Freedom of information request 13728/10
6 January 2010 Request submitted
A. Home Office press release, Contracts bring ID cards and more secure passports closer, http://nds.coi.gov.uk/content/detail.aspx?NewsAreaId=2&ReleaseID=398018&SubjectId=16&AdvancedSearch=true :

"IBM was awarded a £265 million contract to continue existing UKBA fingerprinting capabilities and to build and run the database that will store the facial images and fingerprints that are needed to keep the passport in line with international standard, as well as to support the delivery of the ID card."

B. Sagem Sécurité press release, Sagem Sécurité chosen by IBM to support United Kingdom's National Identity Assurance Service (NIAS), http://www.safran-group.com/site-safran-en/press-media/press-releases/2009-447/article/sagem-securite-chosen-by-ibm-to :

"Sagem Sécurité (Safran group) has signed a contract with IBM to supply and maintain a biometric management solution for British travel and identity documents, on behalf of the British Home Office's Identity and Passport Service (IPS). The project is a core element of the Government's plans to upgrade to biometric passports and enhance the security of the UK border.

"Sagem Sécurité will provide multibiometric facial and fingerprint recognition technology that was assessed for speed, accuracy and cost in competitive trials developed and run by IBM, using in excess of 10 million images …"

C. There is considerable doubt about the reliability of biometrics based on face recognition and flat print fingerprinting, please see for example http://dematerialisedid.com/Register/regBiometrics.pdf and http://www.guardian.co.uk/commentisfree/libertycentral/2009/nov/01/biometrics-home-office.

In view of A, B and C above, with £265 million of our money at stake, it is important that Sagem's biometric technology works. Please provide a copy of the detailed report of the competitive trials developed and run by IBM so that the public can assess for themselves the reliability of the technology.
13 January 2010 IPS acknowledgement, request number 13728/10 allocated
21 January 2010 NB The Guardian article referred to above, http://www.guardian.co.uk/commentisfree/libertycentral/2009/nov/01/biometrics-home-office, written by me, turned out to be wrong and a heartfelt apology was issued to Mr James A Loudermilk II of the FBI. This is extremely embarrassing. It remains the case nevertheless that "there is considerable doubt about the reliability of biometrics based on face recognition and flat print fingerprinting".
   
Thank you for your e-mail of 6 January in which you ask for biometric technology trial reports developed and run by IBM. Your request is being handled as a request for information under the Freedom of Information Act 2000.

We will aim to send you a full response within twenty working days of our receiving your request, by 3 February 2010.
12 February 2010 IPS response #1 dated 4 February 2010
I am sorry that we are still unable to reply substantively to your email of 6 January in which you asked to be provided with a copy of the detailed report of the competitive trials developed and run by IBM. Your request has been handled as a request for information under the Freedom of Information Act 2000.

I confirm that we are still considering your request. Although the Act carries a presumption in favour of disclosure, it provides exemptions which may be used to withhold information in specified circumstances. Some of these exemptions, referred to as 'qualified exemptions', are subject to a public interest test. This test is used to balance the public interest in disclosure against the public interest in favour of withholding the information. The Act allows us to exceed the 20 working day response target where we need to consider the public interest test fully.

The information which you have requested is being considered under the exemptions in sections 31(1)(a) and 43(2) of the Act, which relate to law enforcement and commercial interests respectively These are qualified exemption and to consider the public interest test fully we need to extend the 20 working day response period. We now aim to let you have a full response by 3 March.
4 March 2010 IPS response #2 dated 3 March 2010
I am sorry that we are still unable to reply substantively to your email of 6 January in which you asked to be provided with a copy of the detailed report of the competitive trials developed and run by IBM.

I confirm that, since our last letter of 4 February, our considerations into your request are still ongoing. As stated in our earlier letter, although the Act carries a presumption in favour of disclosure, it provides exemptions which may be used to withhold information in specified circumstances. Some of these exemptions, referred to as 'qualified exemptions', are subject to a public interest test. This test is used to balance the public interest in disclosure against the public interest in favour of withholding the information. The Act allows us to exceed the 20 working day response target where we need to consider the public interest test fully.

The information which you have requested is being considered under the exemptions contained within sections 31(1)(e) 41(1) and 43(2) of the Act, which relate to law enforcement (the operation of immigration controls), information provided in confidence and commercial interests respectively. These are qualified exemption and to consider the public interest test fully we need to extend the 20 working day response period by another twenty days. We now aim to let you have a full response by 31 March 2010.
4 March 2010 Email sent to IPS
Thank you for your letter dated 3 March 2010, received by email today.

