As the automation of information handling continues to grow, those concerned with data protection are focusing more and more on the rights of individuals. This was highlighted in the eighth annual report to Parliament of the UK Data Protection Registrar, Eric Howe. The danger is that individual privacy may be whittled away as increasingly large volumes of personal data are stored and exchanged by means of computers. Databases of information are said to be currently available for use across the European Community to aid policing and customs control. Various bodies are coming under increasing pressure to release details from driver, vehicle and television licences for use in wider and wider contexts. This year has brought about renewed suggestions for a national database of DNA profiles on the entire male population. In addition, Census Offices are testing the water as regards a national population register. These are only some of the problematic areas mentioned in the report. Issues investigated last year include calling line identification; markers kept by the police on files of people convicted of, or awaiting trial for a serious offence who are HIV positive or who have full-blown AIDS; DNA profiles kept by the Metropolitan Police on 3,500 people questioned during criminal investigations, but subsequently released; medical confidentiality issues; direct marketing and advertising practices, and the abuse of personal data to be obtained by local authorities in connection with the Council Tax. However, it was forecast that the European Community Draft Directive will set the pace for future UK legislation with regard to data protection. It specifically sets out to protect individual privacy. This is in contrast to the existing UK Data Protection Act, which does not deal with privacy issues at all. It acts merely as a regulator, but does not provide any specific legislation on the issue. Nevertheless, the draft directive in its initial form is said to be imperfect. Suggested registration procedures are quoted as being too complicated, while criteria for registration is believed to be too broad for the average computer user. Howe is concerned too that lobbying by such groups as the direct marketing industry may lead to weaker individual protection than under present UK law. The final draft of the European directive is expected by late 1993, with legislation to follow by 1995.
