Showing posts with label Cellan-Jones. Show all posts
Showing posts with label Cellan-Jones. Show all posts

Monday, 8 July 2013

midata and the BBC. The BBC?

from Craig Belsham's midata blog:
Hi I’m Dan, Director of the midata Innovation Lab, part of the midata voluntary programme ... we will help empower UK consumers in a really meaningful way ...
The BBC are not paid to talk twaddle with a lot of armchair economists.
They are wasting our money,
they shouldn't have joined in the first place
and they should resign from mIL now.

Following last week's exciting launch of the midata Innovation Lab (mIL), now that the party's over, let's take a look at the structure of the organisation. It's a partnership apparently, "a collaboration of the following 22 Founding Partners, respected organisations collaborating with real data to work out how the UK both empowers and protects consumers whilst innovating with data":


Back in November 2011, the Department for Business Innovation and Skills (BIS) issued a press release saying:
Businesses and organisations that have so far committed to working in partnership with Government to achieve the midata vision are:
- Avoco Secure
- billmonitor
- British Gas
- Callcredit
- EDF Energy
- E.ON
- Garlik
- Google
- Lloyds Banking Group
- MasterCard
- Moneysupermarket.com
- Mydex
- npower
- RBS
- Scottish Power
- Scottish Southern Energy
- The UK Cards Association
- Three
- Visa
That's 19 businesses from Avoco Secure to Visa, of whom only three remain "committed to working in partnership with Government to achieve the midata vision". Why have the other 16 dropped out?

The press release also said:
The following consumer groups and regulators are working with midata to represent consumers' interests and concerns. As well as working towards potential benefits, their input plays an important role in identifying potential risks and helping determine how these can be addressed:
- Citizens Advice
- Communications Consumer Panel
- Consumer Focus
- Information Commissioner’s Office (ICO)
- OFCOM
- Office of Fair Trading (OFT)
- Which?
That's seven consumer groups/regulators, of whom only two are left. Why have the other five pulled out?

And why are there still 22 Founding Partners left?

What, for example, is the University of Southampton doing on the list?

Their expertise is in oceanography. Nothing to do with midata.

The answer is all to do with the Open Data Institute (ODI), who are also on the list of Founding Partners. The ODI is headed by Professor Sir Tim Berners-Lee and Professor Sir Nigel Shadbolt. They are both professors at Southampton and presumably the university has come along for the ride.

But they shouldn't be there. The ODI is all about open data. Public data. The opposite of what midata is meant to be about, which is personal data. Private data. The two should not be confused. Nigel Shadbolt himself says so:



But there they are, the ODI and Southampton and, what's more, Professor Shadbolt is chairman of the midata programme as well as chairman of the ODI. This is a mess.

The inclusion of O2, Telefonica and Verizon among the founding partners makes a bit of midata sense. The idea behind midata is that consumers should be able to get better value from their phone contracts. Ofcom have failed to ensure good value for money. Having O2, Telefonica and Verizon involved will help to make sure that midata fails as well.

The link between midata and the Government Digital Service's failed Identity Assurance Programme (IDAP) isn't always obvious to other people but readers of this blog will remember that Verizon is one of the UK's eight appointed "identity providers".
from Craig Belsham's midata blog:
My name is Stephen and I head up the work on consumer confidence and trust which is part of the midata voluntary programme ... A data-enabled online market place will create new services that will take your data and do some really interesting things with it ...
They will also remember that, thanks to Edward Snowden, we now know that Verizon hands over its data to the US National Security Agency (NSA), who may or may not share it with the UK's GCHQ. Your personal data may travel via midata even further than Southampton.

The idea behind midata is (also) that consumers should get better value for money from their gas and electricity contracts. It is precisely because Ofgem have failed on that score (along with the Prime Minister) that BIS assert that midata is needed. Having Ofgem and npower on board – as oceanographers say – will ensure that midata fails as well.

midata is meant to help consumers to get better value for money from their current accounts and their debit/credit cards. That's a job MoneySupermarket.com already work at and have done for years which, in turn, is another reason why midata is unnecessary.
from Craig Belsham's midata blog:
I’m Richard and I chair one of the expert working groups looking at what we need to do to ensure that consumers can be confident when they allow their data to be passed to and used by third parties who are developing new and innovative applications to aggregate and use existing data in a way that brings benefits to users of these new services ... A data rich economy will allow lots of innovative companies to create brand new services that will enable you to take your data and do some really interesting things with it ...
The Information Commissioner's Office (ICO) exists to ensure that personal data remains private and that public data is disclosed unless it is exempt under the Freedom of Information Act. If the ICO doesn't close down mIL in the next few days, then it's not doing its job.

Mydex provides personal data stores (PDSs). midata relies on PDSs. That's the way BIS have designed it with the assistance of the midata strategy board. The chairman of Mydex is a member of the midata strategy board. BIS also retain Ctrl-Shift as consultants to advise them on midata. Ctrl-Shift advise BIS to use Mydex and, as readers of this blog know, Alan Mitchell, the director of Ctrl-Shift, set up Mydex with William Heath, the chairman of Mydex, the one who is also a member of the midata strategy board, and Mr Heath used to be a director of Ctrl-Shift and he retains a material shareholding in Ctrl-Shift, so you can understand why BIS, Mydex and Ctrl-Shift are among the Founding Partners of mIL.

