Wednesday 17 September 2014

RIP IDA – notes to editors

... the unveiling
does not coincide
with the availability of the service ...

No need to say it, it goes without saying, it should be obvious to all but, just in case it isn't obvious to all, IDA is dead.

IDA is the Cabinet Office Identity Assurance programme. And it's dead.

----------


1. All the rest of you editors have been scooped by Bryan Glick, the esteemed editor of Computer Weekly, who published GDS unveils 'Gov.UK Verify' public services identity assurance scheme yesterday:
The Verify brand will be unveiled tomorrow (Wednesday 17 September 2014) as the public-facing name for the Identity Assurance Programme (IDAP), which the Government Digital Service (GDS) has been working on for the past three years.
You didn't know it was happening today (17.9.14), did you. And you didn't know that IDA had become Verify.

What's more:
In an exclusive interview, Government Digital Service (GDS) executive director Mike Bracken told Computer Weekly that three departments – including HM Revenue & Customs and the DVLA – are close to launching services using Gov.UK Verify ...
While you're still trying to catch up on whether IDAP is IDA and IDA is Verify, Mr Glick is going to be getting the goods straight from the horse's mouth. Why Mr Glick? Why him, and not you? Why not the Guardian or the BBC?

2. Of course, the claim that HMRC and DVLA and a third mystery department will be using IDAP IDA Verify isn't exclusively exclusive.

Not if you've read GDS's 2014-15 Business Plan, where they told us on 4 July 2014 that (p.33):
  • DVLA would start using Verify IDA by the end of June 2014,
  • the Rural Payments Agency and the Ministry of Justice by the end of September 2014,
  • HM Passport Office and DWP by the end of December 2014, and
  • HMRC by the end of March 2015.
3. So take heart. And start asking questions.

Who's in charge of IDA? You know the answer to that because Computer Weekly told you back in February 2012:
Bracken is now the senior responsible owner for IDA. “It’s something that I put my hand up for because it’s so important. Unless we have better and wider used security protocols, it will be hard to identify users, allow transactions and link up services ...”
When was IDA meant to go live? You know the answer to that because Computer Weekly told you three years ago, back in September 2011:
A prototype for IDA will be completed by the end of the year [2011]. The first services will be developed and tested by February 2012, with IDA due to be rolled out for initial public services by autumn 2012.
That didn't happen, of course, but then you were told that IDA would be "fully operational" for DWP's 21 million claimants in March 2013.

That didn't happen, of course, but then you were told in HMRC's December 2012 digital strategy that ...
A pilot IDA service, using point in time verification (a necessary part of the PAYE online exemplar) to make things simple and easy for one-off transactions will be used in October 2013 ...
... and that didn't happen either.

Then GDS unloaded a digital system on us for applications to register to vote. Quite important in a democracy, the system lacks any identity assurance worthy of the name.

Next question, therefore, why should you believe GDS this time?

4. Mr Glick says that "the Verify brand will be unveiled tomorrow (Wednesday 17 September 2014)". He also says, in fluent Mandarin, that:
... the unveiling does not coincide with the availability of the service ...
There are at least seven veils in this dance and what you're seeing today is just a tease. The service isn't being unveiled at all. It still isn't available.

Why go through this exercise, you may care to ask? Is it to disguise the fact that IDA is once again behind schedule? Is it to make it look as though something is happening even if it isn't? Is it to try to retain the confidence of the new subscribers GDS are trying to sign up with the help of OIX (who?) and KPMG?

5. Precisely what is it that is not being unveiled today?

According to Mr Glick, channelling GDS:
GDS's Verify system will make it possible for citizens to prove who they are online to safely and securely access digital public services.
Safely? Securely?

The media are full of stories of hacking and fraud and theft on the web. No-one is immune.

As one cyber security expert put it, "When it comes to cyber security QinetiQ couldn’t grab their ass with both hands" – and QinetiQ is one of our top defence sector cyber security companies.

On 5 September 2012, the Foreign Office, the Department for Business Innovation and Skills and the Cabinet Office got the Director of GCHQ to address the massed ranks of FTSE 100 chairmen and chief executives, Business leaders urged to step up response to cyber threats. To summarise, what GCHQ said was, cyber security, you're no good at it.

If these people can't do safe and secure websites, who can? GDS? Who says?

6. Take another look at that last quotation of Mr Glick's:
GDS's Verify system will make it possible for citizens to prove who they are online to safely and securely access digital public services.
IDA will allow you to "prove who you are"? This is an ID scheme. As the name would suggest. Like the atrocious ID cards scheme that the Home Office couldn't get off the ground despite eight years (2002-10) of top-level political support, an unlimited budget and the best consultants money can buy.

Is GDS's parent, the Cabinet Office, heading for that same veil vale of tears as the Home Office?

No, you will be told, this is quite different:
Gov.UK Verify is designed to overcome concerns about government setting up a central database of citizens’ identities to enable access to online public services – similar criticism led to the demise of the hugely unpopular identity card scheme set up under the Labour government.
How?
Instead, users will register their details with one of several independent identity assurance providers – certified companies which will establish and verify a user’s identity outside government systems.
These companies are the IDPs – the "identity providers" – Digidentity (who?), Experian, Mydex (who?), the Post Office and Verizon.

How "independent" are they?

Go back to the GDS business plan (p.32):
Cabinet Office is the sole government authority for identity assurance services. Centralised contracts are developed and paid for by the programme.
Who is paying the IDPs? GDS. And no-one else. Who are they under contract to? GDS. And no-one else. In what sense are they independent?

And in what sense are they "certified"?

GDS have told you in the past that IDPs must be certified by tScheme (who?), Delivering Identity Assurance: You must be certified. And are they? Experian is. None of the others. You can check for yourself on the tScheme website.

7. What's more, Experian are waiting for the US courts to sentence Mr Hieu Minh Ngo, an ID fraudster who stole the data he needed from ... Experian. The court is due to sit some time this month and the US Senate is ready to pounce then on the whole "ID broker" sector. Senator Rockefeller in particular doesn't seem to trust ID brokers like Experian.

What's even more, Verizon have now been banned from any German government contracts, see Computer Weekly's German government terminates Verizon contract over NSA snooping fears. If they're not good enough for Germany, how can they be good enough for the UK?

When Mr Glick tells us that ...
Government digital chiefs hope Gov.UK Verify will become a well-recognised and trusted brand as public services increasingly move to the digital-by-default model ...
... you may care to ask, why? Why do government digital chiefs hope that IDA will be trusted?

