The 2016 Australian Census will not be anonymous, and a lot of people aren't happy about that. A group of Australian privacy advocates, including a professor of computer science and a former NSW deputy privacy commissioner, are raising concerns, and some are encouraging Australians to avoid the Census, refuse to fill it out, or to use civil disobedience -- like listing their religion as "Jedi Knight" -- to skew the accuracy of results.
Note: this story was originally published on 23 March - Rae
In December 2015, in a move that mostly went unnoticed, the Australian Bureau of Statistics said that it would keep the name and address of every person in Australia, with the collection of that data effectively starting with this year's Census. That data will ostensibly be used to "provide insight" into things like what jobs Australians have after reaching high school, university or further levels of education, and linked to citizens' electronic health records to build an eerily complete digital picture of the country's population.
This data will be individually identifiable, too. The addition of name and address data, previously destroyed after traditionally demographically valuable Census data (like age, sex, marital status, income, occupation, religious affiliation and education) was transcribed and stored in aggregate, means that Census staff will have access to the deepest possible trove of data on individual Australians. While the Australian Bureau of Statistics says that it will never release this data, that does not protect it from the possibility of data breaches that have affected Australian government and private companies in the past.
Former NSW deputy privacy commissioner Anna Johnston, director of consultancy Salinger Privacy, has called the proposal "the most significant and intrusive collection of identifiable data about you, me, and every other Australian, that has ever been attempted." Johnston, who was chair of the Australian Privacy Foundation of 2005-06 and who advised the Australian Law Reform Commission's Inquiry into the Invasion of Privacy, says that the only way to avoid the possibility of data breach and of other inherent dangers like function creep -- where more government agencies use the data than originally intended, as has been seen with Australia's data retention scheme -- is to not retain the data in the first place.
Roger Clarke, founder of IT security and privacy consultancy Xamax, says that while Australians more generally believe that a Census is a good idea, and that only a minority object to the intensity of the personalised data collection and the mandatory nature of the project, "many more" are concerned about the imminent mass collection of personally identifiable data, and the fact that that the data will be kept and remain identifiable forever. This year's Census data will be linked to previous Censuses, too.
Previously in the 2006 and 2011 Census, only 5 per cent of the population had this full name and address data captured, as a compromise for the Australian Bureau of Statistics' previous attempt in 2006 to include this data in long-term Census information storage. Other data, too will be "expropriated from other sources" and added to individual citizens' records, according to Clarke. Individual data -- although "nominally... de-identified" -- will be shared with researchers, with "anonymised" names attached.
In previous years, the Australian Bureau of Statistics had gained a laudable reputation as a highly trustworthy agency that quickly and effectively de-identified the data that it collected. In a survey conducted by ABS in the late '90s, 89 per cent of Australians said that Census forms should be destroyed to protect privacy, and almost half of respondents said they were less likely to complete a census where data was kept. "The... changes proposed for the 2016 Census would completely destroy the trust that the public once had in the ABS", says Clarke, who is pushing for a "proper" Privacy Impact Assessment.
Clarke has published a list of "what concerned people are doing" -- and what concerned citizens can do on Census night -- to avoid their personally identifiable data being captured and catalogued by government. This civil disobedience may attract fines, and Clarke (and Gizmodo) neither encourage nor discourage its use, but these examples -- including the classic "Jedi Knight" approach of 2001 -- have been effectively used by Australians conscientious objectors in the past. Roger Clarke writes:
People have adopted a number of approaches in previous Census years in order to avoid their personal data being captured during the Census and subsequently abused. These approaches are neither encouraged nor discouraged. (It could be unwise for anyone to actively encourage their use, because that might be interpreted as an incitement to break the law). The following information is published, and recommended for re-publication, so that people are informed about the situation.
- Avoid being resident in any household on the Census date, Tuesday 9 August 2016 The Census is based on the premises, not the person, and hence if you aren't resident you shouldn't be recorded. (It appears that 'grey nomads' have had success with this "gone fishin'" approach)
- If others in the household are submitting a return, instruct them to leave you off it (This may cause ructions within a family, but may be entirely appropriate in a shared house or flat. The wording of the Act leaves open whether the ABS may still have the power to prosecute the objector)
- Get an envelope and a form, and send a blank form in (This will very likely result in successive re-visits from the collector, followed by threatening letters from the ABS. But if enough people were to do it, the volume would be such that the ABS would not have enough resources to follow everyone up)
- Avoid being at home when the Collector calls (This will require great persistence, because Collectors and their supervisors are paid to chase, chase, and chase again)
- Be absent or too busy Whenever the ABS's contractor calls or arrives, some people make themselves absent or say that they're too busy, and avoid appointments. (This requires great persistence, because collectors and their supervisors are paid to chase, chase, and chase again. Eventually they may run out of time, although they have the option to argue to the magistrate that your continual busyness constitutes refusal to answer)
- Ask lots of questions These may be about, for example, the process, the questions, the privacy protections, or the security of the data. This may be accompanied by saying or implying that you may be prepared to provide the data once you have satisfactory answers. (Based on experience, the ABS is likely to reply slowly, and with pre-written, carefully-composed and vague text that does not answer your questions. It's commonly necessary to ask the questions again, and address letters further up the organisation. It's necessary to sustain your patience over many months until one side or the other gives up)
- Provide made-up answers to the particular questions that are of greatest concern (This is not appropriate for people who do not like to be forced to lie in order to protect their privacy. Moreover, if the intention is to avoid prosecution, the lies need to be subtle enough that the ABS believes them, or considers them too difficult to prove to be lies. On the other hand, because ABS is handling 5-10 million forms, it may be impractical for them to check even for silly answers, let alone for plausible but incorrect answers)
- Refuse to provide answers to the particular questions that are of greatest concern (It is likely that this will not be possible with the online form, so it would be necessary to demand a paper one. This approach appears less likely to lead to prosecution, and it seems likely that the magistrate would be both less likely to convict, and less likely to levy a significant fine)
- Refuse to fill in the form (The ABS has the power to prosecute under Census and Statistics Act ss. 14-15, and to seek fines that the magistrate could choose to apply once, or for every day that the data is not provided. Some prosecutions do take place. In practice, only a very small proportion of the people who have failed to provide the data have ever been charged, and no report has been seen of any large fine being imposed)