Thread by @MercyMutemi

Day 2 of the #HudumaNamba case. The bench will continue taking evidence from expert witness @iam_anandv

#NIIMS
#HudumaNamba case

@iam_anandv @iam_anandv: My role is to help the court understand the issues at play in a system as such as #NIIMS so they can make an informed decision.

#NIIMS
#HudumaNamba case

@iam_anandv @iam_anandv: #Aadhaar was upheld by the Courts but with severe restrictions.

#NIIMS
#HudumaNamba case

@iam_anandv @iam_anandv: There is no published technical information on #NIIMS

#HudumaNamba case

@iam_anandv @iam_anandv: the way #NIIMS is designed, it could easily become #purposefree which makes it unsafe.

#HudumaNamba case

@iam_anandv @iam_anandv: Promises on encryption are empty. Encryption at best is a common practice but data that is encrypted and not used is useless and so data is not at risk while in storage but when in use. Encryption will not fix #NIIMS

#HudumaNamba case

@iam_anandv @iam_anandv: Linking all the govt databases creates risks that cancel the benefits of #NIIMS. Biometric systems should be very restricted in their purpose and use.

#HudumaNamba case.

@iam_anandv @iam_anandv: There is no nexus between #NIIMS and the stated purported benefits

#HudumaNamba case.

@iam_anandv @iam_anandv: Claims that #NIIMS will stop terrorism are hyperbole. It's a stretch to imagine that information on a person can isolate a terrorist.

#HudumaNamba case.

@iam_anandv @iam_anandv: the secrecy surrounding #NIIMS design undermines it. In order to develop trust you have to put the information out there proactively and be willing to listen to experts on the weakness of the system.

#HudumaNamba case.

@iam_anandv @iam_anandv: You may design a technological project with good intent but with holes and fix them but technology cannot fix law that is broken.

#HudumaNamba case.

@iam_anandv @iam_anandv: The only way to gauge if a system is good is to put information in the public domain and let people examine it as well to build trust so that it's not a system that only a few people know about and know how to operate.

#HudumaNamba case.

@iam_anandv @iam_anandv: The information available on NIIMS is enough to conclude the envisaged outcomes of NIIIMS

#HudumaNamba case

@iam_anandv @iam_anandv: The government confuses between identity and identification
Identity is who am I.

Identification - a process defined by a 3rd party of identifying who a person is.

#HudumaNamba case.

@iam_anandv @iam_anandv: #NIIMS is an IDENTITY system. It is NOT identification system and that is what is worrying

#HudumaNamba case.

@iam_anandv @iam_anandv:
In a purpose limited system- data is for a specific transaction and cannot be used beyond that

#NIIMS is purpose free: Data given to one section of the database can be used for any other purpose other than the one you signed up for

#HudumaNamba case

@iam_anandv @iam_anandv: The data capture form used to collect data under #NIIMS asks for information that is not required to give you an identity card. Eg economic activity etc

This means #NIIMS does not exercise data minimization

#HudumaNamba case.

@iam_anandv @iam_anandv: Key concerns raised by #NIIMS design:
1.Breaches and frauds in the system
2. Mass surveillance
3.Linking and consequences of interlinking
4. Exclusion

There are better alternatives to #NIIMS that are more privacy protecting.

#HudumaNamba case.

@iam_anandv @iam_anandv: The architectural decisions made in #NIIMS could restrict people with legal right to services from accessing them

#HudumaNamba case.

@iam_anandv @iam_anandv: The architectural decisions made in #NIIMS could restrict people with legal right to services from accessing them

#HudumaNamba case.

@iam_anandv @iam_anandv: People without existing IDs may never be able to get a Huduma Namba

#HudumaNamba case.

@iam_anandv @iam_anandv: Persons lacking the quality of biometrics required may be excluded from the system eg manual laborers

#HudumaNamba case.

@iam_anandv @iam_anandv: Even if the law forbids law enforcement and other organizations from accessing the entire database, as long as the system is not properly designed there will still be breaches.

#HudumaNamba case.