8. There could be a major PR blitz today to launch the non-unveiling of IDA. Francis Maude may say a word or two. Interviews on Radio 4's World at One. Swooning coverage in the Guardian. Some of the more biddable think tanks. Log-rolling by US journalists, recommending that the White House should emulate GDS. You'll probably find that IDA/Verify has already won an award of some sort. That kind of thing.

One last question before you fall prey to the Folies Bergère razzmatazz.

These IDPs. They're meant to be able to confirm that you are you. How do they do that?

By checking with your bank.

Do you remember authorising your bank to confirm your details when asked by any old IDP, many of whom you've never heard of? No? How does that work?

9. The questions go on:
  • Ask GDS about the ID hub they've built. See what you get.
  • Why did the executive director of GDS give the Americans the impression last year that IDA is already up and running for 45 million users?
  • What happened in Warwickshire?
  • Are GDS interested in security or is convenience a greater priority?
  • Is the concept of a trust framework shot?
  • Is IDA agile?
  • Who is Sylvia?
  • ...
But you can take it from here.

----------

Updated 20.9.14

16 September 2014 – Computer Weekly tells us that the Government Digital Service (GDS) will "unveil" a new service called "GOV.UK Verify" the next day, and that that's got something to do with identity assurance and using public services.

Next day, 17 September 2014 – nothing is unveiled. OK, there's a guidance note published on GOV.UK, Introducing GOV.UK Verify. And a post appears on the IDA blog, GOV.UK Verify. But that's it. There's no demonstration of the system. None of the questions above are answered. This is not an unveiling in any normal sense of the word.

18 September 2014 – nothing is unveiled GOV.UK Verifywise.

19 September 2014 – the promised Computer Weekly interview is finally published, Government digital chief Mike Bracken on the next five years – there is one mention of GOV.UK Verify but otherwise all we learn is that everything would be different if only the world was different. No unveiling there.

And, hat tip Mrs DMossEsq, there's a two minute and 52 second item on BBC Radio 4's You and Yours programme (25'50"-28'42") about identity assurance. There is no mention of GOV.UK Verify by name.

But Peter White, the presenter, does manage in that time to make the link with the hated and abandoned ID cards scheme, he asks whether we should be worried about the banks and "identity providers" bandying our data around, he asks what happens to the 17% of people who can't or won't use the web and he elicits the tentative suggestion that it will be about a year before the system is available to the public.

Prospective investors in IDA or GOV.UK Verify or whatever it's called behind the veil of appearance will note the clumsiness of this non-unveiling and ask themselves what went wrong. Why bother to announce an unveiling and then not unveil?

No idea.

Experian and Verizon are on the hook. Prospective investors invited to become "identity providers" like Experian and Verizon might be wise to leave them dangling there and to see what happens, before signing any contracts and leaving their brands exposed, at the mercy of the GDS public relations unveiling team.

from Introducing GOV.UK Verify, © Crown copyright
What happened to the other three "identity providers"?
The Post Office and Digidentity and Mydex?
Where are they?

Updated 23.9.14

It may seem as though last week's unveiling of IDA/Verify was not an unveiling at all, in that no-one saw it.

Not quite true. One person did. IDA/Verify was unveiled to the estimable Rory Cellan-Jones, the BBC's Technology Correspondent, please see Cracking the problem of online identification – hat tip @CyberSecKent:
As the system is gradually rolled out across various public services, there are bound to be stories of angry users unable to make it work. There will also be plenty of questions of trust - do we really want a credit agency or a bank intervening in our relationship with the government?
Mr Cellan-Jones is not an "angry user unable to make [IDA/Verify] work". He is a resigned user who has seen it all before and who can't make it work. For him, IDA/Verify didn't work. Not with Verizon. And not with Experian. Neither of them. He has not been able to acquire an on-line ID. The problem remains uncracked.

If and when GDS/Experian/Verizon manage to make IDA/Verify work for Mr Cellan-Jones, then there remain the unanswered questions he raises about trust.

It's early days. Very early days. But IDA/Verify is off to a wretched start. Or as DMossesq readers will recognise, a long death. RIP.

Updated 26.9.14

Is there any hope for IDA/Verify?

Yes.

DVLA say so.

That's the Driver and Vehicle Licensing Agency and in today's blog post, View Driving Licence – access and services for third parties, they say:
GOV.UK Verify

Over the coming months, driving licence holders who use VDL to access their driver details will do so via the new GOV.UK Verify service. GOV.UK Verify is the new way for people to prove who they are when using digital services. The service will authenticate users based on a number of identity questions and allow them to set up a unique account so they can access other government services. In time GOV.UK Verify will become the only way to access VDL.
VDL is DVLA's View Driving Licence service (previously VDR/View Driving Record).

Are they right? Do they know what they're talking about?

We must assume that the answer in each case is Yes. DVLA's chief executive, Oliver Morley, attended an event called "SPRINT BETA" the other day and according to him transparency is the bedrock of change:


Updated 28.9.14

Who said:
The GOV.UK Verify platform provides people with a way to prove who they are online, so they can use Government services safely.
It's an assertoric statement in the present tense. It implies that GOV.UK Verify exists and is available today and allows anyone to prove who they are and allows them to use public services safely.

GOV.UK Verify does not exist today. It does not allow anyone to prove who they are. It does not allow anyone to use public services. And it is only safe in that sense – in the sense that it can't harm you because it doesn't exist.

Only Sir Jeremy Heywood, Cabinet Secretary and Head of the Civil Service, that's who, writing two days ago on Friday 26 September 2014, please see More than just websites.

Why did he write that? It's not true.

RIP IDA – notes to editors

... the unveiling
does not coincide
with the availability of the service ...

No need to say it, it goes without saying, it should be obvious to all but, just in case it isn't obvious to all, IDA is dead.

IDA is the Cabinet Office Identity Assurance programme. And it's dead.

----------


1. All the rest of you editors have been scooped by Bryan Glick, the esteemed editor of Computer Weekly, who published GDS unveils 'Gov.UK Verify' public services identity assurance scheme yesterday:
The Verify brand will be unveiled tomorrow (Wednesday 17 September 2014) as the public-facing name for the Identity Assurance Programme (IDAP), which the Government Digital Service (GDS) has been working on for the past three years.
You didn't know it was happening today (17.9.14), did you. And you didn't know that IDA had become Verify.

