In the cadre of the fighting plan against social fraud, Gabriel Attal, the Minister of Action and Public Accounts, announced the launch of a mission to define the contours of a merger of the données de la carte vitale à la nouvelle identification document. The National Commission for Informatics and Liberties (CNIL) warns about several points of blocking.
Two scenarios are proposed in a report from the Inspectorate General of Finance, which Tech&Co was able to obtain. One of the clues issued is to integrate the social security number in the chip of the identity card. For the CNIL, this solution would be “the least intrusive and the least risky from a technical point of view”.
However, the Commission recommends carrying out an in-depth “technical, legal and economic” study prior to its implementation, which must include several prerequisites. Among them, the partition of the social security number from the other data contained in the chip, by encrypting the part of the health insurance. In this way, the number would only be visible to healthcare professionals.
Insufficient security level
It is also about guaranteeing the security of the number throughout the process of creating and issuing the title so that it is not visible to the city council services. The CNIL also recommends including in the law the fact that “any insured person can oppose the processing of their social security number on their identity card”.
Another possible hypothesis: integrate the social security number in a QR Code of the identity document or a residence permit. For the CNIL, this scenario “does not seem to provide a sufficient level of security” because the QR code would be easily readable from a simple photocopy or scan. “An ecosystem that does not fall exclusively within the field of social security,” underlines the CNIL.
However, the Commission does not rule out the solution of “other formats of electronic stamps” with better encryption.
In the two proposed scenarios, the CNIL argues that “its implementation would require an evolution of the technical characteristics of identity documents” or of its component, including the electronic chip, which would be equivalent to replacing the current identity documents.
avoid stigma
With these two scenarios, the CNIL wants there to be alternatives “so that an insured can prove their rights and benefit from health insurance coverage.” And to continue: “these alternatives should not lead to the stigmatization of people who do not have their identity document or to the limitation of access to care.”
Finally, the CNIL indicates that it is not in favor of “the implementation of biometric scenarios (…) taking into account both the sensitivity of the data in question (…) and the possible misuse of these treatments”. The Commission also rejects the idea of a centralized database with biometric data.
This novelty could call into question the dematerialized vital card project that the State is testing in eight departments.
Source: BFM TV