Also, of course, Mydex is a UK-appointed  "identity provider", like Verizon, reinforcing the link to IDAP.

Jo Swinson is the successor at BIS to Norman Lamb who was the successor to Ed Davey. She wrote an article about midata which was published by Which?, who hosted a lengthy debate about the article on their website – 54 comments. No-one – including Which? – could see how midata would deliver the benefits that Jo Swinson and BIS promised.

Norman Lamb published a report on midata and launched a consultation on it. Question 6 of the consultation is: "What types of new services might be offered by intermediaries (such as, price comparison websites) and what could be the value of this new market?". In their response, Which? said, in full: "Which? has no comment on this question".

On the other hand, they wrote several pages in their response about the dangers of identity theft/fraud and the dangers of the loss of privacy. Are Which? satisfied that these dangers will not be exacerbated by midata? If so, why? And if not, will they, like the ICO, do their job of protecting consumers and warn people against midata?

In the case of all the Founding Partners named so far you can see why they are included in mIL. Even if, like the ODI, they shouldn't be.

But the BBC? What are the BBC doing there? They're a public service broadcaster. That's what the licence fee payers pay them to do. The BBC are not paid to talk twaddle with a lot of armchair economists. They are wasting our money, they shouldn't have joined in the first place and they should resign from mIL now.

When Ed Davey first announced midata, the BBC's own technology correspondent, Rory Cellan-Jones, asked "what's the catch for consumers and why is the government getting involved?". To which we may now add, why is the BBC getting involved?

midata and the BBC. The BBC?

from Craig Belsham's midata blog:
Hi I’m Dan, Director of the midata Innovation Lab, part of the midata voluntary programme ... we will help empower UK consumers in a really meaningful way ...
The BBC are not paid to talk twaddle with a lot of armchair economists.
They are wasting our money,
they shouldn't have joined in the first place
and they should resign from mIL now.

Following last week's exciting launch of the midata Innovation Lab (mIL), now that the party's over, let's take a look at the structure of the organisation. It's a partnership apparently, "a collaboration of the following 22 Founding Partners, respected organisations collaborating with real data to work out how the UK both empowers and protects consumers whilst innovating with data":


Monday, 19 November 2012

PRESS RELEASE: midata – time for BIS to answer the questions


PRESS RELEASE


To:

Home Office

OIG (re US-VISIT)

IDABC (re OSCIE)
China (re Golden Shield)
Pakistan (re NADRA)
FBI (re NGI)
UIDAI (re Aadhaar)
Agencies
midata – time for BIS to answer the questions
19 November 2012
When midata was announced a year ago Rory Cellan-Jones, the BBC’s Technology Correspondent, asked “what's the catch for consumers and why is the government getting involved”? Good questions.
Lifestyle choices
... individual users were not yet being allowed to exploit all the information relating to them to make their lives easier. Armed with the information that social networks and other web giants hold about us, he said, computers will be able to "help me run my life, to guess what I need next, to guess what I should read in the morning, because it will know not only what's happening out there but also what I've read already, and also what my mood is, and who I'm meeting later on".
Thus Tim Berners-Lee, inventor of the web, interviewed by the Guardian in April.
Slightly dotty, of course – your computer will know what mood you’re in? But the Department for Business Innovation and Skills (BIS) are trying to promote their midata initiative and it suits their purpose to say, in a press release the other day, that midata will allow consumers to “make better lifestyle choices”.
Even if it was true, what business would it be of the government’s?
None. If there’s a demand for lifestyle software, let the private sector provide it.
Economic growth
BIS also claim that midata would be “good for growth in the economy”. Strange, because at the 9 August 2012 midata open forum David Miller, a BIS economist, was asked how much midata would make the economy grow by and answered, it’s very difficult to say what the macro-economic effects of midata would be.
Banks, phone companies and energy companies already provide us with detailed statements, on-line and on paper, they have done for decades, and the economy isn’t growing. So what’s new about midata?
Personal data stores (PDSs)
Answer – PDSs, please see para.2.19, p.24 of BIS's midata 2012 review and consultation. BIS want us all to have PDSs, databases storing all of our transaction data, which can be processed to make our lifestyle choices for us and which identify us uniquely.
We wouldn’t be expected to maintain the PDSs ourselves. That would be the job of so-called “trusted third parties”, who would store all our personal data on the web, where it would be continuously updated by permanent links with all our suppliers.
What personal data? The BIS press release refers us to a document of theirs, A midata future: 10 ways it could shape your choices. The answer seems to be any contracts you have entered into, any warranties you have taken out, your driving licence, your educational qualifications, your CRB report, your bank accounts, the clothes you buy, your gas and electricity usage and your neighbours’ usage, too, your health records, entertainment preferences and favourite restaurants.
It’s an extensive set of data about you. midata may not help the economy to grow but, in the PDSs which it relies on, it would provide you with an on-line ID card.
Trusted third parties
Who are the third parties you’re meant to trust with all this personal data? Only one is regularly mentioned and most people will never have heard of it – Mydex – so what reason is there to trust it?
At the 9 August 2012 midata open forum Kirstin Green, a deputy director at BIS, mentioned that the chairman of Mydex sits on the BIS midata strategy board. To understand BIS’ midata proposal it helps to understand Mydex is therefore written with considerable authority, as is Making midata work for you.
Identity assurance
Actually, you may have heard of Mydex. You may have read the Department for Work and Pensions (DWP) press release about the Identity Assurance Programme last week, Providers announced for online identity scheme. Mydex is one of the seven “identity providers” appointed for the UK last week by DWP. The idea is that in Whitehall’s new digital-by-default world, if you want to register for benefits, you need an identity provider to vouch for you, to say that you are you – a PDS is an ID card.
----------
They couldn’t answer them last year. Let’s see if BIS can answer Mr Cellan-Jones’s questions now.

