorities.Itisintendedtogivecitizensaccesstoinformationheldbypublicauthorities,enablingthemtoparticipate‘inthediscussionofpolicyissuesandsoimprovethequalityofgovernmentdecisionmaking’and‘holdinggovernmentandotherbodiestoaccount’.FOIABylawpublicorganizationsmustproduceaPublicationSchemewhichconsistsoftheclassesofinformationthataremadeavailable.OneimplicationoftheFOIAmaybethatorganizationssellingservicestogovernmentsmaybeabletoaccesswhatwouldformerlybethoughtofaconfidentialdetailsaboutcompetitivebids.Thismaycontaincommerciallysensitiveinformationwhichwillaffecttheoutcomesoffuturebids.However,theActdoesexempttradesecrets.Infact,businessesneedtoconsideralltypesofinformationgiventopublicbodiessinceitmaybedisclosedatalaterdate,althoughthereareexemptions.

EmployeecommunicationsmonitoringEmployeecommunicationsmonitoringorsurveillanceisusedbyorganizationstoreduceproductivitylossesthroughtimewasting.Ifanemployeeearning￡25,000peryear,spends30minuteseachdayofa5dayweekansweringpersonale-mailsorvisitingnonwork-relatedwebsites,thiswillcostthecompanyover￡1500peryear.Foracompanywith100employees,wheretheaverageemployeeworks46weeksperyear,thisamountstoover￡150,000peryearorseveralnewemployees!EmployeemonitoringcaseAtypicalexampleofallegedtimewastingwherethecompanydismissedtheemployeeconcernedinvolvedLoisFranxhi,a28-year-oldITmanagerwhowassackedinJuly1998formakingnearly150searchesoverfourdaysinofficehoursforaholiday.Sheclaimedunfairdismissal–shewaspregnantatthetimeofthedismissal.Aswithmanyunfairdismissals,thecasewasnotclearcut,withMrsFranxhiclaimingthecompanysackedherbecauseofsexdiscrimination.ThetribunaldismissedtheseclaimsfindingthattheemployeehadliedabouttheuseoftheInternet,sayingshehadonlyuseditforonelunchtimewhen,infactrecordsshowedshehaduseditoverfourdays.ApproachestocontrollingusageAcceptableusepolicy

StatementofemployeeactivitiesinvolvinguseofnetworkedcomputersthatarenotconsideredacceptablebymanagementScanningsoftware–scansforphrasesorimagesFilteringsoftware–blockswebsitesImpactassessmentofmonitoringrequiredbylawImpactassessmentinvolves…?‘identifyingclearlythepurpose(s)behindthemonitoringarrangementandthebenefitsitislikelytodeliver?identifyinganylikelyadverseimpactofthemonitoringarrangement?consideringalternativestomonitoringordifferentwaysinwhichitmightbecarriedout?takingintoaccounttheobligationsthatarisefrommonitoring?judgingwhethermonitoringisjustified.’Examplerulestriggeredby

e-mailinNetIQMailMarshallFigure12.4Examplerulestriggeredbye-mailinNetIQMailMarshallSource:NetIQ()IdentitytheftIdentitytheftisanincreasingproblemintheinformationsociety.AccordingtoGuardian(2003a),quotingtheCreditIndustryFraudAvoidanceSystem(Cifas),theUK'sfraudpreventionservice,itisthefastest-growingwhite-collarcrime,generatingacriminalcashflowof￡10maday.In1999,therewere20,264reportedcasesofidentitytheftintheUK;butby2002,thatfigurehadreached74,766,andin2003,thefigurewas101,000.IdentitytheftdefinedCIFASdefineidentitytheftasfollows:‘IdentityTheftisthemisappropriationoftheidentityofanotherperson,withouttheirknowledgeorconsent.Broadlyspeaking,identitytheftisanothernameforimpersonationfraud.Thenameandotherpersonaldetailsofanotherindividualareusedtoobtaingoodsandservicesinthatperson’sname.Thekindofinformationusedmayincludedateofbirth,currentaddressorpreviousaddresses–thekindofdetailusedtohelpestablishidentityinanapplicationforallkindsofservices,rangingfromcreditproductstobankaccounts,frominsurancetoutilities.’Identitytheft–howtodoit…Moresophisticatedformsofidentitytheftinvolvesettingupfalsebankorcreditcardsaccountsorevenpassportsusingthestolenidentity–theseoftenuseddiscardedbillsandreceiptswhichmaybethrownoutwiththehouseholdrubbish.CIFASreportedinananalysisof400domesticbins,that72%containedafullnameandaddress,40%containedacreditcardnumberandexpirydatelinkedtoanindividual,and20%heldabankaccountnumberandsortcodealongsideaname.Experianreportedin2002that53outof71localauthoritiesreportedbinraidingwastakingplaceintheirareas,andgettingnoticeablyworse.ApproachestocounterIDtheftIdentitycardsBiometricsRFIDtaggingofobjectsorpeopleRFIDtaggingGuardian(2003b)reportsthatcreditcardcompanyMasterCardisalreadydevelopingsimilartechnology.AMastercardspokesmanwasquotedassaying‘Itcouldbeembeddedinanything-maybeevenundertheskin.’Thearticleasksabouttheriskofsurgicalmuggersattemptingtogougeachipoutofyourarm?MatthewCossolottoofADS,whohashadhimselfchippeds