tag:blogger.com,1999:blog-22202011.post1309862804068872289..comments2023-12-11T08:49:46.305+00:00Comments on Dizzy Thinks: Lib Dems, data protection and member profilingUnknownnoreply@blogger.comBlogger17125tag:blogger.com,1999:blog-22202011.post-8556698091477076352008-10-28T10:00:00.000+00:002008-10-28T10:00:00.000+00:00Hywel is right. If Dizzy is so sure of himself, we...Hywel is right. If Dizzy is so sure of himself, we'll look forward to the Commissioner's decision (and I think he'll have a rather hard time proving that something that confirms party membership and nothing more with the consent of the member, is in breach of the DPA).Anthonyhttps://www.blogger.com/profile/14726791152439067293noreply@blogger.comtag:blogger.com,1999:blog-22202011.post-13796294602429375802008-10-27T23:15:00.000+00:002008-10-27T23:15:00.000+00:00"It's a bit like if I rang a bank and gave them so..."It's a bit like if I rang a bank and gave them someone's full name, postcode and their account number and asked them to confirm that the details were valid. They would not disclose that information and be quite clear that it ould breach the data protection laws for them to do so, and they would be quite right too."<BR/><BR/>If you had the person's consent to get that information, it wouldn't breach data protection laws. Effectively checks as to whether that sort of information is correct are made every day. For example when a company sets up a new direct debit you get a report within a couple of days if the account number, sort code, account name don't match each other.Hywelhttps://www.blogger.com/profile/16094171587140185827noreply@blogger.comtag:blogger.com,1999:blog-22202011.post-52238511869426739072008-10-24T02:16:00.000+01:002008-10-24T02:16:00.000+01:00MARK PACK I had never thought about this -call me ...MARK PACK <BR/><BR/>I had never thought about this -call me an idiot but it never occured to me that my comments and survey responses could be "monitored" by head office.<BR/><BR/>This has to STOP. NOW. <BR/><BR/>MARK PACK : you must <BR/>1. State the precise nature of the relationship between LDV and the Party on the LDV website .... now<BR/><BR/>2. State, here or in Lib dem news or somewhere public ...Which other Lib Dem blogs/sites enjoy the same access to "check" membership ?<BR/><BR/>3. State clearly on LDV how lines of control work and what - other than you personal pleas - stop any one at head office checking up on who is saying what,.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-22202011.post-29460258488690647522008-10-23T23:59:00.000+01:002008-10-23T23:59:00.000+01:00So does that mean any scheme that confirms you're ...So does that mean any scheme that confirms you're a member of a political party is illegal? Seems a but daft to me.<BR/><BR/>Insurance companies have access to my DLVA records, is that illegal as well?<BR/><BR/>In fact I recently used my shareholder discount with a third party who checked if I owned shares that must me illegal as well then.<BR/><BR/>To be honest, it's an opt in scheme that makes it clear what you're doing why does it matter?Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-22202011.post-16557179114855585102008-10-23T20:05:00.000+01:002008-10-23T20:05:00.000+01:00Mark makes an interesting point about the disclosu...Mark makes an interesting point about the disclosure being requested by the member. By recollection though, this request for disclosure is made to LDV not to the Lib Dem party itself.<BR/><BR/>This may be a techicality, but it does seem to me that the request should be made to the party. If, by way of analogy, I tell my bank that they can check whether I'm a party member with HQ, presumably the party would refuse to disclose anything unless I'd made the request to the party itself.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-22202011.post-15140128849225555292008-10-23T19:16:00.000+01:002008-10-23T19:16:00.000+01:00Actually your bank example is probably wrong for m...Actually your bank example is probably wrong for most people because for about the last 20 years or so you have explicitly agreed that your personal data can be used in that way as part of obtaining a bank account.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-22202011.post-63875467261236312622008-10-23T18:19:00.000+01:002008-10-23T18:19:00.000+01:00He's assuming that it is human being making the re...He's assuming that it is human being making the request too.<BR/><BR/>The registration form looks quite easy to fill in automatically. If I didn't have better things to do, I'd have a go at a brute force approach.<BR/><BR/>But I notice: the data submitted is not encrypted as it goes across the Internet. All those membership numbers are visible to someone monitoring the connection.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-22202011.post-87059150174941559082008-10-23T18:11:00.000+01:002008-10-23T18:11:00.000+01:00I run the Lib Dem Voice members' polls, and can co...I run the Lib Dem Voice members' polls, and can confirm what Mark Pack said above: "all the data is kept confidential and no matching up of individual results is done. Certainly none is passed to the party. Participants in surveys know this, though of course it's always open to them not to take part if they don't trust the software or the terms."<BR/><BR/>The polls are run through Liberty Research - individual emails are sent out to Forum members (so we know that those who complete them are party members), but there is no way, certainly that I know of, of tracing the individual answers back to those who fill in the survey questions. I am the only one who accesses the results, and I do not, will not, would never pass any information onto the party about any individual response.<BR/><BR/>And as Mark says, there's an easy option for those LDV-reading party members who don't trust what I say above: don't fill in the survey.Stephen Tallhttps://www.blogger.com/profile/11720133001571029678noreply@blogger.comtag:blogger.com,1999:blog-22202011.post-78504272394270885922008-10-23T17:49:00.000+01:002008-10-23T17:49:00.000+01:00Correction Mark. You _assume_ that it is a member ...Correction Mark. You _assume_ that it is a member making the request.dizzyhttps://www.blogger.com/profile/04250325010662356883noreply@blogger.comtag:blogger.com,1999:blog-22202011.post-45018459178465618412008-10-23T17:33:00.000+01:002008-10-23T17:33:00.000+01:00Sorry, Anonymous there's (deliberately) rather mor...Sorry, Anonymous there's (deliberately) rather more to how our membership numbers are generated than that. <BR/><BR/>Re the Commissioner: we only disclose information when the member has requested it to be disclosed, so what Dizzy was asking about isn't actually what we do.