About David Moss
David Moss has worked as an IT consultant since 1981. The past 9 years have been spent campaigning against the Home Office's plans to introduce government ID cards into the UK. It must now be admitted that the Home Office are much better at convincing people that these plans are a bad idea than anyone else, including David Moss.
Press contacts: David Moss, BCSL@blueyonder.co.uk

PRESS RELEASE: midata – time for BIS to answer the questions


PRESS RELEASE


To:

Home Office

OIG (re US-VISIT)

IDABC (re OSCIE)
China (re Golden Shield)
Pakistan (re NADRA)
FBI (re NGI)
UIDAI (re Aadhaar)
Agencies
midata – time for BIS to answer the questions
19 November 2012
When midata was announced a year ago Rory Cellan-Jones, the BBC’s Technology Correspondent, asked “what's the catch for consumers and why is the government getting involved”? Good questions.

Saturday, 3 November 2012

Identity assurance. Only the future is certain – doom 4 and last (William Heath, Mydex, midata, BIS, GDS and ID cards)


What's the beef?
A personal data store is the software equivalent of an ID card ...
After all the promises
going back to the 20 September 2010 identity assurance meeting ...
here we go again.

Remember this:
  • There was a revealing moment at the 31 October 2011 identity assurance (IdA) meeting. Una Bennett, Head, Learner Records Service, did a presentation on the Skills Funding Agency's Learner Passport pilot project.
  • Stay awake.
  • Ms Bennett keeps lists of all the exams people have sat. It's a sort of National Identity Register of exam results. (Public money well spent? You be the judge.) Anyone too disorganised to do their own filing can always contact her to find out if they got a grade 4 in Latin O-level or a grade 5. Something like that.
  • Which seemed to annoy William Heath.
  • Mr Heath was at the meeting, together with other exhibitors/winners of Technology Strategy Board funding, when he laid into Ms Bennett. Your exam results, he implied, like every other fact about you, should be kept in personal data stores (PDSs) administered by Mydex, Mr Heath's company. And they would be, too, if it wasn't for the disgraceful fact that the Skills Funding Agency gets £40 million a year of public funds (Mr Heath's figure) and Mydex doesn't.
Now read on ...

It's Thursday 3 November 2011, a year ago today and three days after the 31 October 2011 IdA meeting:
What's the catch for consumers and why is the government getting involved?"
This is the first the world has heard of midata. (Why wasn't midata announced at the 31 October 2011 meeting? If anyone knows, please tell the rest of us.)

midata is supposed to give consumers control over the way their personal data is used. BIS are unable to explain how midata will achieve that. It is not in their power to grant that control.

25 November 2011, and a consultancy called Ctrl-Shift publish a report, The new personal data landscape, repeating the unsupported claim that midata will give consumers control over their personal data and extolling the virtues of Mydex, a company specialising in PDSs (p.15):
Personal Data Stores
The last year has seen a flurry of activity around the concept of personal data stores or personal data ‘vaults’ that help individuals collect and keep their own data safe, manage, analyse and use this data, and control how it is shared with other parties. Launches include Mydex and ...

Personal Data Management: Mydex
Mydex helps individuals collect, manage and share data under their control ...
Ctrl-Shift fail to mention in their report that Alan Mitchell, the strategy director of Ctrl-Shift, is also a director of Mydex, which he co-founded with William Heath, the chairman of Mydex who, at that time, is also a non-executive director of Ctrl-Shift, please see The case for midata – the answer is a mooncalf.

It subsequently transpires that William Heath, chairman of Mydex, also owns 30 of the 106 shares in Ctrl-Shift and, further, that he sits on the strategy board for midata at BIS, please see Cribsheet below.

BIS is a client of Ctrl-Shift's, i.e. Ctrl-Shift are in the pay of BIS. And Mydex is in receipt of an unknown amount of the funds invested in the identity assurance industry – £14 million by the Technology Strategy Board and £10 million by the Cabinet Office – as announced at the 31 October 2011 IdA meeting.

There must be some doubt about the independence of Ctrl-Shift's consultancy advice. And Mydex begins to look like a creature of BIS and of the Cabinet Office, specifically the Government Digital Service (GDS). When Mydex speaks, it's not independent speech, it's just BIS and GDS speaking.

midata is supposed to be a voluntary scheme. That's back in November 2011. By July 2012 when BIS announce their midata consultation, it turns out that they're seeking statutory powers to force suppliers to comply with midata, please see the BBC's Midata project plan for compulsory customer data:
The new measures, likely to be included in the Enterprise and Regulatory Reform Bill currently going through Parliament, could become law next year.
At the open forum held on 9 August 2012, BIS are unable to say how midata will expand the economy and they cast doubt on whether it would.

5 September 2012, and the close connection between GDS's IdA, midata and Mydex is explained, please see To understand BIS' midata proposal it helps to understand Mydex and Making midata work for you. The connection with the US National Strategy for Trusted Identities in Cyberspace (NSTIC) is thrown in for good measure.

