I spotted a letter in this morning's Telegraph regarding the online application forms from National Rail for Railcards. When going through the form there is section called "Identity Information" which states "Enter either passport or driving licence number to purchase online."The obvious question this raises is "why do they need that?" If, as someone in a National Rail Enquiries lines suggests it is for purposes of identification there are three possible scenarios.
Either, National Rail compare the information against an automated online validater that hooks into the DVLA and Passport office databases - worrying given they're a private company accessing Government data on individuals. Not to mention that if that's the case then there is clearly a weak point of access that could be hacked and thus obtain access to Government systems.
Else they store the information in order to "verify" you when you call them. Worrying from the point that this is a private company storing all your personal details including highly sensitive information relating to Government documents. Think about it for a minute, if they're storing the data they have name, address, phone, passport number and they will probably have a photo too once you get the card. Identity theft anyone?
Or, worse than the previous two, they do both.
4 comments:
This is of a piece with the report yesterday that the BBC are, in their own words, to be
"handed the social security and war pensions information for an estimated seven million people."
This is to help them afford new digital TV services.
"The help will be free of charge to eligible households in receipt of pension credit, income support or income-related jobseekers allowance."
So Crapita TV Tax Inc will know who's on benefits. Nice.
http://news.bbc.co.uk/1/hi/entertainment/6155518.stm
Brilliant piece. This is something that needs a lot more attention and drawing it to everyone's is fantastic. Well done.
You could try asking their press office for an explanation, just email them your link and ask them to respond. I'd like to know the answer.
it certainly adds to the argument about identity theft and the regulation and protection of information.
I sent a feedback form to National Rail asking about this policy.....I wonder if I'll get a reply...
Post a Comment