%Begin Public Comments February 2009 – DMV proposes a major policy shift to biometric systems World Privacy Forum Skip to Content Javascript must be enabled for the correct page display Home Connect With Us: twitter Vimeo email Main Navigation Hot Topics
Public Comments February 2009 – DMV proposes a major policy shift to biometric systems
Download the comments PDF
or Read the comments below
——
Issue
DMV proposes a major policy shift to biometric systems with significant fiscal and policy implications through an expedited 30-day opt out process February 3, 2009 Should California allow the DMV to make a major policy shift – applying biometric technology to photos and thumbprints received as part of the process for obtaining driver’s licenses and identity cards – through an expedited 30-day notice to the Legislature?
Background
On January 14, 2009, the DMV issued a Section 11 (2008 Budget Act) letter to the Legislature stating its intent to change the terms of its driver license and id card contract – including the use of biometric systems including facial recognition scans and biometric thumbprints on people seeking driver’s licenses and ID cards. Unless the Joint Legislative Budget Committee objects within 30 days, the contract with the vendor will take effect.
thumb_upLike (10)
commentReply (2)
shareShare
visibility823 views
thumb_up10 likes
comment
2 replies
E
Ella Rodriguez 1 minutes ago
Biometrics technology is the computerized matching of an individual’s personal characteristics aga...
A
Aria Nguyen 2 minutes ago
Because every sample is a little different, biometrics really asks whether the sample is similar eno...
D
Daniel Kumar Member
access_time
4 minutes ago
Wednesday, 07 May 2025
Biometrics technology is the computerized matching of an individual’s personal characteristics against an image or database of images. Initially, the system captures a fingerprint, picture, or some other personal characteristic, and transforms it into a small computer file (often called a template). The next time someone interacts with the system, it creates another computer file (often called a sample), and compares it to the original template or tries to find a match in its database.
thumb_upLike (50)
commentReply (1)
thumb_up50 likes
comment
1 replies
Z
Zoe Mueller 3 minutes ago
Because every sample is a little different, biometrics really asks whether the sample is similar eno...
I
Isabella Johnson Member
access_time
9 minutes ago
Wednesday, 07 May 2025
Because every sample is a little different, biometrics really asks whether the sample is similar enough to the template. The matching of individuals using biometric technology raises serious cost and privacy concerns. Organizations from across the political spectrum raise concerns with (1) the expedited process the DMV is attempting to use to effectuate major policy and fiscal changes, and (2) the underlying proposal to use biometric technologies without appropriate safeguards.
thumb_upLike (39)
commentReply (0)
thumb_up39 likes
T
Thomas Anderson Member
access_time
20 minutes ago
Wednesday, 07 May 2025
Procedural Concerns
o A 30-day expedited opt-out letter to the Legislature is an inappropriate vehicle to move from photographs and thumbprints of millions of Californians to biometric systems that pose a number of privacy and technological concerns if not handled carefully. [1] o The DMV should not be permitted to implement biometric technologies that the Legislature has considered and rejected over the years, without the issues being fully considered and addressed in policy and budget hearings. [2] o The DMV does not appear to have statutory authorization to move from thumb and finger prints and photographs to facial recognition technology and other biometric technologies.
thumb_upLike (24)
commentReply (1)
thumb_up24 likes
comment
1 replies
I
Isaac Schmidt 13 minutes ago
[3]
Policy Concerns
o A government database that contains the facial and thumbpri...
G
Grace Liu Member
access_time
15 minutes ago
Wednesday, 07 May 2025
[3]
Policy Concerns
o A government database that contains the facial and thumbprint images of practically every Californian over age 16 raises serious privacy and cost concerns. Where a biometric identifier is used as a unique identifier to catalogue personal information about an individual, it would enable the surveillance, monitoring and tracking of individuals.
thumb_upLike (12)
commentReply (1)
thumb_up12 likes
comment
1 replies
D
David Cohen 6 minutes ago
Law enforcement currently has access to DMV’s database of more than 25 million people. [4] It appe...
T
Thomas Anderson Member
access_time
6 minutes ago
Wednesday, 07 May 2025
Law enforcement currently has access to DMV’s database of more than 25 million people. [4] It appears that the biometric thumbprints and facial scans from the DMV will be used in criminal investigations, and as public and private surveillance cameras become more ubiquitous, the likelihood rises of using facial recognition to surveil innocent people. [5] o The security of the database is critical.
thumb_upLike (9)
commentReply (2)
thumb_up9 likes
comment
2 replies
H
Harper Kim 2 minutes ago
For example, because people cannot change their fingerprints (unlike a password or other security me...
S
Scarlett Brown 2 minutes ago
While the Department of Homeland Security is pushing for biometric facial image capture, it does not...