Friday 29 August 2014

The magic of open data #1

"Sharing information across government databases
will dramatically increase governmental powers –
otherwise the UK government wouldn't have proposed it."
Professor Sir Nigel Shadbolt, Chairman, Open Data Institute


Lough Erne in County Fermanagh, Northern Ireland, "is a particularly scenic waterway, renowned for its beautiful setting. The area is popular for angling and watersports, with waterskiing, Rowing and wakeboarding being amongst the most popular; the stretch of water alongside the Broadmeadow, Enniskillen, has hosted stages of the World Waterski Championships annually since 2005, and in 2007, a pro-wakeboard competition, 'Wakejam' was hosted by the Erne Wakeboard Club (EWC) after successful national wakeboard competitions in the previous years. Canoeing is also a popular recreational sport on the Erne".

That's what it says in Wikipedia and that's where, on 18 June 2013, after a hard day's fishing and wakeboarding, the G8 canoed back to shore and issued their famous Declaration (para.7):
We, the G8, agree that open data are an untapped resource with huge potential to encourage the building of stronger, more interconnected societies that better meet the needs of our citizens and allow innovation and prosperity to flourish.
It is this Declaration that caused David Gauke MP, Exchequer Secretary to the Treasury, blithely to recommend standing the British Constitution on its head so that whereas we used to imagine that personal data submitted to the government would by default be treated as confidential, in future it will instead be treated as open, public and available to all:
... the UK helped secure the G8’s Open Data Charter, which presumes that the data held by Governments will be publicly available unless there is good reason to withhold it. (p.4)
Queen Méabh (Maev)
by Joseph Christian Leyendecker
Is it something in the water? "In Irish mythology and folklore, there are three tales about how the lake was formed and got its name. One says that it is named after a mythical woman named Erne, Queen Méabh's lady-in-waiting at Cruachan. Erne and her maidens were frightened away from Cruachan when a fearsome giant emerged from the cave of Oweynagat. They fled northward and drowned in a river or lake, their bodies dissolving to become Lough Erne ...".

It may not have been a fearsome giant that emerged from the cave of Oweynagat, of course. It may actually have been Rt Hon Francis Maude MP, Cabinet Office Minister, "JFDI", as he's known, who frightened poor Erne and her maidens to death. Whitehall folklore has it that he once told the Information Commissioner's Conference:
I want to bust the myths around the complexities of data sharing ... we aim to find effective ways of using and sharing data for the good of everyone ...
And it may not have been water that they were drinking when the G8 were "helped" – to use Mr Gauke's word – to agree to this inversion of the settled order (para.11-13):
Principle 1: Open Data by Default

We recognise that free access to, and subsequent re-use of, open data are of significant value to society and the economy.

We agree to orient our governments towards open data by default.

We recognise that the term government data is meant in the widest sense possible. This could apply to data owned by national, federal, local, or international government bodies, or by the wider public sector ...
The UK held the Presidency at the time and within limits they could launder their own policy through the G8 but what on earth possessed them to dream up open data by default?

Mr Gauke tries to blame Shakespeare:
Getting to this stage:
The Government published its response to the Shakespeare Review of Public Sector Information on 14 June 2013 ... (p.2)
That's Stephan, by the way, not William.

Stephan Shakespeare is the CEO of YouGov, the polling organisation, and he wrote An Independent Review of Public Sector Information [PSI].

We need to familiarise ourselves at this point with some of the lyrical vocabulary of our ancient and magical land. Here in the UK, Ordnance Survey, the Met Office, the Land Registry and Companies House are the four Trading Funds that together constitute the Public Data Group (PDG). The PDG brings in £143 million a year in revenue for the Exchequer by selling maps and weather forecasts and such like.

And Mr Shakespeare thinks that that's ridiculous. He wants to break the antique spell we live under in the UK and drag the country into the information age by giving away PSI for free to entrepreneurs. The eruption of innovation that results will expand the economy. That's the idea, at least:
It seems a straightforward decision to invest £143m to make Trading Fund data widely available is a relatively small price to pay to leverage wider economic benefits far exceeding this by orders of magnitude. (p.30)
But just when you think you've found a convincing prophet, he goes and spoils it by saying that:
Forecasting future benefits is also hard to predict. How businesses and individuals might use datasets in the future to generate new products and services and by implication impact economic growth, is equally unknown. (p.30)
In other words there isn't the slightest justification he can advance for saying that the unspecified wider economic benefits of giving away this PSI for free would exceed £143 million by uncounted orders of magnitude.

It can't be Shakespeare under whose influence the wetland sprites (Maude and Gauke?) were acting at Lough Erne. Who then?

Perhaps Tim Kelsey.

Mr Kelsey was for a while the Executive Director of Transparency and Open Data in Mr Maude's fiefdom, the Cabinet Office. A magnificent job title, and a doughty champion of open data he is and has been for years – this, for example, is a pronouncement he made in an article published in July 2009, Long live the database state:
If the next government, of whichever party, wants a better public sector it must encourage more use of personal data; not less. What should be done? Data sharing must be made easier, first by removing the legislative obstacles to sharing government databases.

... no one who uses a public service should be allowed to opt out of sharing their records ...

Nor can people rely on their record being anonymised ...
Unfortunately for Mr Kelsey, his so-called "care.data" plan to collect all our previously confidential medical records and give them away to researchers fell apart in February 2014 when patients and doctors lost confidence in him. It can't have been him casting the open data spells four months later at Lough Erne and intoxicating the G8.

Which suggests that the guiding light may have been the charming Professor Sir Nigel Shadbolt, chairman and co-founder of the Open Data Institute, and the author of The spy in the coffee machine – the end of privacy as we know it (2008):

... sharing information across government databases will dramatically increase governmental powers – otherwise the UK government wouldn't have proposed it. (p.95)

... we should never forget that bureaucracies are information-thirsty, and will never stop consuming. Indeed, they will never even cut down. They will break or bend their own rules, and any prior specification of how information use will be limited, or data not shared, is not worth the paper it is printed on. (p.212)
Actually, he isn't the author, he's the co-author of that book, with Kieron O'Hara, his sometime PhD student. And Dr O'Hara is the sole author of Transparent Government, Not Transparent Citizens: A Report on Privacy and Transparency for the Cabinet Office, a work referred to by Stephan Shakespeare in his PSI report (p.34). And Professor Sir Nigel appeared in front of the Public Administration Select Committee (PASC) to give evidence jointly with Stephan Shakespeare. And Tim Kelsey and Professor Sir Nigel are or were both members of the Data Strategy Board and, as such, assisted with the production of Stephan Shakespeare's PSI report (p.4). And so it goes cabalistically on.