25 October 2012, and the nexus between midata, Mydex and GDS is mentioned for the first time on the GDS blog, see comments on Identity assurance for local government services and reference to personal data stores in the accompanying local government report.

3 November 2012, two hours ago as DMossEsq writes, William Heath releases a televised interview in which he makes the undefended claim that Mydex can save money for consumers and repeats the undefended claim that Mydex can cause the economy to grow.

It's a quite complicated picture. There is a map available. Cutting through the complexity, what's the beef?

A personal data store is the software equivalent of an ID card. Instead of being a piece of plastic in your wallet, it's a file on Mydex's computer. It's still an ID card.

After all the promises going back to the 20 September 2010 IdA meeting, the promises that the lessons had been learnt from the failure of IPS and their ID cards scheme, here we go again. Doom.

----------

Cribsheet
  • Ctrl-Shift is a consultancy which has BIS as a client.
  • BIS pays Ctrl-Shift and Ctrl-Shift issues independent reports saying what a good thing midata is.
  • midata is a BIS initiative so the money is well-spent.
  • Alan Mitchell is a director of Ctrl-Shift.
  • William Heath used to be a director of Ctrl-Shift but he resigned.
  • On the other hand, he retains 30 of Ctrl-Shift Ltd's 106 issued and paid-up ordinary shares, according to the 20 April 2012 annual return filed with Companies House. So he still has a chunky interest in the company.
  • Ctrl-Shift had a turnover in the year to 31 March 2011 of £122,129 and made a loss of £30,136 according to the unaudited accounts.
  • William Heath is the chairman of Mydex Data Services Community Interest Company, but not a director. Alan Mitchell is the strategy director. They have no shares in the company according to the 28 March 2011 annual return. All the 1,000 10p shares in Mydex are registered in the name of another director, Mr Iain Henderson.
  • Mydex is a PDS company. It wants to administer people's PDSs. It wants to manage your on-line identity for you.
  • Mydex made a loss in the year to 31 March 2011 of £2,117,212 but still has positive shareholders' funds thanks to a share options reserve. What that seems to mean is that when you do work for Mydex, you don't always get paid money, you may get share options instead.
  • Mydex may or may not have been the recipient of some of the £14 million the Technology Strategy Board invested in the nascent identity assurance business and/or the £10 million Francis Maude put in.
  • William Heath sits on the midata strategy board at BIS as Kirstin Green, a deputy director at BIS, told us at the 9 August 2012 open forum held as part of the public consultation on midata. At para.2.19 on p.24 of the consultation document you will see that midata depends on personal data inventories/stores.
  • DMossEsq used to contribute to William Heath's Ideal Government blog.
  • Remember The Bridge Over the River Kwai.
  • If you find yourself wondering why you should hand over your PDS to Mydex, a company you've never heard of and have no reason to trust and which will store it on the web, in the cloud, where you will have no control over it, then you're just an obsessive personality who understands nothing about economic reality, you're a troll who perversely doubts that this is the route to economic growth and human perfection:
It’s no more helpful to obsess about identity than to obsess about privacy ... The area to focus on is data logistics ... the compelling reason to pursue better data logistics with user-driven services is saving money.
William Heath, 21 September 2010


midata also creates opportunities for new markets to develop where businesses help consumers use their data to make better consumption decisions and lifestyle choices.
BIS, Cabinet Office and the Behavioural Insights Team, July 2012

Identity assurance. Only the future is certain – doom 4 and last (William Heath, Mydex, midata, BIS, GDS and ID cards)


What's the beef?
A personal data store is the software equivalent of an ID card ...
After all the promises
going back to the 20 September 2010 identity assurance meeting ...
here we go again.

Remember this:
  • There was a revealing moment at the 31 October 2011 identity assurance (IdA) meeting. Una Bennett, Head, Learner Records Service, did a presentation on the Skills Funding Agency's Learner Passport pilot project.
  • Stay awake.
  • Ms Bennett keeps lists of all the exams people have sat. It's a sort of National Identity Register of exam results. (Public money well spent? You be the judge.) Anyone too disorganised to do their own filing can always contact her to find out if they got a grade 4 in Latin O-level or a grade 5. Something like that.
  • Which seemed to annoy William Heath.
  • Mr Heath was at the meeting, together with other exhibitors/winners of Technology Strategy Board funding, when he laid into Ms Bennett. Your exam results, he implied, like every other fact about you, should be kept in personal data stores (PDSs) administered by Mydex, Mr Heath's company. And they would be, too, if it wasn't for the disgraceful fact that the Skills Funding Agency gets £40 million a year of public funds (Mr Heath's figure) and Mydex doesn't.
Now read on ...

Thursday, 6 September 2012

midata, the loneliest initiative in Whitehall – 10

Governing people is difficult. Too difficult.
Whitehall have given up.
midata is part of their alternative plan.
Governing personal data stores will be much easier.

--- o O o ---

Why is billmonitor called "billmonitor"?

billmonitor, if you remember, is a service which advises consumers what the best mobile phone tariff is for them to be on. The company behind this service is a keen supporter of midata, the Department for Business Innovation and Skills initiative, and is "Part of the government Midata board". midata is dedicated to getting the best deal for consumers, whether we're talking about mobile phone contracts or choosing the right gas and electricity suppliers or any other decision including health, education and employment decisions.

