Re: Census 2016
I'm not saying others are luddites - I'm the anti technology one!
- but I am saying in my own bumptious way that most of the arguments presented here against the census just don't hold up. Again, there isn't any info, technology, question, or anything that hasn't occurred before, or the information is already with the government, hacked or unhacked.
Having a security based professional background, of those in my circle, its the ones with similar backgrounds who are the most likely to be offended by this specific ABS method of approach. For those who are either not computer/systems/security savvy or in general just have a fuzzy notion of how large modern agencies work, they are mostly fine with it all - believing that the government already knows their stuff so what the heck.
Its a fundamental difference in approach. The theory of compartmentalising information in order to assist in the reduction of leakage and cross linking. Essentially, it boils down to the cliche of 'needs to know' and is an important foundation stone of _everything_ security related.
The ATO gets information that they _need_to_know_, so do medicare and other agencies. The fact that the ABS needs to even ask (as my previous response queries) means that they currently _do_not_know_ and therefore the question, in a security realm, is _do_ they need to? The answer is clearly no, in most respects, therefore wouldn't pass a basic security analysis.
Another basic rule in understanding security is that once you give up information you lose control of it. Its such a basic concept really, but nevertheless true and needs to be thought about in all security related analysis. You hand over sensitive information to a clearly untrustworthy third party and have immediately lost of control of it (even if they were 'trustworthy', you've still lost control by the way). In cases like this think of the information being put into the public domain, if this is of no concern because the information has no inherent value, then, fine, really, its fine - no need to worry in your individual case. However, many folks would be extremely concerned if they left their census form, filled in, at a table in a Starbucks cafe (for example) ... in the public domain, for viewing and use by any and all (because they've lost control of it).
Is the ABS like a Starbucks? No it isn't. But this isn't how 'loss of control' is viewed in a security sense. Loss of control is simply that. Loss of control. You no longer get to control when and where and by whom that information is utilized.