When Professor Sir Nigel and Stephan Shakespeare appeared in front of PASC they were bemoaning the fact that the Post Office Royal Mail had just been privatised and had taken the PAF with them onto their balance sheet. The PAF is the Postcode Address File and would have been given away to entrepreneurs for free if our two witnesses had had their way.

The Hon Bernard Jenkin MP, chairman of PASC, agreed.

Somewhat surprisingly.

After all, Professor Sir Nigel and Stephan Shakespeare gave no indication whatever how giving away the PAF for nothing would have made the economy grow.

And the PAF generates income. Naturally the government wanted to realise the best price possible for the Post Office Royal Mail. That's the coffee in the coffee machine you can smell. Wake up.

They've had more luck with Companies House:
Free Companies House data to boost UK economy

Companies House is to make all of its digital data available free of charge. This will make the UK the first country to establish a truly open register of business information ...

This is a considerable step forward in improving corporate transparency; a key strand of the G8 declaration at the Lough Erne summit in 2013.

It will also open up opportunities for entrepreneurs to come up with innovative ways of using the information ...
The "digital data available" from Companies House includes the title, name, address, date of birth, nationality and profession of every director and every company secretary of every company in the UK – "the end of privacy as we know it".

Do they imagine that thousands of very bright people haven't been thinking of "innovative ways of using the information" for several decades now? What are they supposed to have missed? Companies House don't say. Just like Stephan Shalespeare, who couldn't tell us how many orders of magnitude his leveraged wider economic benefits would exceed the PDG income by.

There's one obvious application of the Companies House data. Suppose you're a 50 year-old female Hungarian surveyor living in Kent and suppose that you want to establish a false identity for some entrepreneurial purpose. Not so easy in the past but now, with the Companies House data available to you for free, you can search for suitable matches in the comfort of your own home. Thank you Messrs Maude, Gauke, Jenkin, Shadbolt, O'Hara, Shakespeare and Kelsey – the answer to Queen Méabh's prayer.

Apart from that, there's no telling what sort of innovation these people are talking about. It just looks like hope. Or guesswork. Will giving away an entire country's personal data inspire innovation? How? Why? Are there any examples? If it's that easy to create innovation, are the universities wasting their time doing research? Are we wasting our money funding it? Why bother granting corporate tax relief on R&D? Is there no downside? Can nothing go wrong? Which economy will benefit? Suppose the innovators are all Estonian – how does that help the UK economy?

You may not be able to answer those questions and all the other related questions that occur to you. We know that Tim Kelsey can't. Neither can Stephan Shakespeare – he just says that anyone standing in the way of open data wants people to die of cancer and wants children to be unhappy. Shroud-waving. Blackmail.

But Professor Sir Nigel is a different kettle of fish. Very different. Can he answer the questions? Can he move the debate on from the enchanted world of Lough Erne, out of the twilight and into the open?

That is the subject of a future post which if it is ever written will be based on this talk he gave:


Prof. Sir Nigel Shadbolt - The Fifth Paradigm: From Open Data to Social Machines

----------

Updated 26.3.15

God but Tuesday was an odd day.

Tuesday 24 March 2015, out of the blue, inattendu by any of us proles, came the surprising announcement that Public Servant of the Year ex-Guardian man Mike Bracken CBE CDO had been appointed the UK government's Chief Data Officer thereby making him Public Servant of the Year ex-Guardian man Mike Bracken CBE CDO CDO given that he was already the Chief Digital Officer.

Not that that need concern normal people.

But Twitter went wild, as hundreds of breathless congratulations poured in from all over the world the second best one being:


It's a good question. Along with how do you fit it in with being executive director of the Government Digital Service and senior responsible owner of the pan-government identity assurance programme, GOV.UK Verify (RIP)?

The best tweet was:


Rarely can 94 characters have been freighted with quite so much meaning.


Updated 8.10.15

Tim Kelsey's care.data was meant to start operations 18 months ago in April 2014. That's when, for the first time, the medical records maintained by our GPs (general practitioners/family doctors/the primary care providers) were supposed to be collected centrally by NHS England. There was vociferous opposition from patients and GPs centred on the absence of any thought in care.data about the confidentiality of medical records. NHS England postponed the start by about six months to the autumn of 2014, NHS England acts in response to concerns about information sharing – statement from Tim Kelsey, National Director for Patients and Information.

In October 2014 we learned that there wouldn't be a national roll-out, just a regional pilot, "GP-led clinical commissioning groups in four areas of the country are to help develop the care.data programme as it moves into a ‘pathfinder stage’ ...".

And when would this pilot start?

Clearly not in autumn 2014. In December 2014, the Independent Information Governance Oversight Panel said that the care.data pilot could start just as soon as 27 currently outstanding questions were satisfactorily answered and seven tests were passed.

In written evidence to the Health Committee dated 9 February 2015, the chairman of the Health & Social Care Information Centre revealed that over 700,000 people had opted out of care.data and that "the HSCIC does not currently have the resources or processes to handle such a significant level of objections".

In March 2015 Tim Kelsey told us care.data on hold until election.

By June 2015, after the election, you could take your pick. Either those 700,000 people could opt out of care.data but they could forget about receiving any healthcare. Or their opt-outs would be ignored and their data would be sold to insurance companies anyway. Will Jeremy Hunt ensure that “700,000” patient opt-outs are respected?, medCondifential wanted to know, while the Telegraph newspaper warned us that Nearly 1million patients could be having confidential data shared against their wishes.

And now?
Tim Kelsey to leave NHS England

17 September 2015 - 12:00

He has been appointed commercial director at Telstra Health, a division of Australia’s leading telecommunications provider where he will lead development of new digital and mobile solutions for patients, professionals and citizens around the world ...

Updated 3.11.15

There's something odd about a tweet of Nigel Shadbolt's today.

We know that he and Stephan Shakespeare were hacked off at the Post Office Royal Mail keeping control of the Postcode Address File (PAF) when it was privatised.

Maybe so, but that's the law, the PAF was and is the Post Office Royal Mail's intellectual property (IP) and, if there's some value to be derived from it, it would have been remiss of the management to give it up.

Entrepreneurs can still access the PAF, it's not lost to them. They just have to pay for the privilege.

Did the UK economy lose anything thereby? There is this assumption in some versions of the case for open data that free access to data causes innovation and/or that paid access inhibits innovation.