It all seems to make sense.

Until you notice that billmonitor has been in business for seven years or so and seems to have survived and maybe even thrived for all that time without needing midata.


Let's leave that for the moment, and try another question.

BIS are currently conducting a consultation on midata. They're interested in our answers to 22 questions. Questions 7, 8 and 9 are as follows:
Question 7: Should a consumer be able to require the business to supply the data in electronic format directly to a specified third party?

Question 8: Should a third party who is duly authorised by the consumer be able to seek the consumer’s data in electronic format directly from the supplier?

Question 9: What, if any, requirements should be placed on the secondary users of such data, albeit under the direction of consumers e.g. switching and advice sites?
Third parties? Secondary users? What on earth are they talking about?


And another thing. Who do you think wrote the following?
Every day, all around the world, thousands of IT systems are compromised. Some are attacked purely for the kudos of doing so, others for political motives, but most commonly they are attacked to steal money or commercial secrets. Are you confident that your cyber security governance regime minimises the risks of this happening to your business? My experience suggests that in practice, few companies have got this right.
Answer – Iain Lobban, the Director of GCHQ, in the Foreword to 10 steps to cyber security, one of the documents referred to in yesterday's 5 September 2012 press release issued by BIS, Business leaders urged to step up response to cyber threats, in which Vince Cable, Secretary of State at BIS, announces a new initiative to get business leaders to take the threat of cyber attacks seriously.

Few companies have got cyber security right, according to GCHQ, and yet there's the same Secretary of State, Vince Cable, promoting midata and urging us all to store our personal data on the web. It seems confused. Schizophrenic even. What's going on?


Last question. Professor Shadbolt was on You and Yours yesterday, the BBC Radio 4 consumer affairs programme (16'21" to 22'35"), chatting amiably about midata, the benefits of which would be legion but he couldn't name any. He's an intelligent man. What's he doing giving such a vapid interview?


billmonitor is called "billmonitor" because it monitors your bills. You don't just hand over your last few months' mobile phone bills, once-off, billmonitor recommends that you switch from tariff X to tariff Y and that's the end of the relationship. No, you hand over your mobile phone no., your user ID and your password, and billmonitor logs on to your phone company and sits there monitoring your phone usage until Doomsday, occasionally issuing recommendations to switch from this contract to that.

billmonitor is one of these "third parties" referred to in the BIS consultation whom you authorise to access data from your suppliers. And when billmonitor processes your mobile phone consumption data they become, in the terminology of BIS's consultation, "secondary users" of the data.

You the consumer have to be very trusting to give a stranger, billmonitor, access to your phone account. Particularly in light of GCHQ's claim that most companies have faulty cyber security, including perhaps billmonitor and all the telcos they are logged in to.

BIS want us all to take that risk. For midata. There must be something in midata that BIS prize so highly, they are even prepared to recommend that we run the associated risks of cyber-crime, the financial risks and the loss of privacy.

Whatever that something is, that BIS prize so highly, it's too embarrassing for Professor Shadbolt to tell us what it is.

So it's a good job that William Heath now has told us.

William Heath, remember, is the Mydex and Ctrl-Shift man, and a few hours ago he published To understand BIS’ midata proposal it helps to understand Mydex on the Mydex blog:
The Government’s midata consultation to give consumers a statutory right to their data in electronic format affects every individual, and every major company holding customer data in the UK. But it cannot be properly understood in isolation of wider imminent changes in how personal data is managed, shared, controlled and valued.

Mydex is all about that bigger picture. So we’ve drafted a briefing note particularly for organisations responding to the midata consultation.

We support midata. It will empower individuals and at last give real teeth to the good intentions behind the Data Protection Act subject access request. It goes hand in hand with the new UK and US approaches to ID assurance [emphasis added], which we also support. We think midata needs to apply also to other UK public services including health, education and job-seeking.
The Mydex "briefing note" referred to above, Making midata work for you, explains the benefits of a Mydex PDS (personal data store). Among others:
Digital by default. If the individual agrees, organisations can establish live, permanent links to key fields (such as home address and contact details) in the individual’s data store, receiving live status updates ...

Empowering. Mydex has a distributed cloudbased [oh good] hyper-secure [see GCHQ above] architecture ...
billmonitor just collects data from your suppliers. Mydex goes one step further – after collecting the data, Mydex distributes updates from one supplier to all the other suppliers who might need to know what's changed.

Having once given your permission, you're no longer involved. You're no longer needed. "Empowered" by midata, in "control" of your data, you've become digital by default.

Which is lucky, because the government wants all public services to become digital by default, too.

And with the identity assurance provided by Mydex, they can. If everyone has a PDS and if the PDS is a requirement of every transaction, then Government can at last be transformed.

As the BBC tell us, a few clauses in the Enterprise and Regulatory Reform Bill so worthy and dull that it won't be scrutinised by many people will arm BIS with order-making powers. Thereafter, statutory instruments can be quietly laid down, unscrutinised by anyone, and midata will have all the powers of identity assurance that the Government Digital Service could wish for.

Governing people is difficult. Too difficult. Whitehall have given up. midata is part of their alternative plan. That's what the bashful Professor Shadbolt didn't want to say. Governing PDSs will be much easier.

midata, the loneliest initiative in Whitehall – 10

Governing people is difficult. Too difficult.
Whitehall have given up.
midata is part of their alternative plan.
Governing personal data stores will be much easier.

