A client company has tasked you with analysing a data management challenge ("the case"). You will present your diagnosis and recommendations to the senior leaders of your client company, here represented by a panel comprising the course instructor.

As part of this process, you need to:

• Research and analysepublicly available data on the case (general press, internet databases etc.). Limit your research to the time period that is relevant for the issue at hand. Address the specific assignment questions listed below.
• Articulate and presentyour diagnosis of the case issue and actionable recommendations for change in an essay format.

Case

The Government of Canada has in recent years raised the possibility of introducing a national identity (ID) card. In a 2003 survey, 30 per cent of Canadian respondents strongly agreed that everyone should have a government issued ID card that they must carry at all times, and 23 per cent somewhat agreed. But would Canadians still be so accepting of a national identity card if they had the opportunity to become more fully informed of its privacy implications and limitations in enhancing security and preventing crime? Depending on its design, a national identity card could give government departments and other organizations great surveillance powers over individuals without significantly increasing government efficiency or public safety. Underpinning a national identity card system would almost certainly be a database of those participating, or "enrolled," in the system. This enrolment database would contain personal information about the entire population. In addition, the use of a single national ID card number would make it simple for organizations to amass comprehensive profiles about individuals, possibly in real time - an anathema to a democracy that purports to respect privacy.

Questions

1. Diagnose and define the challenges the Canadian government will have keeping national identity (data) of Canadians safe. What are the root causes of these challenges?
2. Based on your diagnosis, what is the best way of keeping the data safe? Offer a clearly articulated, justified and actionable recommendation.
3. Given your recommendation, which other laws have to be changed - or actively maintained - to protect this data?