It is questionable whether that assumption is true. There has not yet been an explosion of innovation caused by Companies House's data becoming freely available. The considerable innovations of DueDil, on the other hand, all took place while the data had to be paid for.

Which makes Sir Nigel's use of the word "contaminated" sound more like something coming out of the mouth of a fundamentalist zealot than the urbane academic we are used to.

Flicking through your copy of Volume 38 of the Journal of Contemporary Asia, you will have come across this on p.546 ...
While the bourgeoisie was relatively small, its representative ideology none the less penetrated other classes. Members of the proletariat could be corrupted by modes of thinking characteristic of the bourgeoisie and take up the "stand" of this class (Mao, 1974a: 73; The Polemic, 1965: 33, 421-2). The proletariat was therefore compelled to wage an ideological struggle to divest members of its own class of bourgeois contamination, and to remould the thought patterns of the bourgeoisie (Ch'en, 1970: 107, 117, 123; Mao, 1977b: 409-10, 504).
... and you may agree that we can do without any recurrence of Maoist "ideological struggle", otherwise the speech given today by the eminently bourgeois Matt Hancock, Cabinet Office Minister, on the topic of data-driven government takes on a sinister, minatory hue.

Mr Hancock has established a "Steering Group of digital and data visionaries" who will drive the agenda on data-sharing and data-driven policy-making. That Steering Group includes Sir Nigel, among others. Here's hoping that none of these stoutly proletarian visionaries becomes contaminated.


Updated St Patrick's Day 2016

The G8 fell for it, see above, or at least pretended to fall for it:
We, the G8, agree that open data are an untapped resource with huge potential to encourage the building of stronger, more interconnected societies that better meet the needs of our citizens and allow innovation and prosperity to flourish.
That was back in June 2013.

Matt Hancock, Cabinet Office Minister, fell for it, or so he said, when he launched the current consultation on data-sharing:
There is huge potential for improving citizens’ lives through data sharing in the UK. The consultation we launch today will help make sure we get data right and bolster security whilst making people’s lives better.
The Chancellor fell in with falling for it in yesterday's Budget:
1.251 This Budget sets out steps to ensure the benefits of digital technology are felt by all businesses and individuals. The government will ... provide up to £5 million to develop options for an authoritative address register that is open and freely available – making wider use of more precise address data and ensuring it is frequently updated will unlock opportunities for innovation ...
The Government Digital Service plan to declare the new national identity assurance scheme to be live in a few weeks time. It's nothing but a machine for collecting your personal information and sharing it widely in the UK and abroad, out of your control.

The pretence that these initiatives are intended to expand the economy is just that, a pretence. Opening up data to all and sundry does not cause innovation.

The G8 Declaration is quire clear. The intention is to invert the Constitution (p.4) ...

... the UK helped secure the G8’s Open Data Charter, which presumes that the data held by Governments will be publicly available unless there is good reason to withhold it.

... all in the name of the bone-headed plan to compile the registers which, together, will constitute a "single source of truth" for Government as a Platform.


Updated 22.3.16

The information-sharing paradox

The G8, we were saying on St Patrick's Day, and the Cabinet Office and the Treasury all want to make more data open. Once it is available to all at no cost, innovation will be the inevitable result and the economy will expand by orders of magnitude, according to Stephan Shakespeare of YouGov, although he can't explain how – where there should be a coherent argument, there's just a hole.

It's not just the G8, the Cabinet Office and the Treasury. Companies House have fallen for it, too. And now they're having to confront the obvious problem, Our register: advice on protecting your personal information. (Don't get your hopes up. Their advice is useless.)

And it's not just the UK. The sensible Australians have got the bug. In the name of their "National Innovation and Science Agenda", Oz government wants much more personal data sharing, hat tip Kat Hall.

This is a global epidemic. With no solution. Because how do you combat a global epidemic? With massive information-sharing ...


Updated five days after St George's Day 2016

As noted on St Patrick's Day, please see above, there is a national log-rolling exercise being conducted in respect of open data. That exercise was assisted yesterday with the publication by Sir Jeremy Heywood, the Cabinet Secretary, of Open data - the revolution is here.

"Open data is data that anyone can access, use or share ... It really has changed people's lives for the better: the value is well proven", says Sir Jeremy.

"The value is well proven"? Follow Sir Jeremy's link and you will find reference to a PwC report, research from Lateral Economics, a McKinsey estimate, a CapGemini study, a Transport for London claim, the results of some Open Data Institute research and the findings of the Landsat Advisory Group that the 42 year-old Landsat mission has not been a waste of public money.

The value of open data remains well questionable. When Sir Jeremy follows up with "I believe the Civil Service can play a central role in harnessing these benefits", the question arises what benefits?

It gets worse. "At both national and local level, government holds huge amounts of data and more is generated every day. People rightly expect us to protect their personal data. But with general and anonymised data we can now achieve things that would have been considered impossible only a decade ago" – what impossible things can Sir Jeremy do now?


"The Government has already published over 27,000 datasets, covering almost £200 billion of public spending, since launching data.gov.uk in 2010. We have done this to be open and transparent about the information we hold ...". OK so far, Sir Jeremy's data.gov.uk is a Good Thing, to the extent that it helps the public to hold the government to account ...

... but then we get "but also so that others, inside and outside of government, can take that data and use it to build new and exciting products and services". What exciting products and services? Sir Jeremy's Companies House, for example, has opened up the personal information of hundreds of thousands of company directors (none of it anonymised by the way) and there's not a single exciting product or service to be seen as a result.

It is only prudent to be well sceptical about Sir Jeremy's assumption that open data inspires innovation and causes the economy to expand and improves people's lives.

Also about his claim that personal information will be treated with respect by his Government Digital Service (GDS), the bizarrely-chosen seat of his Government Data Programme, "... we are aiming to transform the way government stores, manages and uses data. The data team at Government Digital Service is ...".

The Privacy and Consumer Advisory Group have devised a set of nine principles for identity assurance. While claiming to abide by all nine, GDS have flouted the lot with their GOV.UK Verify (RIP) identity assurance scheme which is due to go live tomorrow. Sir Jeremy's revolution is here, indeed.


Updated 1.5.16 1

There was a documentary about the Queen on telly the other day. The programme covered the abdication of the disgraceful wrong 'un Edward VIII and the accession of George VI. There is evidence that, on the King's untimely death, Lord Mountbatten sought to bring back the wrong 'un and have him re-enthroned. At which point in the programme one transcendently magnificent lady, a cousin of the Queen's, delivered herself of the following: "it was always said of Lord Louis that if he swallowed a nail he would shit a corkscrew".