--- o O o ---

Why is billmonitor called "billmonitor"?

billmonitor, if you remember, is a service which advises consumers what the best mobile phone tariff is for them to be on. The company behind this service is a keen supporter of midata, the Department for Business Innovation and Skills initiative, and is "Part of the government Midata board". midata is dedicated to getting the best deal for consumers, whether we're talking about mobile phone contracts or choosing the right gas and electricity suppliers or any other decision including health, education and employment decisions.

It all seems to make sense.

Until you notice that billmonitor has been in business for seven years or so and seems to have survived and maybe even thrived for all that time without needing midata.


Let's leave that for the moment, and try another question.

Wednesday, 5 September 2012

GreenInk 9 – Vince Cable and the re-shuffle

Let's see if the Telegraph publish this letter:
From: David Moss
Sent: 05 September 2012 11:34
To: 'dtletters@telegraph.co.uk'
Subject: James Kirkup, 04 Sep 2012, 'Free-market Tories arrive to reel in Vince Cable'

http://www.telegraph.co.uk/news/politics/9521389/Free-market-Tories-arrive-to-reel-in-Vince-Cable.html

Sir

In many cases "free-market Tories" will find it difficult to "reel in Vince Cable" at the Department for Business Innovation and Skills but there is one simple step forward they can take quickly – cancel BIS's confused 'midata' initiative.

Three examples of confusion. 1. BIS wish to take order-making powers to implement 'midata'. They describe this increase in regulation as having a de-regulatory effect. 2. 'midata' is meant to expand the UK economy but BIS agree that it is impossible to predict its macroeconomic effect, which could well be negative. 3. midata is meant to empower consumers. BIS want us consumers to store all our personal data on the web which, far from empowering us, will lay us open to mass identity theft.

If the free-market Tories can stop officials wasting their time and our money on 'midata', that will be a valuable first day's work at BIS.

Yours
David Moss

GreenInk 9 – Vince Cable and the re-shuffle

Let's see if the Telegraph publish this letter:
From: David Moss
Sent: 05 September 2012 11:34
To: 'dtletters@telegraph.co.uk'
Subject: James Kirkup, 04 Sep 2012, 'Free-market Tories arrive to reel in Vince Cable'

http://www.telegraph.co.uk/news/politics/9521389/Free-market-Tories-arrive-to-reel-in-Vince-Cable.html

Sir

In many cases "free-market Tories" will find it difficult to "reel in Vince Cable" at the Department for Business Innovation and Skills but there is one simple step forward they can take quickly – cancel BIS's confused 'midata' initiative.

Three examples of confusion. 1. BIS wish to take order-making powers to implement 'midata'. They describe this increase in regulation as having a de-regulatory effect. 2. 'midata' is meant to expand the UK economy but BIS agree that it is impossible to predict its macroeconomic effect, which could well be negative. 3. midata is meant to empower consumers. BIS want us consumers to store all our personal data on the web which, far from empowering us, will lay us open to mass identity theft.

If the free-market Tories can stop officials wasting their time and our money on 'midata', that will be a valuable first day's work at BIS.

Yours
David Moss

Tuesday, 4 September 2012

midata, the loneliest initiative in Whitehall – 9

BIS prove that midata is unnecessary.
Would you give a complete list of your acquaintance to a stranger?
Do you believe there is such a thing as a secure website?
Why keep a regulator and bark yourself?

--- o O o ---

Talk about lonely.

On 3 November 2011, Ed Davey MP posted 'Giving consumers the midata touch' on the the Department for Business Innovation and Skills blog and that was it – for 305 days, Mr Davey's post sat there all on its own.

Then yesterday, 3 September 2012, a second post was delivered, 'Why my data is important data', written by Stelios Koundouros, the "founder and director of billmonitor.com".

Mr Koundouros describes a number of his company's achievements, helping people since 2005 to choose the right mobile phone tariff. These successes have been achieved without there being any midata. They have been achieved using the mobile phone operators' tariffs and people's mobile phone consumption data both of which are released by the Telcos without there being any midata.

billmonitor.com's success is the neatest proof BIS could possibly have offered that midata is unnecessary.

So why does Mr Koundouros write the following, given that his story proves the exact opposite?
The implementation of the ‘midata’ vision is without doubt a prerequisite for ending confusion facing UK consumers about how much they pay for goods and services.
We are told that:
Stelios Koundouros is founder and director of billmonitor.com, and has led the company’s efforts since 2005. He holds a PhD in mathematics from Cambridge University and has carried out research at the Mathematical Institute at Oxford.
We are not told – but it is the case – that billmonitor.com is one of the 19 companies which initially expressed interest in midata, and that it is "Part of the government Midata board", according to the billmonitor.com home page. Perhaps that is why Mr Koundouros writes as he does.

There's nothing wrong with Mr Koundouros expressing his support for midata, even if he does undermine his own case. Just don't let BIS give you the impression that his is independent support.

The billmonitor.com website says:
Only you can make spending decisions
Bank level data encryption
Why this level of security?

Because, remember, in order to use the billmonitor.com service, you have to give them months and months of your detailed phone bills, they will know who you call, how often, for how long, and who you text. That personal data needs to be protected, and thus the "bank level data encryption".

Do you mind telling a total stranger as a result, who your friends and colleagues are? The people you call? Might they mind?

