Clubscan - Identity Theft Waiting to Happen?
by matt @ 7:46 pm. Blogged under Music, Living and Dying, Thinking, Eating and Drinking
On Saturday evening Suzie_Q and I went for drinks in Crawley to celebrate my cousin’s belated birthday, our destination was the Rat and Parrot pub. We’ve been there before, it’s a bit on the rough side with clientele that probably wouldn’t look out of place at ‘The Jockey’ in TV’s Shameless; it lacks character, the staff seem to deliberately ignore you at the bar and it would be very easy to inadvertently get into a fight. When we arrived at the Rat and Parrot the doormen were checking ID, when we presented them with our driving licenses both sides were scanned into a laptop. “What’s that for?” I asked the bouncer, to which he replied in a deep voice “So if there’s any trouble we can find out”, “Where’s the data stored?” I asked… “Oh it’s just for Crawley you know, to check nobody has been banned.” I was slightly disconcerted by the fact my ID had been scanned and stored without my permission by somebody who didn’t seem to fully understand why.
Once inside the Rat and Parrot, I asked several of our fellow drinkers (Constabulary types) if they knew of the scanning scheme… they didn’t - which made me even more nervous for several reasons. Firstly, who gave the Rat and Parrot permission to scan my ID and where was the opt-out clause? When I build websites I have to legally ask people to opt-in to marketing lists etc. not expect them to opt-out. If outside I’d asked to opt-out would the bouncer have said “Sure no problem” or “OK well you ain’t coming in then”? I suspect the latter. Is that in itself a breach of my human rights?
Now that my personal privacy has been breached under the Data Protection Act 1998, how secure is my information? A laptop outside a Pub on a Saturday night doesn’t seem too secure to me, how many staff across Crawley can access this data - and who checks on them? At a time when identity theft is on the increase who’s to say the data won’t be sent to scammers in Nigeria? What stops Abdul the bouncer from phoning his burglar contacts to tell them which houses are empty that evening? Furthermore, as I myself was able to take photo after photo of each person’s ‘onscreen’ data from inside the door of the pub, who stops me from using that data for illegal purposes?
Once home from our evening of drinking, throughout most of which I’d insisted over Bulleit and Cokes that this illegal data gathering was one step away from a police state, I looked up ‘Clubscan’ (That’s ‘Club Scan’ not ‘Clubs Can’… although it would seem that yes indeed they CAN). Unsurprisingly this technology comes from the USA, and it’s being sold to pubs, supermarkets and police forces with the following benefits:
- Reads 223 different ID formats in under 2 seconds
- Immediately alerts to under-age and banned customers
- Share your banned customers with other venues automatically
- Complete police and local authority co-operation
- Builds an accurate and precise database
- Creates SIA doorman nightly report
- Photo gallery of customers
- Graphic demographic reports
- Average age
- Male female ratios
- 700 + scans per hour will not hold up your queue
- Amazing marketing tool
- Automatically produces Avery address labels
- Saves money and your license
- Customer frequency report
So it’s quite obvious that this isn’t just a ‘Crawley pubs thing’ but a database which could potentially be linked across the country or world for marketing and other purposes. Whilst is it may enable bouncers to ban troublemakers, I’m not sure I want Avery labels and CD ROMs being burned containing my personal information. According to the Clubscan website the Rat and Parrot has to be registered with the Information Commissioner when processing personal information ‘there are certain principles and conditions and you should read the Fact Sheet that can be read here’ (’here’ links from their website to a 404 page - how convenient).
They also recommend that users of Clubscan have a sign located alongside their license certificates along the lines of:
You may be required to provide ID as a condition of entry. By providing your information voluntarily you agree that your information may be used for marketing purposes and that it could be used in cooperation with the Police and other authorities. Should you wish to not receive marketing information please contact a manager to opt-out.
So I will be doing four things:
1) Writing to the Rat and Parrot asking for a copy of their ICO license information.
2) Pointing out that they have no sign up (or displayed license details).
3) Asking for any information that they hold on me to be provided to me under the Freedom of Information Act (and subsequently destroyed).
4) Asking for details of how the Rat and Parrot are securing the data of so many individuals.
Some of you may be thinking that I’m making a fuss about nothing, after all this is making a night out more trouble free isn’t it? I also have a blog, and that in itself reveals a lot about me. However, I choose what I want to make public, and this Clubscan non opt-out ID scanning scheme is taking us where exactly? Before you know it we’ll all be fitted with microchips at birth and be living in a Minority Report civilisation.
