Léim ar aghaidh chuig an bpríomhábhar
Gnáthamharc

Departmental Records

Dáil Éireann Debate, Thursday - 3 May 2018

Thursday, 3 May 2018

Ceisteanna (5)

Catherine Murphy

Ceist:

5. Deputy Catherine Murphy asked the Minister for Employment Affairs and Social Protection the way in which a process to migrate up to 4 million biographic and face biometric records from the legacy system database to a new solution will be carried out as per a request for tenders of 20 April 2018 for the supply of facial image matching software by her Department; if her Department collects facial recognition data; and if she will make a statement on the matter. [19484/18]

Amharc ar fhreagra

Freagraí ó Béal (6 píosaí cainte)

This question relates to the tender process for biometric facial imaging systems. The tenders were requested up to 20 April so the Minister will have received them. What I am trying to find out, and I received replies earlier in the week which were disappointing and did not address that issue, is why the Department would seek tenders for that. I am confused about whether the Department is using facial imaging. The Minister might tell me about the current situation and what this tender is intended to do.

The use of facial matching technology has been employed by my Department for a number of years. What is proposed in this competitive tender process is a continuation and upgrade of this existing technology and related processes. It is important to note that the Department does not ask for or collect biometric data from its customers such as fingerprints, retinal scans or any other items that could be listed as biometric data. Neither does it use advanced facial mapping cameras when taking the photo as part of the SAFE 2 registration process. The digital photograph taken during the SAFE registration process is simply matched and stored. The software compares photographs by converting the image into an arithmetic template based on facial characteristics. My understanding is that the distance between someone's nose and eyes or the freckle on their left cheek are made into an algorithm and a template based on their facial characteristics.

The database mentioned in the tender refers to a dedicated facial matching server, which is hosted in a secure site within the Department. Facial templates are loaded to a dedicated facial matcher server. Any migration undertaken will be done within this framework and will apply the relevant conventions related to data security.

As with all technology, and this answers the question about why we are making a change now, this software type has been upgraded considerably since the original procurement years ago with the latest versions having improved capability, accuracy and speed. The upgraded new software will simply replace the existing software, including the existing arithmetic templates. While 3.25 million Irish people have been issued with public services cards, an indicative figure of up to 4 million records was used in the request for tender to allow any prospective tenderer to plan for this exercise should the need for the required cards increase over time. I hope this clarifies the matter for the Deputy.

The Department is moving to biometric data in terms of facial imaging. Will the Minister outline whether the Department will be seeking permission for the approximately 100,000 people whose photographs it has? Will they be used to test the new system? Is the Department migrating those into the new system? Does that have implications in terms of data protection legislation? In August 2017, the Minister tweeted that the Department does not collect facial recognition data. It collects photographs. Is it intended to migrate those photographs to this new system? What is this tender really about in the longer term? If I was going to tender for this, I would specifically try to tick off the things for which the Minister is looking. What is she looking for? If I was going to tender for this, what would I be tendering for and what will the Department use it for? The Minister said it will be held in a secure site. Will it be shared with any other Department? Can we have confidence that this would be the case into the future?

I suppose it is a case of be careful what you tweet because it comes back to haunt you. The tweet still stands. We do not collect biometric data. We collect and store photographs. If someone has a public services card, they come in and get their photograph taken, we store that photograph and it gets put on the person's card. It is as benign as that. The facial recognition technology we currently employ and have been using for years has been enhanced considerably, as technology has been enhanced during the six years since we bought it. Most versions in existence today have much improved matching capability, accuracy and speed compared to the software we currently use. We are not changing the process we use or the legislation governing that process. All we are doing is upgrading the software we use in the SAFE 2 registration process. The main objective of this procurement is to upgrade the algorithm we employ and to ensure that when a public services card needs to be renewed or replaced, it can be undertaken securely to prevent any error in the allocation. A further and important by-product of its ability is to detect any instances of potential identity or suspected social welfare fraud. Literally, that is all this tender is. It is just about upgrading the software we currently use, which is six years old.

Could the Minister define SAFE 2? When the Department buys this new software, in ten years' time and if all 4 million records are kept, what format will they be kept in?

It will be exactly the same as it is today. When someone got their photograph taken a number of years ago, that photograph was stored on a secure data server. If someone gets their photograph taken next Tuesday, we will keep the photograph in the same secure server in the same format we have always used. What we are tendering for is the software that drives the algorithm, which is the facial mapping recognition programme we use. We are all probably aware that we are not considering a photograph as biometric data. It is just a photograph. The software for which we are tendering is an upgrade of the software we currently use, which produces an algorithm of a person's face that we then use to see if we can match that person's photograph with the photographs we store for all of the other 3.2 million people who have applied for a public services card. That is the only thing for which we are tendering. The SAFE 2 registration process that is governed by legislation since 2012 has not changed and will not change. The only thing we are proposing to do is tender for a new and more accurate and up-to-date version of the software we currently use.

Barr
Roinn