Do you trust Mr Koundouros's security measures?

The US Government trusted HBGary Federal's security, and just look what happened when the hackers decided to drive a coach and horses through it:
... A second example is Anonymous’ perhaps most striking operation, a devastating assault on HBGary Federal, a technology security company. HBGary’s clients included the US government and companies like McAfee.

The firm with the tag-line detecting tomorrow’s malware today had analyzed GhostNet and Aurora, two of the most sophisticated known threats. In early February 2011, Aaron Barr, then its chief executive officer (CEO), wanted more public visibility and announced that his company had infiltrated Anonymous and planned to disclose details soon.

In reaction, Anonymous hackers:
  • infiltrated HBGary’s servers,
  • erased data,
  • defaced its website with a letter ridiculing the firm ...
  • ... with a download link to a leak of more than 40,000 of its emails to The Pirate Bay,
  • took down the company’s phone system,
  • usurped the CEO’s twitter stream,
  • posted his social security number,
  • and clogged up fax machines.
Anonymous activists had used a number of methods, including SQL injection, a code injection technique that exploits faulty database requests. ‘You brought this upon yourself. You’ve tried to bite the Anonymous hand, and now the Anonymous hand is bitch-slapping you in the face’, said the letter posted on the firm’s website. 

The attack badly pummeled the security company’s reputation.
Stories like that are two-a-penny and you can read about 25 penceworth here. After which, you may wonder how secure billmonitor.com or any other website is.

Iran, which has suffered a number of cyber-attacks, has given up the ghost and decided to "move key ministries and state bodies off the worldwide internet". Meanwhile, in the name of midata, here's BIS luring you into storing your personal data in the custody of complete strangers on servers which could be anywhere in the world, much of which is beyond the jurisdiction of English law and emphatically out of your control.

The billmonitor.com website also says:
billmonitor was the first mobile comparison site approved by Ofcom in 2009
No doubt it was. It is Ofcom's job to regulate the Telcos. Why do we need billmonitor.com as well? And midata? If Ofcom can't do the job, why should midata be able to? Why keep a regulator and bark yourself? Surely the public interest is served by having the regulator do its job properly, and not by expensively doubling up on regulation.

midata, the loneliest initiative in Whitehall – 9

BIS prove that midata is unnecessary.
Would you give a complete list of your acquaintance to a stranger?
Do you believe there is such a thing as a secure website?
Why keep a regulator and bark yourself?

--- o O o ---

Talk about lonely.

On 3 November 2011, Ed Davey MP posted 'Giving consumers the midata touch' on the the Department for Business Innovation and Skills blog and that was it – for 305 days, Mr Davey's post sat there all on its own.

Then yesterday, 3 September 2012, a second post was delivered, 'Why my data is important data', written by Stelios Koundouros, the "founder and director of billmonitor.com".

Mr Koundouros describes a number of his company's achievements, helping people since 2005 to choose the right mobile phone tariff. These successes have been achieved without there being any midata. They have been achieved using the mobile phone operators' tariffs and people's mobile phone consumption data both of which are released by the Telcos without there being any midata.

billmonitor.com's success is the neatest proof BIS could possibly have offered that midata is unnecessary.

Monday, 3 September 2012

midata, the loneliest initiative in Whitehall – 8


BIS's midata initiative raises two questions for you.

Would you trust a complete stranger to store all your personal data?
And would you trust a lot of other complete strangers
(BIS's currently non-existent applications developers)
to process that data?

You might. If you're mad.

--- o O o ---

Coverage in the media of the Department for Business Innovation and Skills's lonely midata initiative remains scant.

The BBC reported on 22 August 2012, in 'Midata project plan for compulsory customer data', that ...
Consumer Minister Norman Lamb said: "It's clear to me that giving consumers the right to access their own transaction data promises huge opportunities for both consumers themselves and UK businesses."
... without pausing to ask how it's clear to Norman Lamb when it isn't clear to anyone else.

On 23 August 2012 ComputerWorldUK published 'Government threatens legal action against midata laggards'. Clearly the days of midata being a friendly voluntary initiative are long gone.

Retail Gazette carried an odd article on 30 August 2012, 'Why are retailers so afraid of Midata?' – odd, because there's no evidence that retailers are afraid of midata. Why would they be?

And then there's this week's Economist, 'Shameless self-promotion – Britain wants to lead the world in exploiting consumer data':
Britain is already “streets ahead” of most countries in liberating consumer data, says Liz Brandt of Ctrl-Shift, a marketing consultancy ...
Ctrl-Shift? Ring a bell? It should, please see 'The case for midata – the answer is a mooncalf'. Someone has posted a comment on the Economist website advising the magazine and its readers who Ctrl-Shift are:
The point of quoting Ctrl-Shift here is presumably to introduce an element of independent objectivity.

Ctrl-Shift Ltd was incorporated on 26 January 2009, according to Companies House. Alan Mitchell was appointed a Director on 13 May 2009 and William Heath on 16 July 2010. Mr Heath's appointment was terminated on 10 May 2012.

Mydex Ltd was incorporated on 18 February 2008 according to Companies House. Alan Mitchell is Head of Strategy and William Heath is Chairman, according to the Mydex website.

In their report The new personal data landscape Ctrl-Shift discuss the Personal Data Stores (PDSs) that would be needed for midata and recommend the PDS supplier Mydex.