Let's call that property mountBatten(). It's a relation between any number of nails of any sort and any number of corkscrews of any sort. It's obviously not a very pleasant property. But in politics it can be occasionally necessary, all hewn of crooked timber as we most unfortunately are, it has its place.

Not least, we expect our cabinet secretaries to possess it. They must have thousands of other properties as well but it must be the case that cabinectSecretary.mountBatten(). Otherwise they can't do the job and they're no use to us.

When Sir Jeremy Heywood sort of promises that we can all enjoy the imprecise benefits of open data while nevertheless retaining our anonymity, as he did the other day, as noted above, it must be clear to everyone that this is more at the corkscrew end of the body politic's digestive tract than the nail end.

You can forget anonymity if the open data initiative that we are promised for this month, May 2016, proceeds. Professor Ross Anderson says so. So does Professor Martyn Thomas. Professor Sir Nigel Shadbolt looks as though he may agree.

They're just professors, of course, what do they know, you may ask. But it's not just them. GDS also have warned about the risk posed to anonymity by open data:
Update, 29 March 2016: We are now able to publish a CSV file (663 kb) containing the data used for the web tool for 7 of the 9 demographic variables provided by the ONS omnibus survey. This is combined with our model's estimate of the individual's probability of being verified by certified companies over time. This is the maximum number of variables we could make public, whilst preserving the anonymity of respondents.

Updated 1.5.16 2

The Electoral Commission once engaged the Government Digital Service (GDS) to do some data-mining work. It didn't go well. It was a painful experience. It ended in failure. The Commission's July 2013 report on the exercise includes:
• There were considerable delays to the original timetable for establishing this pilot. A significant cause of the delays was the lack of capacity and resources within Cabinet Office (and the Government Digital Service (GDS), which is part of Cabinet Office) due to their workload related to the transition to IER ...

• For the national data mining, Cabinet Office’s original intention was that pilot areas should adopt a fairly standardised approach to checking the data received and contacting the individuals identified, to ensure that results were comparable. In practice, however, the nature and extent of follow up work varied widely.

• Much of this variation was caused by practical difficulties, for example the need to spend more time than expected in ensuring the accuracy of the data received. However, some of the variation could have been avoided if there had been fewer delays and a greater level of support provided by Cabinet Office to pilot areas. In particular, a few areas told us they felt unsupported and were unclear about what to do ...

• It is not possible to produce an overall figure for the cost of this pilot. This is because we do not have final costs for all pilot areas or any costs for Cabinet Office (including GDS), who conducted much of the work.

• We are also therefore unable to estimate the cost per new elector registered or the likely cost of any national rollout. Any estimates of these would need to include the cost of coordinating and managing the pilot (the role taken by Cabinet Office in this pilot), as any future work with data mining would require some form of central coordination ...

• The reasons that so many existing electors and ineligible individuals were returned on the data include poor data specifications from Cabinet Office ...

• Inconsistent address formatting and incomplete addresses are likely to have contributed to the significant numbers of existing electors returned in the data (Cabinet Office could not provide the data which would have allowed for a definitive assessment) ...

• In order to answer this question [Is data mining a cost effective way of registering new electors?], we would need to assess the cost benefit of data mining by, for example, calculating the cost per new elector registered. However, we are unable to do this as Cabinet Office could not provide details of their expenditure on the pilot. As they managed the process and conducted much of the matching and data processing, their costs could be significant and are crucial in reaching any realistic assessment of cost effectiveness ...

– The addresses appeared to be more complete than those held in other national databases but a poor data specification from Cabinet Office meant that the format was inconsistent ...

The findings from this pilot do not justify the national roll out of data mining ...

In addition, there were numerous issues in this pilot with the communication and support provided by Cabinet Office ...

Cabinet Office need to ensure that they maintain good communication between themselves, the data holding organisations and EROs [electoral registration officers] throughout the process, including after data from the national databases has been returned to EROs ...
It's a long time ago, of course, well before yesterday, but there is no evidence of GDS making any more successful trips into the world of data science.

Later that year, on 16 October 2013, Mike Bracken, who was chief executive of GDS at the time, gave a speech to the Code For America Summit. "The Efficiency and Reform Group have saved about £10 billion of Whitehall costs", he told delegates, and "this figure represents about 4% of the UK's gross domestic product".

No. £10 billion was about 0.6% of GDP at the time, not 4%. That sort of a mistake must bring tears to the eyes of the Office for National Statistics (ONS). Mr Bracken nevertheless became the government's chief data officer in March 2015.

He left GDS last September, 2015. It's not obvious that GDS have since developed any greater respect for numbers. They say that their forlorn identity management scheme, GOV.UK Verify (RIP), can only go live if the account creation success rate reaches a minimum of 90%. It's currently 70%. GDS want GOV.UK Verify (RIP) to go live anyway.

"In May we will be publishing the latest instalment of our next National Action Plan as part of the Open Government Partnership". That's what the Cabinet Secretary said the other day.

The ONS are in on that plan. So are the ODI, the Open Data Institute. And data.gov.uk ...

... and GDS. How did they get in there? Their inclusion can't be based on their record. It's not exactly an example of data science in action, is it.

The magic of open data #1

"Sharing information across government databases
will dramatically increase governmental powers –
otherwise the UK government wouldn't have proposed it."
Professor Sir Nigel Shadbolt, Chairman, Open Data Institute


Lough Erne in County Fermanagh, Northern Ireland, "is a particularly scenic waterway, renowned for its beautiful setting. The area is popular for angling and watersports, with waterskiing, Rowing and wakeboarding being amongst the most popular; the stretch of water alongside the Broadmeadow, Enniskillen, has hosted stages of the World Waterski Championships annually since 2005, and in 2007, a pro-wakeboard competition, 'Wakejam' was hosted by the Erne Wakeboard Club (EWC) after successful national wakeboard competitions in the previous years. Canoeing is also a popular recreational sport on the Erne".

That's what it says in Wikipedia and that's where, on 18 June 2013, after a hard day's fishing and wakeboarding, the G8 canoed back to shore and issued their famous Declaration (para.7):
We, the G8, agree that open data are an untapped resource with huge potential to encourage the building of stronger, more interconnected societies that better meet the needs of our citizens and allow innovation and prosperity to flourish.