D
Daniel Kumar Member
access_time
7 minutes ago
Wednesday, 07 May 2025
For example, because people cannot change their fingerprints (unlike a password or other security measures), if someone compromises the database (i.e., an identity thief substitutes his or her fingerprints or facial scan in someone else’s file), it could be a nightmare to resolve. It does not appear that the DMV has met the basic question: does California “need” these biometric databases? Biometric imaging is in large not required by the Real ID Act.
thumb_upLike (18)
commentReply (1)
thumb_up18 likes
comment
1 replies
S
Sofia Garcia 2 minutes ago
While the Department of Homeland Security is pushing for biometric facial image capture, it does not...
A
Andrew Wilson Member
access_time
8 minutes ago
Wednesday, 07 May 2025
While the Department of Homeland Security is pushing for biometric facial image capture, it does not require biometric finger printing. Furthermore, the new Administration has already committed to revisiting Real ID. Therefore, it is not clear what will eventually be required by that law.[6] Essentially there is no federal impetus behind this move.
thumb_upLike (10)
commentReply (0)
thumb_up10 likes
J
Jack Thompson Member
access_time
36 minutes ago
Wednesday, 07 May 2025
Further, 11 states have passed legislation against adopting Real ID, while 10 other states have passed resolutions against the Act. o What is the “bang for the buck” that California would get from the use of these biometric databases? How much is the whole system going to cost?
thumb_upLike (13)
commentReply (0)
thumb_up13 likes
A
Amelia Singh Moderator
access_time
30 minutes ago
Wednesday, 07 May 2025
How much would be borne by the state, how much would be borne by individuals? While we do not have access to the access to the contract between the DMV and L-1 Identity Solutions [7]; we do know that creating biometric database systems (facial image and thumbprint) will be very costly, and even more costly to do correctly (in addition to the technology, staff needs be trained, and there must be technical and due process protections in place to ensure that people’s licenses are not wrongly denied or taken away because of an error). o The DMV has also stated that the current cards are not in compliance with the security standards “such as those specified by the American Association of Motor Vehicles [AAMVA].” [8] It is unclear whether the DMV is referencing the biometric technology or other standards.
thumb_upLike (49)
commentReply (1)
thumb_up49 likes
comment
1 replies
S
Sofia Garcia 21 minutes ago
If the DMV is referencing biometric standards, this seems to be incorrect. The most recent informati...
N
Nathan Chen Member
access_time
44 minutes ago
Wednesday, 07 May 2025
If the DMV is referencing biometric standards, this seems to be incorrect. The most recent information on the AAMVA website states that the current biometric technologies available are not adequate to do the one-to-many match that AAMVA believes are required.
thumb_upLike (48)
commentReply (0)
thumb_up48 likes
D
Daniel Kumar Member
access_time
60 minutes ago
Wednesday, 07 May 2025
[9] During this budget crisis, California needs to be absolutely sure that it is not wasting time and money and endangering privacy.
Recommendation
California organizations listed below strongly urge the Legislature to reject the DMV’s proposal to adopt biometric technologies through the use of this expedited process and instead urge the Legislature to consider these important proposals through the normal legislative process which would allow for careful consideration of the important policy and fiscal issues raised. America Civil Liberties Union Electronic Frontier Foundation California Eagle Forum Consumer Federation of California Consumers Union Privacy Activism Privacy Rights Clearinghouse World Privacy Forum ____________________________ Endnotes [1] Biometrics: Who’s watching you?
thumb_upLike (2)
commentReply (3)
thumb_up2 likes
comment
3 replies
D
Daniel Kumar 50 minutes ago
Electronic Frontier Foundation (September 2003), http://www.eff.org/wp/biometrics-whos-watching-you,...
C
Charlotte Lee 56 minutes ago
There is no authorization to convert those images using biometric technology or to create databases....
Electronic Frontier Foundation (September 2003), http://www.eff.org/wp/biometrics-whos-watching-you, and Biometric Identifiers, Electronic Privacy Information Center, http://epic.org/privacy/biometrics/default.html [2] For example, see AB 1474 (Koretz) 2002, http://www.leginfo.ca.gov/cgi- bin/postquery?bill_number=ab_1474&sess=0102&house=B&author=koretz, and SB 661 (Dunn) 2001 http://www.leginfo.ca.gov/pub/01- 02/bill/sen/sb_0651-0700/sb_661_bill_20010223_introduced.pdf. [3] The relevant Vehicle Code sections specify that the print or picture must appear on the application or on the driver’s license itself.
thumb_upLike (29)
commentReply (0)
thumb_up29 likes
I
Isaac Schmidt Member
access_time
42 minutes ago
Wednesday, 07 May 2025
There is no authorization to convert those images using biometric technology or to create databases. See Vehicle Code sections 12800 and 12800.5. [4] Vehicle Code section 1810.5 permits access to the DMV database by law enforcement agencies, and they currently enjoy access to DMV photo and thumbprint data.
thumb_upLike (13)
commentReply (2)
thumb_up13 likes
comment
2 replies
L
Lily Watson 40 minutes ago
However, it appears that law enforcement access may be limited by the provisions of the Federal Driv...
