What other less invasive options does the Ministry have in notification of ready passports? SMS query service, a web based query service and so on which use the tracking number. Does the current system have a tracking module? 
From: Alex Watila via KICTANet <kictanet@lists.kictanet.or.ke>
Sent: Friday, November 3, 2023 5:38 PM
To: Eric Mwau <mwau@outlook.com>
Cc: Alex Watila <awatila@gmail.com>
Subject: [kictanet] Re: Citizen Data protection anomaly at Ministry of Interior
 
are statistics on identity theft in kenya available?

---
Sent from my Android phone.
Please excuse my brevity

On Fri, 3 Nov 2023, 17:27 Benson Muite via KICTANet, <kictanet@lists.kictanet.or.ke> wrote:
On 11/2/23 17:18, Alex Watila via KICTANet wrote:
> what harm comes to a person by being published?
>
https://en.wikipedia.org/wiki/Identity_theft
> ---
> Sent from my Android phone.
> Please excuse my brevity
>
> On Wed, 1 Nov 2023, 23:45 Mwendwa Kivuva via KICTANet,
> <kictanet@lists.kictanet.or.ke <mailto:kictanet@lists.kictanet.or.ke>>
> wrote:
>
>     In the age of data protection, the Ministry of Interior is
>     publishing at scale the names of all citizens who have successfully
>     applied for passports.
>
>     Every week since the CS initiated the rapid results initiative, the
>     Immigration Department has been publishing publicly the names of all
>     passports ready for collection. 
>
>     Kindiki may have been doing a good thing - expediency, but as they
>     say, the road to hell is paved by good intentions. 
>
>     The list is available on the immigration department website here
>     http://immigration.go.ke/category/rri-7/
>     <http://immigration.go.ke/category/rri-7/> for all passports ready
>     for collection for 6th-10th November 2023. More data is available
>     for other weeks. The data has tracking numbers, full passport holder
>     names, and collection dates. Through quick analysis, this week alone
>     has 18,654 names published and distributed as follows;
>     Kisii 1500 
>     Kisumu 1692
>     Eldoret 1787
>     Embu 1750
>     Mombasa 1552
>     Nakuru 1000
>     Nairobi 9373
>
>     Questions
>     1.  What can go wrong? What can bad actors do with this data?
>     2. Do data subjects need to give consent for such data to be
>     published in a public portal?
>     3. Does the government have the capacity to safely handle mass
>     citizen data? 
>     4. How have other government agencies provided verification services
>     without compromising on privacy? IEBC had such a challenge before
>     the 2022 elections and they instituted a verification process for
>     accessing voter registration data.
>     5. Does the Ministry of Interior have the capacity to roll out the
>     Digital ID dubbed Maisha namba?
>     6. Is the ODPC under the Data Protection Act 2019 up to the task of
>     regulating and enforcing compliance of government agencies?
>     7. How can we help the government in handling citizen data?
>
Hiyo ndio swali!
>     For demonstration purposes, what are the implications of a data
>     breach at scale?
>     Just this year, there were allegations that Fuliza scammers gained
>     access to the National Registration Bureau Database and added new
>     citizens. The freshly minted ghost citizens went ahead and borrowed
>     close to Ksh500 million through Safaricom’s Fuliza overdraft
>     facilities.
>     https://ntvkenya.co.ke/crime/eight-suspects-arrested-in-kes-500-million-fuliza-fraud-scheme/ <https://ntvkenya.co.ke/crime/eight-suspects-arrested-in-kes-500-million-fuliza-fraud-scheme/>
>     _______________________________________________

_______________________________________________
KICTANet mailing list -- kictanet@lists.kictanet.or.ke
To unsubscribe send an email to kictanet-leave@lists.kictanet.or.ke
Unsubscribe or change your options at: https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/

Mailing List Posts Online: https://posts.kictanet.or.ke/

Twitter: https://twitter.com/KICTANet/
Facebook: https://www.facebook.com/KICTANet/
Instagram: https://www.instagram.com/KICTANet/
LinkedIn: https://www.linkedin.com/company/kictanet/
YouTube: https://www.youtube.com/channel/UCbcLVjnPtTGBEeYLGUb2Yow/

KICTANet is a multi-stakeholder Think Tank for people and institutions interested and involved in ICT policy and regulation.
KICTANet is a catalyst for reform in the Information and Communication Technology sector. Its work is guided by four pillars
of Policy Advocacy, Capacity Building, Research, and Stakeholder Engagement.

KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's
times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your
wares or qualifications.

PRIVACY POLICY: See https://mm3-lists.kictanet.or.ke/mm/lists/kictanet.lists.kictanet.or.ke/

KICTANet - The Power of Communities, is Kenya's premier ICT policy engagement platform.