Wednesday 27 August 2014

midata – still waving, still drowning

The following article was published in Digital by Default News (DbyDN) on 21 August 2014:
Initiative to explore how citizens can be empowered with their own data

Five organisations have come together to run a three-month feasibility study to explore how to empower citizens with their own data. The miData Studio initiative is a collaboration between Ctrl-Shift and Milton Keynes Council, the Cabinet Office, Open University and Connected Digital Economy Catapult.

The project aims to create an open, collaborative environment where citizens, the council and developers explore how empowering citizens with their own information can enable better services, better quality of life and efficiency in the delivery of public services.

The project will develop exemplar use cases that deliver benefit to the council and citizens and the local economy more generally.

The project will look for new ways for citizens to gain control of their information, exploring how they can give controlled access to trusted service providers for the services they want or need. It will also act as a pilot for the Cabinet Office’s identity assurance scheme in a local authority context.

This overarching project aim is to empower citizens with their own data in a way they can trust. The project will create a space for learning about working with citizens’ data, building a safe environment to try things out and study what works and what doesn’t work. Crucially the project aims to understand how to do this in such a way that individuals are in control of their data.
It was 3 November 2011 when Ed Davey first announced midata:
Today’s announcement marks the first time globally there has been such a Government-backed initiative to empower individuals with so much control over the use of their own data.
Little did we expect then that it would be the best part of three years before anyone started to "explore" how midata might work. But only now, if DbyDN are to be believed, is a "feasibility study" being launched.

In fact, not mentioned by DbyDN, Craig Belsham introduced us to the midata Innovation Lab (mIL) on 2 May 2013. Over the following few months mIL produced five deeply discouraging prototype apps.

Professor Sir Nigel Shadbolt gamely claimed that these five viruses apps would allow us to "get to the future more quickly" and Mr Belsham posted What we learnt from the midata Innovation Lab on 28 November 2013 but mIL has never been heard from again.

Now we have the "miData Studio" instead. And what is the planned output from their feasibility study? Working services? No. Just some "exemplar use cases" – the miData Studio could take even longer to get to the future than mIL.

There will be five "collaborators" in the miData Studio according to DbyDN – "Ctrl-Shift and Milton Keynes Council, the Cabinet Office, Open University and Connected Digital Economy Catapult".

Or should that be six? "The project aims to create an open, collaborative environment where citizens, the council and developers explore how empowering citizens with their own information can enable ...". It looks as though "citizens" also will need to be collaborators.

Or should it be 11? "The project ... will also act as a pilot for the Cabinet Office’s [non-existent] identity assurance scheme  in a local authority context". How can the studio deliver its exemplar use cases if the identity assurance scheme's five surviving "identity providers" aren't collaborating.

And however many collaborators there are, will the identity assurance scheme (RIP) prove any more successful in Milton Keynes than it did in Warwickshire?

It's all very well for DbyDN to say that the miData Studio will explore how citizens "can give controlled access [to their personal data] to trusted service providers" but how is anyone going to overcome Chris Chant's objection that trust is just not on the menu?

"Truth, not trust". That's Mr Chant's watchword. The pursuit of trust is a "doomed strategy".

Do any of the collaborators in the miData Studio have it in their gift to grant citizens control over their personal data? How? "Trust frameworks", as Ctrl-Shift tell us, are like unicorns. They don't exist. There's no way to enforce the rules. Control isn't on the menu any more than trust is. Or empowerment.

What are the prospective investors in the Cabinet Office's identity assurance scheme supposed to make of this project? They thought they were being invited to invest in a service that already exists.

It's only a 225-word article that DbyDN published but it raises a lot of questions.

----------

Updated 29.12.14

Still waving, Mydex published Nine ways the personal data store can transform public services on 23 December 2014. Their contention is that, when it comes to "local authorities and public sector organisations", Mydex:
1) Delivers massive cost savings
2) Increases data quality
3) Enables joined up services and streamlined customer journeys
4) Supports more personalised services
5) Enables citizens to get things done online
6) Reduces risk and ensures compliance
7) Builds trust
8) Supports operations such as identity assurance
9) Saves time, offers convenience and increases satisfaction
Really?

These may well be some of the presents local authorities and public sector organisations would ask Father Christmas for. But is Mydex Father Christmas? Are these presents in Mydex's gift? Who believes that? Why?

And who believes Mydex's claim at the bottom of the page? Remember Sony:
Mydex provides the individual with a hyper-secure storage area to enable them to manage their personal data, including text, numbers, images, video, certificates and sound. No-one but the individual can access or see the data.

Updated 30.12.14

Wikipedia:
Walter Mitty is a fictional character in James Thurber's short story "The Secret Life of Walter Mitty", first published in The New Yorker on March 18, 1939, and in book form in My World and Welcome to It in 1942. Thurber loosely based the character on his friend, Walter Mithoff. It was made into a film in 1947 ...

Mitty is a meek, mild man with a vivid fantasy life: in a few dozen paragraphs he imagines himself a wartime pilot, an emergency-room surgeon, and a devil-may-care killer. The character's name has come into more general use to refer to an ineffectual dreamer, appearing in several dictionaries. The American Heritage Dictionary defines a Walter Mitty as "an ordinary, often ineffectual person who indulges in fantastic daydreams of personal triumphs". The most famous of Thurber's inept male protagonists ...
ElReg:
European data law: UK.gov TRASHES 'unambiguous consent' plans

The UK government has raised objections to current EU proposals that would require businesses seeking to rely on "consent" as the lawful basis for processing personal data to ensure that that consent has been unambiguously given "for one or more specific purposes".

It said those proposals are "unjustified" and called on EU law makers to instead turn to the definition of consent under existing EU data protection rules instead for setting the legal standard businesses would need to achieve for consent under the draft new General Data Protection Regulation ...
The ElReg article is written by Out-Law.com, an outlet of the firm of lawyers Pinsent Masons, who follow this sort of thing and provide expert commentary.

In brief, the EU's 1995 Data Protection Directive is due to be replaced with a much-debated General Data Protection Regulation:
  • Should consent for your personal data to be processed be given unambiguously or is that unjustified as the UK government apparently argue? Is it adequate for that consent to be unambiguous or should it be explicit? Under what conditions can data be processed without consent? Is it lawful to create profiles of individuals from their personal data? How can you be said to freely give your informed consent if you actually have no alternative?
  • Assuming the 28 members can agree the answers to these questions, and about 3,000 more, how should they set about enforcing the regulation within the EU? And what about the rest of the world – what do the EU do if Russia, say, pays not a blind bit of notice?
As ElReg/Out-Law.com/Pinsent Masons say:
The European Parliament agreed on its version of the Regulation earlier this year and is waiting for the Council to reach its own consensus on the reforms before trialogue discussions on a final version of the text, which would also involve the European Commission, can be opened.
It's a trialogue (?) between the European Council of Ministers, the European Parliament and the European Commission.