Sign the Petition to the Prime Minister Here:
http://petitions.pm.gov.uk/banclubscan/
Technorati Tags: rat and parrot, crawley, identity theft, clubscan, ID, minority report, bouncers, underage drinking
Loading ...
February 18th, 2007 at 10:15 pm
I wonder if they hold what drink you have on their database…?
February 19th, 2007 at 3:37 am
Are the Privacy and Security of Millions of American Cruise Vacation Customers at Risk?
http://safecruise.blogspot.com/
What kind of security procedures and privacy rights exist for customers concerning the vast amount of personal data gathered and catalogued by the cruise line and other travel companies. They not only have our Social Security numbers, credit card numbers, phone and address info but they have our spending, eating, gambling, and shopping habits as well as medical information they ask for or obtain during incidents. They also have names and phone numbers of our relatives and friends used for emergency contacts. Most worrisome of all is all of the photos and videos they have of us from the ship and sail cards and surveillance videos. Can those images be converted to face scans? Evidently they can according to this New York Times article: http://snipurl.com/1arri
February 17, 2007 By ADAM LIPTAK
February 19th, 2007 at 9:34 am
Whilst this helps with security I think this is completely outrageous and I would think twice about going in a club that uses this system. Who knows really just where all this information goes and what it is used for? Every detail of our private lives is now tracked. We are living in a database state it’s really quite alarming.
I used to think how far fetched some of the ideas were in ‘The Prisoner’, one of my favourite TV series in the 60’s, but now I am not so sure…….
February 20th, 2007 at 1:28 pm
I think the same thing about Oyster cards.
February 20th, 2007 at 1:40 pm
Yes I hadn’t thought about those, less risk of identity theft as I don’t think you have to give copies of passports or driving licenses. However, they obviously know which stations you’re at and when your house is empty too.
February 20th, 2007 at 3:39 pm
What happens if you don’t have a drivers license or passport? do you not get in?
March 7th, 2007 at 11:04 pm
I finally got my petition approved aginst this ‘identity scanning scheme’ please sign it at http://petitions.pm.gov.uk/banclubscan/
March 12th, 2007 at 7:37 pm
There’s a club in my area which has a system where ‘clubbers’ not only supply a whole raft of personal details, but also a fingerprint, all of which are entered into a database. Then when they wish to gain access to the club they put their hand on a ‘reader’ operated by the door staff.
It was ’sold’ to them as a way of ‘protecting their identity from somebody who might try to get into the club by pretending to be them’!
March 12th, 2007 at 10:17 pm
I had to laugh when I saw a google ad against your blog as follows:
ID Card Scanner
Complete system to collect data from ID, driver’s license, passport
April 10th, 2007 at 8:00 pm
I AM EMPLOYED AT THE PUB IN QUESTION AND THIS SCHEME WAS NOT SET UP BY US IT WAS SUPPLIED BY THE POLICE IN THE TOWN I PERSONALY FOUND STOPED FIGHTS AND PROTECTED MY STAFF AS FOR A BREACH OF YOUR HUMAN RIGHTS WELL LETS ALL JUMP ON THAT BAND WAGON!! IF YOU HAD BOTHERED TO ASK A SENIOR MEMBER OF STAFF WE WOULD HAVE EXPLAINED THE SYSTEM IT IS NOT LINKED TO OTHERS NOR DID IT PRINT NIGHTLY REPORTS ALL VISITORS WERE DELETED AT THE END OF THE NIGHT APPART FROM ANY THAT WERE BANNED AND THE POLICE WERE CALLED TO DEAL WITH THEM IM SORRY IF THIS SCHEME HAS OFFENDED YOU BUT IF SOMEONE ASSAULTED YOU ON THE PREMISES WOULDN’T YOU WANT ALL THE HELP YOU COULD GET TO HAVE THEM CONVICTED?
April 12th, 2007 at 2:04 pm
Hi Josie, I’m very shocked to hear that it is Sussex Police Force that is recommending pubs use Clubscan without offering any training or legal advice on the data protection act - they should have provided signs and adequate training. Unfortunately the information I quoted above was given to me by the doormen, and had I asked for a senior member of staff I doubt very much I would have got into the pub at all. I got the distinct impression the doormen concerned didn’t like my questions already, they were none to helpful / knowledgeable. At the bar I actually waited 25 minutes to get served but was repeatedly ignored and gave up buying a drink so couldn’t have got hold of a senior member of staff there either.
I worked in a nightclub myself for several years and I understand the need for safety of punters and staff, however, we always managed to know the faces and the names whenever any trouble broke out – nobody ever got away with a serious assault anonymously. One could argue that armed bouncers would also help aid in protection… but that wouldn’t be any more legal than an inappropriate invasion of privacy using Clubscan. Finally I would say that if things are that bad at the Rat and Parrott they should just knock it down, that’s what happened to the club I worked at which became notorious for trouble.