Z
Zoe Mueller 24 minutes ago
2721 et seq.), [5] California voters added the personal right of privacy to the state Constitution�...
D
Dylan Patel Member
access_time
15 minutes ago
Wednesday, 07 May 2025
However, it appears that law enforcement access may be limited by the provisions of the Federal Driver’s Privacy Protection Act of 1994 (18 U.S.C. Sec.
thumb_upLike (36)
commentReply (0)
thumb_up36 likes
I
Isabella Johnson Member
access_time
80 minutes ago
Wednesday, 07 May 2025
2721 et seq.), [5] California voters added the personal right of privacy to the state Constitution’s inalienable rights (Article I, Section 1). The voter pamphlet specifically stated that this People’s Initiative was intended to “prevent government and business interests from stockpiling unnecessary information about us and from misusing information gathered for one purpose in order to serve another purpose or to embarrass us.” (Prop. 11 Ballot Argument, Proposed Stats.
thumb_upLike (26)
commentReply (1)
thumb_up26 likes
comment
1 replies
H
Hannah Kim 28 minutes ago
And Amends to Cal. Const. with arguments to voters, Gen....
T
Thomas Anderson Member
access_time
17 minutes ago
Wednesday, 07 May 2025
And Amends to Cal. Const. with arguments to voters, Gen.
thumb_upLike (37)
commentReply (2)
thumb_up37 likes
comment
2 replies
N
Nathan Chen 1 minutes ago
Elec. (Nov....
T
Thomas Anderson 9 minutes ago
7 1972.). See also a general discussion of the need to address legal, privacy and efficiency issues ...
S
Sophia Chen Member
access_time
18 minutes ago
Wednesday, 07 May 2025
Elec. (Nov.
thumb_upLike (2)
commentReply (1)
thumb_up2 likes
comment
1 replies
N
Natalie Lopez 15 minutes ago
7 1972.). See also a general discussion of the need to address legal, privacy and efficiency issues ...
V
Victoria Lopez Member
access_time
38 minutes ago
Wednesday, 07 May 2025
7 1972.). See also a general discussion of the need to address legal, privacy and efficiency issues with biometrics system, Legislative Analyst’s Office, Analysis of the 2001- 02 Budget Bill, Department of Motor Vehicles (2740) http://www.lao.ca.gov/analysis_2001/transportation/tran_07_2740_anl01.htm and GAO Testimony, Information Security, Challenges in Using Biometrics, (September 9, 2003) http://www.gao.gov/new.items/d031137t.pdf. [6] “Feds to ‘rethink’ license mandate,” USA Today, January 22, 2009, http://www.usatoday.com/news/washington/2009-01-22- securelicense_N.htm [7] In its analysis of the 2001-02 budget, the Legislative Analysts Office, stated that “estimates for the expanded [facial and thumb and facial print biometrics] system range up to $50 million, and the time required to fully implement such a system and obtain necessary data files could exceed a decade.
thumb_upLike (19)
commentReply (1)
thumb_up19 likes
comment
1 replies
H
Harper Kim 27 minutes ago
Legislative Analyst’s Office, Analysis of the 2001-02 Budget Bill, Department of Motor Vehicles (2...
D
Dylan Patel Member
access_time
80 minutes ago
Wednesday, 07 May 2025
Legislative Analyst’s Office, Analysis of the 2001-02 Budget Bill, Department of Motor Vehicles (2740) http://www.lao.ca.gov/analysis_2001/transportation/tran_07_2740_anl01.htm [8] Section 11.00/11.10 Driver License/Identification/Salesperson Contract Project, APPLICATION, January 14, 2009. [9] The possibility of using physiological biometric identifiers to satisfy at least some of the requirements of a unique identifier has been considered. Ultimately, using biometric identifiers holds the promise of a real solution to the problems of identity theft and multiple identities by the same person.
thumb_upLike (25)
commentReply (2)
thumb_up25 likes
comment
2 replies
E
Evelyn Zhang 51 minutes ago
However, for a biometric technology to be selected and to be interoperable in North America, it must...
A
Aria Nguyen 4 minutes ago
The majority of the research, reports and findings for biometric technologies are related to systems...