That excludes other people.

DMossEsq, for example.

If DMossEsq offers you total control over your personal data, you can safely ignore the offer as having been made by some sad Walter Mittyish character subject to delusions of grandeur.

As it happens, DMossEsq is making no such offer. He recognises that it's not in his gift. But there are other people out there with a "vivid fantasy life". Remember – the power lies with the EU, and not with Walter Mitty.

midata – still waving, still drowning

The following article was published in Digital by Default News (DbyDN) on 21 August 2014:
Initiative to explore how citizens can be empowered with their own data

Five organisations have come together to run a three-month feasibility study to explore how to empower citizens with their own data. The miData Studio initiative is a collaboration between Ctrl-Shift and Milton Keynes Council, the Cabinet Office, Open University and Connected Digital Economy Catapult.

The project aims to create an open, collaborative environment where citizens, the council and developers explore how empowering citizens with their own information can enable better services, better quality of life and efficiency in the delivery of public services.

The project will develop exemplar use cases that deliver benefit to the council and citizens and the local economy more generally.

The project will look for new ways for citizens to gain control of their information, exploring how they can give controlled access to trusted service providers for the services they want or need. It will also act as a pilot for the Cabinet Office’s identity assurance scheme in a local authority context.

This overarching project aim is to empower citizens with their own data in a way they can trust. The project will create a space for learning about working with citizens’ data, building a safe environment to try things out and study what works and what doesn’t work. Crucially the project aims to understand how to do this in such a way that individuals are in control of their data.
It was 3 November 2011 when Ed Davey first announced midata:
Today’s announcement marks the first time globally there has been such a Government-backed initiative to empower individuals with so much control over the use of their own data.
Little did we expect then that it would be the best part of three years before anyone started to "explore" how midata might work. But only now, if DbyDN are to be believed, is a "feasibility study" being launched.

Saturday 23 August 2014

RIP IDA – gander rejects goose's sauce

No need to say it, it goes without saying, it should be obvious to all but, just in case it isn't obvious to all, IDA is dead.

IDA is the Cabinet Office Identity Assurance programme. And it's dead.

----------

There are 23 problems with UK government IT, Chris Chant told us, and they could all be solved by the adoption of cloud computing, he said.

You may or may not agree but the Government Digital Service (GDS) certainly do. They're all for cloud computing. Like all go-ahead people.

GDS have been responsible for the CloudStore for just over a year now. It's been a patchy service, admittedly, but central and local government departments were enjoined to buy all their IT requirements there. Or from the Digital Services framework, a rival website that suddenly appeared, or from the Digital Marketplace, which is due to replace the CloudStore at the end of next month.

"Help test the Digital Marketplace alpha - your comments will be used to design the beta version of the Digital Marketplace", said GDS. So someone did. You can, too. Just nip in to the beta version, enter "identity" in the Show services box, and look what you get – 518 hits.

That's 518 identity-related services available to any users of the Digital Marketplace. No need to reinvent the wheel, someone else has already done the hard work, just buy the components you need and assemble them into the identity assurance service you need. It's quick, it's cheap and it's open.

That's the spirit of cloud first. Don't pretend that government is different from other IT organisations. Don't waste years developing your own solutions. Take advantage of the products and services that already exist. All 518 of them, in this case.

That's what GDS say.

Except that, although that's good enough for everyone else, it won't do for GDS and their identity assurance service. Oh no.

No, they're different, they need to write their own identity hub. Because of course there aren't any available off the shelf. And they need to pay five "identity providers" to develop bespoke dialogues to create on-line digital identities as though no-one's ever done that before.

23 well-known mistakes to choose from, they're trying to make them all, with the predictable result that IDA is years late and probably over budget ...

... but we don't know that because the Major Projects Authority ignore the development of an identity assurance system for 60 million Brits and don't report on it, not major enough, ...

... the whole project is shrouded in secrecy by GDS, an organisation which claims to promote openness: "As our design principles say, if we make things open, we make things better".


What would Chris Chant say?

Oddly enough, we know the answer. He says it's a waste of time. The "trust framework" on which IDA relies cannot be achieved. That's the 24th problem. "Truth, not trust", he says. You'll never achieve trust. It's a "doomed strategy". RIP.

----------

Updated 24.6.15

Government as a Surveillance Platform (GaaSP)

In the ten months since the post above was published IDA has made little progress:
  • Its name has been changed to "GOV.UK Verify (RIP)".
  • "Identity providers" have become "certified companies".
  • The word "registration" and its cognates have been lopped off IDA's vocabulary – now, people "have their identity verified for the first time", they no longer "register" with GOV.UK Verify (RIP).
  • Ditto the word "secure" and its cognates. GDS now offer "safety", not "security".
In particular, nothing was heard of GDS's identity hub – that part of GOV.UK Verify (RIP) which securely safely connects government departments and "identity providers" together with us proles.

Nothing, that is, until the other day when The Register magazine ("ElReg", to its friends) spotted an article by four academics,  Toward Mending Two Nation-Scale Brokered Identification Systems.

As most sentient beings will know, the academics first define several properties which it is desirable for an identity hub to possess and then demonstrate that GDS's identity hub doesn't. They conclude that as it stands the hub is not secure, it does not protect our privacy, it could provide the platform for mass surveillance and it "conflicts with the political sensitivities that arguably lead to the rejection of identity cards".

Unlike most of us, ElReg have actually talked to one of the academics, Mr George Danezis, and they quote him as follows: "This is a field where a number of solutions already exist ... maybe it was a case of 'not done here' syndrome". Or as we might say, it's alright for the dumb geese to go out and buy a hub off the shelf, but we ganders need our own special one.


RIP IDA – gander rejects goose's sauce

No need to say it, it goes without saying, it should be obvious to all but, just in case it isn't obvious to all, IDA is dead.

IDA is the Cabinet Office Identity Assurance programme. And it's dead.

----------

There are 23 problems with UK government IT, Chris Chant told us, and they could all be solved by the adoption of cloud computing, he said.

You may or may not agree but the Government Digital Service (GDS) certainly do. They're all for cloud computing. Like all go-ahead people.