In their 3 November 2011 press release about midata, the Department for Business Innovation and Skills (BIS) list the 19 commercial organisations that have agreed to collaborate with them on midata. The list includes Mydex.

At the 9 August 2012 open forum on midata held by BIS, Kirstin Green, a Deputy Director at BIS, said that William Heath (ex of Ctrl-Shift and still Chairman of Mydex) is on the BIS Strategy Board for midata.

In this case, no element of independence has been introduced. The Economist find themselves effectively quoting midata saying that midata is a Good Thing.
The fact that William Heath is on the midata strategy board is news but nothing else is, not for long-time DMossEsq readers.

In their 3 November 2011 press release, BIS listed 19 commercial organisations who had signed up to midata. No-one else has signed up since to this lonely initiative, even after the government threats of legal action reported by ComputerWorldUK.

Among those 19 was Mydex, Mr Heath's company, the company promoted by Ctrl-Shift, Mr Heath's ex-company, which is a paid consultant to BIS.

What readers may not know is that the Technology Strategy Board (TSB) have invested in a number of companies including Mydex, please see p.24 of their document, 'Ensuring trust in digital services'. Pump-priming, fine, funding R&D, government "picking winners", no problem with that.

The TSB organised an exhibition of the products of these R&D companies on 31 October 2011, just a few days before the BIS press release. The event is reported by ex-Guardian man Mike Bracken on the Cabinet Office's Government Digital Service blog, 'Establishing trust in digital services'. We attendees were treated at the same time to a number of talks given by GDS, including a talk by Francis Maude himself.

The subject of these talks was identity assurance or "IdA", as the Cabinet Office call it.

HMRC want to make all their services available on-line and preferably only on-line, said Joan Wood, Director, Online Service & Digital Development at HMRC. DWP want to make the Universal Credit system on-line only, said Steve Dover, DWP Corporate Director Universal Credit Business and IT Solutions.

But how can HMRC and DWP achieve that if they don't know who they're dealing with at the other end of the line? Where does the IdA come from? The same question could be asked of midata. And the same answer could be given – what IdA needs is for everyone in the UK to have a "Personal Data Inventory" (the BIS name for it) or "Personal Data Store" (everyone else's name for it).

Putting all public services on-line is the old Tony Blair/Cabinet Office/Gus O'Donnell/Ian Watmore Transformational Government/joined-up government plan. That plan collapsed years ago, partly because it depended on ID cards and the Home Office's misbegotten ID card scheme failed.

The Cabinet Office are trying to breathe new life into Transformational Government through the G-Cloud and GDS initiatives much discussed on DMossEsq and, it seems, through midata. We may not have ID cards but the idea is that we should have PDIs/PDSs instead, please see para.2.19, p.24 of BIS's midata 2012 review and consultation:
A ‘Personal Data Inventory’ has been proposed, with the aim of giving consumers clear information about the types of data which organisations hold about them. This work is still in development by the midata programme participants, but broadly the proposal is that to gain access to their Personal Data Inventory, the customer would have to log-in to a secure website where the Personal Data Inventory would contain a simple explanation of each category of data and if, and how, the data can be accessed by the consumer. The Personal Data Inventory is likely to contain data such as address and contact details, existing tariffs/contracts, payment methods, items purchased, when, value, amount spent per year, usage data.
The midata question was posed by Rory Cellan-Jones of the BBC, "why is the government getting involved?". Professor Shadbolt couldn't answer it. Not even Norman Lamb MP can answer it. Not so far. But do we perhaps see an answer now – midata is the ID cards scheme resurrected? That might explain why BIS want to take powers to implement a scheme whose stated benefits are some of them footling and others no more than wishful thinking, neither of which provides a sound basis on which to invest public money.

Take a look at BIS's 'A midata future: 10 ways it could shape your choices', particularly at example #2, Getting a new job:
midata' could allow individuals to have access to information held about them by various organisations. When getting a new job, an individual could use verification programmes to send necessary proofs to a new employer. For example, instead of making copies and going to the post office, a new employee could get their driving licence, educational qualifications, CRB check and personal identity all by ticking a set of boxes and clicking 'send'.

This would save money for employers who won't have to deal with lengthy and expensive hiring processes.
"Establishing trust in digital services" is the Cabinet Office's apt name for the problem. And midata is not the solution.

Would you trust a complete stranger (Mydex, or whoever) to store all your personal data?

And would you trust a lot of other complete strangers (BIS's currently non-existent applications developers) to process that data?

You might. If you're mad. The rest of us will "make copies and go to the post office" and any sensible employer will retain his or her "expensive hiring processes" – otherwise they won't have a clue who they've just hired.

midata, the loneliest initiative in Whitehall – 8


BIS's midata initiative raises two questions for you.

Would you trust a complete stranger to store all your personal data?
And would you trust a lot of other complete strangers
(BIS's currently non-existent applications developers)
to process that data?

You might. If you're mad.

--- o O o ---

Coverage in the media of the Department for Business Innovation and Skills's lonely midata initiative remains scant.

The BBC reported on 22 August 2012, in 'Midata project plan for compulsory customer data', that ...
Consumer Minister Norman Lamb said: "It's clear to me that giving consumers the right to access their own transaction data promises huge opportunities for both consumers themselves and UK businesses."
... without pausing to ask how it's clear to Norman Lamb when it isn't clear to anyone else.