M
Madison Singh Member
access_time
42 minutes ago
Wednesday, 07 May 2025
However, for a biometric technology to be selected and to be interoperable in North America, it must perform a one-to- many (1–N) record matching or identification function. To date, there have not been any large scale uses of biometric technologies that have performed one to many record matching for populations the size MVAs need to address (300 million records). …The current methods of measuring biometric technologies are not adequate for the type of system that AAMVA proposes.
thumb_upLike (10)
commentReply (0)
thumb_up10 likes
D
Dylan Patel Member
access_time
22 minutes ago
Wednesday, 07 May 2025
The majority of the research, reports and findings for biometric technologies are related to systems that perform the one-to-one matching. AAMVA suggests that more information is needed to reach a decision.
thumb_upLike (15)
commentReply (0)
thumb_up15 likes
A
Aria Nguyen Member
access_time
23 minutes ago
Wednesday, 07 May 2025
AAMVA DL/ID Security Framework. pg 26.
thumb_upLike (27)
commentReply (0)
thumb_up27 likes
S
Sophia Chen Member
access_time
48 minutes ago
Wednesday, 07 May 2025
(February 2004) (emphasis added) http://www.aamva.org/aamva/DocumentDisplay.aspx?id={25BBD457-FC4F-4852-A392-B91046252194} Posted February 3, 2009 in Biometrics, Department of Motor Vehicles (DMV), Public Comments Next »Consumer Tips: Job Seekers’ Guide to Resumes – Twelve Resume Posting Truths « PreviousWorld Privacy Forum opposes California DMV plan WPF updates and news CALENDAR EVENTS
WHO Constituency Meeting WPF co-chair
6 October 2022, Virtual
OECD Roundtable WPF expert member and participant Cross-Border Cooperation in the Enforcement of Laws Protecting Privacy
4 October 2022, Paris, France and virtual
OECD Committee on Digital and Economic Policy fall meeting WPF participant
27-28 September 2022, Paris, France and virtual more
Recent TweetsWorld Privacy Forum@privacyforum·7 OctExecutive Order On Enhancing Safeguards For United States Signals Intelligence Activities The White House https://www.whitehouse.gov/briefing-room/presidential-actions/2022/10/07/executive-order-on-enhancing-safeguards-for-united-states-signals-intelligence-activities/Reply on Twitter 1578431679592427526Retweet on Twitter 1578431679592427526Like on Twitter 1578431679592427526TOP REPORTS National IDs Around the World — Interactive map About this Data Visualization: This interactive map displays the presence... Report: From the Filing Cabinet to the Cloud: Updating the Privacy Act of 1974 This comprehensive report and proposed bill text is focused on the Privacy Act of 1974, an important and early Federal privacy law that applies to the government sector and some contractors. The Privacy Act was written for the 1970s information era -- an era that was characterized by the use of mainframe computers and filing cabinets.
thumb_upLike (25)
commentReply (0)
thumb_up25 likes
L
Lucas Martinez Moderator
access_time
125 minutes ago
Wednesday, 07 May 2025
Today's digital information era looks much different than the '70s: smart phones are smarter than the old mainframes, and documents are now routinely digitized and stored and perhaps even analyzed in the cloud, among many other changes. The report focuses on why the Privacy Act needs an update that will bring it into this century, and how that could look and work. This work was written by Robert Gellman, and informed by a two-year multi-stakeholder process. COVID-19 and HIPAA: HHS’s Troubled Approach to Waiving Privacy and Security Rules for the Pandemic The COVID-19 pandemic strained the U.S.
thumb_upLike (7)
commentReply (3)
thumb_up7 likes
comment
3 replies
E
Emma Wilson 73 minutes ago
health ecosystem in numerous ways, including putting pressure on the HIPAA privacy and security rule...
K
Kevin Wang 27 minutes ago
While some of the adjustments are appropriate for the emergency circumstances, there are also some m...
health ecosystem in numerous ways, including putting pressure on the HIPAA privacy and security rules. The Department of Health and Human Services adjusted the privacy and security rules for the pandemic through the use of statutory and administrative HIPAA waivers.
thumb_upLike (40)
commentReply (2)
thumb_up40 likes
comment
2 replies
T
Thomas Anderson 15 minutes ago
While some of the adjustments are appropriate for the emergency circumstances, there are also some m...
D
David Cohen 98 minutes ago
Public Comments February 2009 – DMV proposes a major policy shift to biometric systems World...
A
Ava White Moderator
access_time
54 minutes ago
Wednesday, 07 May 2025
While some of the adjustments are appropriate for the emergency circumstances, there are also some meaningful and potentially unwelcome privacy and security consequences. At an appropriate time, the use of HIPAA waivers as a response to health care emergencies needs a thorough review. This report sets out the facts, identifies the issues, and proposes a roadmap for change.
thumb_upLike (10)
commentReply (3)
thumb_up10 likes
comment
3 replies
C
Christopher Lee 52 minutes ago
Public Comments February 2009 – DMV proposes a major policy shift to biometric systems World...
A
Audrey Mueller 43 minutes ago
Biometrics technology is the computerized matching of an individual’s personal characteristics aga...