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-22202011.post-86608408011362310472008-10-23T17:06:00.000+01:002008-10-23T17:06:00.000+01:00Nicely spotted!Clearly the only thing that is Libe...Nicely spotted!<BR/><BR/>Clearly the only thing that is Liberal about them is their Liberal approach to the law.<BR/><BR/>Oh. Like who donates money to them?Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-22202011.post-34269510351178374662008-10-23T16:59:00.000+01:002008-10-23T16:59:00.000+01:00Mark,You are wrong.You do not know if the person m...Mark,<BR/><BR/>You are wrong.<BR/><BR/>You do not know if the person making the request is a party member until after the search is executed.<BR/><BR/>Example:<BR/><BR/>I have several Lib Dem councilors. It is a safe bet that they are members of the party. They will also probably have their own house registered in their interests which is on the net these days. I now have 2 out of the 3 bits of info. If I have a mate who is a Lib Dem (long shot I know but go with me) I will know the format of the number. If his wife is also a member I could figure out how the number is generated.<BR/><BR/>Now I can just brute force the number. Again like Dizzy said it would be like me using this info, calling up the cllr's bank and calling out random bank numbers until they say "yes, that is the one".<BR/><BR/>And besides, the point is the commission has already indicated this is a breach so no amount of justification can hide that.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-22202011.post-76735889197080307822008-10-23T16:28:00.000+01:002008-10-23T16:28:00.000+01:00Dizzy ... Mark Pack says it's OK so you should jus...Dizzy ... Mark Pack says it's OK so you should just jolly well stop listening to silly people like the Information Commissioner - what a fool he must be - 'cos Mark and his LibDem chums NEVER do anything wrong/ near the knuckle/ underhand/ decietful or plain naughty.<BR/><BR/>Meantime, please kick Mark Pack and his kind hard in the b**locks -just as a matter of principle.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-22202011.post-54675671111143306272008-10-23T15:40:00.000+01:002008-10-23T15:40:00.000+01:00I'm flattered you thought our systems worth so muc...I'm flattered you thought our systems worth so much scrutiny Dizzy :-)<BR/><BR/>In brief: the answer as to whether or not someone is a party member is only given in response to the party member requesting that this question be answered.<BR/><BR/>In more detail:<BR/><BR/>The checking system only returns any information about whether or not someone is a current party member if all of several different pieces of information (including membership number) are present and correctly match up with each other.<BR/><BR/>Therefore, in order to check whether or not someone is a party member you have to know their membership number, along with other information about them. This protects against, for example, a journalist checking whether or not someone is a party member as they'd have to know several pieces of information about the person, including their party membership number, which is not a public piece of information.<BR/><BR/>(Party membership numbers are more like a bank account password rather than a bank account number in that respect. This isn't a perfect analogy, so I wouldn't get too hung up on the nuances, but the basic point is that it is a more secure and private piece of information than your bank account number as your bank account number ends up being provided to all sorts of different people and firms in order to make bank transactions, pay bills and so on.)<BR/><BR/>In addition, this checking system is only available to sites which the party approves, so we have an extra level of protection in that we only authorise sites which are making appropriate use of the system. For example, to give an extreme but clear example, we wouldn't approve a site that takes these three bits of information from someone and puts them on a public web page. We also require all sites using the system to make clear why they are asking for this information and how it is going to be used.<BR/><BR/>As a result, this means the system is only returning information to a site such as Liberal Democrat Voice if a party member has supplied information in the knowledge that it is going to be used to check their membership and that the yes/no answer to this question is going to be given to the site. The only disclosure of information that happens is therefore at the request of the party member, and so with their permission.<BR/><BR/>As Stephen runs the LDV polls, I'll leave it to him to answer on that point, but my understanding is that all the data is kept confidential and no matching up of individual results is done. Certainly none is passed to the party. Participants in surveys know this, though of course it's always open to them not to take part if they don't trust the software or the terms.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-22202011.post-54171560716265236132008-10-23T14:21:00.000+01:002008-10-23T14:21:00.000+01:00Lib Dem data protection? They're all at sea.Lib Dem data protection? They're all at sea..................................https://www.blogger.com/profile/09387648864595329094noreply@blogger.comtag:blogger.com,1999:blog-22202011.post-4055945632512201282008-10-23T13:45:00.000+01:002008-10-23T13:45:00.000+01:00Nice work, Dizzy. The Lib Dems remain the only par...Nice work, Dizzy. The Lib Dems remain the only party who have ever sent me spam/junk mail at home. I get all sorts of leaflets delivered by hand when elections are on, but at least twice a year I get junk mail from the local Lib Dem co-ordinator. What is particularly stupid is that I live in a solidly Tory area for the most part, and the elections he always wants to draw my attention to - County Council - have seen the LDs come a distant third for about 20 years. It's a complete waste of his money.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-22202011.post-28013496264675118912008-10-23T13:29:00.000+01:002008-10-23T13:29:00.000+01:00Excellent research Dizzy which would be very news ...Excellent research Dizzy which would be very news worthy except, it's about the LibDems, so no one gives a fig.Anonymousnoreply@blogger.com