July 25th, 2007 at 9:27 am
Traveling into London today and noticed somthing related to this on the front page of the metro. more details here: http://www.metro.co.uk/news/article.html?in_article_id=58738&in_page_id=34
July 25th, 2007 at 5:21 pm
I just would like to say that you have preached on about Data Protection law which you clearly have no understanding of… You too are a hypocrite as you have Breached copyright laws as you have copied there website.
I use clubscan and it wa brought in to protect People who just want to have a hassel free drink. Whats annoying is when someone like you preaches about human rights and that … What about aour human rights… When you go to airport your passport is scanned whats to stop airline employees stealing data. Tesco’s have More infomation on there customers than the Goverment can…… i agree with Josie 100% if anyone wants to no all pubs and clubs have Data Licenses as we all have CCTV… We can buy Data just as easily… Do you not think its better that we use relevent data which is more complient with the Data protection act…..
July 25th, 2007 at 6:02 pm
I fail to see how you are backing up the statement that I have no understanding of the data protection act Riaz? I would have less objection to the principles of Clubscan to protect bar staff if the UK government pass a law making it a legal requirement and implement a centralised secure system with rules controlling the handling of data. People who work in airlines are very closely monitored, people who work in bars are not. I’ve said everything I think on the matter already here anyway. As for my snapshot of the website being a breach of copyright, the same could be said of Google image search, if Clubscan object to my use of images I shall remove them.
July 26th, 2007 at 1:25 am
As a 22 year old woman in London, who always goes out clubbing at weekends in London I would just like to say i feel mush safer going into the venues that use clubscan. I know my favourite hang out has improved no ends as it keeps away the trouble makers, the drug dealers, people with weapons. But in agreement with Josie on this thread, which noone else seems to have responded too, if you were assulted in the venue, wouldn’t you like to feel secure knowing this person can be identified?
Also Matt, if the nightclub you worked at was so great thata ll the faces were known why did the place get closed down?
But at the end of the day, your not forced to hand over your ID, and you don’t have to drink in that venue.
Afterall, whats to stop the doormen remembering my details when they look at my id and passing this information on? there is no more information than whats in the phone book…I fail to understand all of the fuss?
July 26th, 2007 at 10:14 am
How can you say Bar staff are not monitered…. We are the bost monitered Buissness we are constantly under scrunity to ensure that we are in line with legislation. All the infomation that you go on a bout is available on Google and the elctrole register. I know that you live in whitepost hill in redhill just through searching on google…. Work that one out there is even picture of you with some girl… ????? IDSCAN is the way forward it helps with immigration why don’t you come to my club and allow me to educate you on this system……………..
July 26th, 2007 at 10:58 am
That was many years ago actually Riaz when I ran a business from that address, so you won’t find me there, but I take your point. As I said though, I divulge what I want to myself, that’s my choice, otherwise I wouldn’t run a blog. Also in answer to Annie’s comment I am glad she feels safer. I don’t object to a system of monitoring on safety grounds, I do however object to a system run by any old pub or club on a laptop by untrained and uneducated staff (which was my own experience).
July 26th, 2007 at 12:21 pm
Ok I see what your saying,,,, Under the Licensing Act 2003 all Managers and SIA Door security (Which is Cumpolsary )are CRB checked.. Police and many other goverment authorties carry regular checks on us… I have had meetings with senior Police Officers who have dis-closed infomation to me on all my staff, I know who I am employing and their background. we are well monitered…. Also data is only accesable to me the DPS to access it i need a special Encryption key and a password. My key can’t be used on any system but mine, their is a seprate user password which is different to mine. For £5 I can access the electrol register and get all your info and for £7 I can go through and get a full credit search.
I am also the Data Controller who is Authorised to hold this Data…. I can by exactly the same data from A company I today asked for 5000 names and addresses from Surrey aged 21 in August they sold me this data before IDSCAN people were more upset by this…. All our Data is relevent and is not shared with a third party except for the purpose of Crime Prevention. Police then have to abide by the Police and Criminal Evidence Act which only allows relevnt infomation to be seized….. Have I changed your opinion yet….. Think about all the Terrorisim. I had a female who was raped in another town 4 months later she was at club and spotted him she kept quite and called police later… By then he had left the club… Through IDSCAN she pointed him out and he was later convicted… I am sure if you spoke with her I am sure she would have a very differant opinion…. you see……….
July 26th, 2007 at 1:00 pm
Well Riaz, this reminds me a little of the animal testing debate on TV this week with positive arguments on both sides! It certainly sounds like you are using Clubscan in a professional and responsible way, I am not entirely sure everybody is though - in my own particular experience the doormen knew very little about why they were scanning ID, they did so without asking for permission, there were no signs up about what it was for, and I could see the laptop screen from inside the pub - showing me each punter’s details. Among my drinking party that evening were two members of Surrey Police and a Met Officer and they didn’t know anything about it - hence I was concerned… but you have made me feel a lot happier yes.
July 26th, 2007 at 1:32 pm
Was your friend a Licensing Police Officer as this is where the supporty has come from. That and Violent Crime Reduction Unit that has fully supported the use of this system. It seems that maybe you should speak with the venue Managers or owners about the the manner in which their security behave this has no bearings on the system but rather the bad practice of that venue… Maybe you should discuss this with thier head office…. But i thank you for this open disccusion as the education of what us managers are faced with is now becoming more public… If only you could see the stress of what we have to deal with every day as a result of this legislation and codes of practice… It is a constant battle to make sure our businesses survive. We are constantly facing challenges and problems from people who can’t comprehend that there sillt arguments and fights, drug use and public order drags us up infront of inspectors asking us to explain why we had a drunk person or a fight at our venue…Thats why we have CCTV, IDSCAN, Door Security and Search Policys… We even have to let the Police know how you are all getting home after your night out…. Thats why we need statical reports from IDSCAN system so we can give truthful accurate infomation to Police.
It is vital to Public Safety…
July 31st, 2007 at 9:24 am
ALso the Data Protection act states that you must not mis-use Data it must not be supplied to a third party with out prior consent. We adhere to this…..
August 10th, 2007 at 12:24 pm
Have you heard that the infomation commisionar (a goverment bodie) has given it there seal of approval
September 14th, 2007 at 1:06 am
Hi
I am from Australia and very interested in this debate. Let me declare that I am an academic who is currently researching the use of ID scanners.
We had a recent survey where it was found that only 18% of people found it acceptable to have their ID scanned in a licensed venue. Is there any similar data from the UK?
Any other comments or suggestions for other locations where ID scanners are being debated would be much appreciated
Thanks
Darren
September 14th, 2007 at 3:02 pm
Hi Darren, I don’t think anybody has done any surveys on ID scanning acceptability here… but this government don’t seem too bothered what people think anyway - several million of us marched against the Iraq war in London a few years ago and that had no effect on policy whatsoever
October 2nd, 2007 at 7:57 pm
I simply don’t carry any ID to nightclubs. Clubscan IMHO belong in court, but that may have to wait until the UK government is itself hauled into the EU court because our data protection laws are farcical and the EU is going to force them to be changed.
Its used in Swansea at Sin City and I’m not very convinced they have their data protection compliance sorted.
Easiest approach is to pointedly boycott such clubs and also file a DP request with them so you get all your data, info on its use etc. At the very least it causes them pain and suffering processing it. Email bands and ask them not to play at such clubs too - many bands are quite anti the database state.
(BTW You can ask for the video footage too if you were recorded but thats probably only relevant for an assault or other nastiness I pray nobody ever goes through)
And please: get involved in www.no2id.org
November 16th, 2007 at 10:20 am
I thought it was interesting that this week the government admitted that illegal immigrants had been employed as security staff… only adding more to concerns about letting people scan our IDs.
November 16th, 2007 at 2:40 pm
They have added more features onto clubscan including audit trails and software that locks out people from system
When you go to the Gym, Libary, Tescos, Boots, u use your credit card oyster card
They all know more
Yet you don’t oppose those.
I can get more info from you on google and the electrol register
I can get more info from other agencies which have to supply infomation under freedom of infomation act
And you can make DP requests from my club but will cost you £20.00 + VAT for CCTV and £10.00 +VAT for IDSCAN and Marketing DB nad TEXT CRM
November 18th, 2007 at 10:23 pm
Hi Matt
Thanks for the reply.
The Australian Government has just proposed an ID scanning system for all gambling venues, supposedly as a measure to deal with problem gamblers (we go to the polls on Saturday and teh government is behind). But everyone will be covered, and these venues are often major entertainment centres where gambling is only part of what is offered.
This will possibly be one of the biggest ID checking systems outside airports/customs.
December 8th, 2007 at 7:35 am
http://news.aol.co.uk/bank-details-on-stolen-laptop/article/20071207142609990001
Further illustrates how dangerous is is to have personal data stored, especially on lap tops.