This matter is dragging on.

I take the point that the public interest may sometimes be better served by withholding information than by disclosing it. The balance in this case must surely be in favour of disclosure.

The public are paying several hundred milion pounds to IBM to do a job on our behalf. The public surely has the right to know that that money is being well spent.

There is considerable interest in knowing that immigration controls, which you mention, are being operated effectively. That points to disclosure. The public is paying for law enforcement. IBM (and Sagem Sécurité) are the public's agents in this case. You don't expect your agent to plead confidentiality and refuse to tell you how and why they are spending your money, do you? The public has a commercial interest. It's our money. Our commercial interest deserves respect at least as much as IBM's and Sagem Sécurité's.

If Sagem Sécurité's products work, there can be no conceivable reason why they would want to keep that a secret, it doesn't make commercial sense for them.

If IBM conduct of their trials is academically convincing, why would they not want to publicise that fact?

The Home Office have a public relations project here, they need to "sell" confidence to the public. They're not going to achieve that by being coy.

While the public knows nothing about these biometrics trials of IBM's, do you realise that they were discussed at a conference this week hosted by the US National Institute of Standards and Technology? Scores of people at that conference will know something about these trials while, bizarrely, the people who paid for them, and whose security is supposed to depend on the results, to some extent, will know nothing about them.

There is a large corpus of academic data available suggesting that the reliability of biometrics based on facial geometry and flat print fingerprinting is surprisingly low. That arouses legitimate doubts whether this represents a sound investment of our money. Those doubts need to be allayed. The Home Office may believe that they are acting with a responsible purity of purpose by withholding information. But actually there is a danger that this failure to disclose is indistinguishable to us outsiders - the public, the people paying for IBM and Sagem Sécurité, the people paying for officials to attend agreeable conferences abroad - from a furtive and constipated campaign to hide a guilty secret.

The public needs a reason to believe that these biometrics will assist law enforcement. It can't be taken on trust, it's not a matter of faith, we need a reason. Every 16 year-old who has passed GCSE Science knows that. The Home Office should, too.

I hope that you will include these matters in your considerations.
17 March 2010 IPS response #3
Thank you for your e-mails of 6 January and 4 March, in which you asked for a copy of the detailed trial report of the competitive trials developed and run by IBM. Your request has been handled as a request for information under the Freedom of Information Act 2000. Further to our letter of 3 March, we are now in a position to provide you with a substantive response. I apologise for the delay in doing so.

I can confirm that the Identity and Passport Service holds the information that you requested. However, after careful consideration we have decided that the information is exempt from disclosure under sections 43(2), 41(1) and section 31(1)e of the Freedom of Information Act. These sections provide that information can be withheld where disclosure would or would likely to prejudice:-
• the commercial interests of any person- Section 43(2);

• constitute a breach of confidence actionable by that or any other person- Section 41(1);

• the operation of immigration controls- Section 31(1)(e);

• the prevention and detection of crime- Section 31(1)(a).

Arguments for and against disclosure in terms of the public interest, with the reasons for our conclusion, are set out in the attached Annex.

These exemptions apply to the vast majority of the report you have requested, to the extent that the redacted version would hold no useful information.

If you are dissatisfied with this response you may request an independent internal review of our handling of your request by submitting a complaint within two months to the address below, quoting reference FOICR 13728/10:-

Information Access Team
Home Office
Ground Floor, Seacole Building
2 Marsham Street
London SW1P 4DF

e-mail: info.access@homeoffice.si.gov.uk

As part of any internal review the Department's handling of your information request will be reassessed by staff who were not involved in providing you with this response. Should you remain dissatisfied after this internal review, you would have a right of complaint to the Information Commissioner as established by section 50 of the Freedom of Information Act.

Yours sincerely

Hazel Reid
Parliamentary and Correspondence Management Team


Annex

Public Interest Test

Sections 31(1)(e) and 31(1)(a)
There is a general public interest in increasing the public awareness of the steps taken to ensure that requirements in relation to the security and operation as underpinning the contracts for services to be delivered by the National Identity Service are robust. In particular matters in relation to the protection of information and systems, there is a public interest in ensuring that resources have been correctly deployed and requirements properly articulated, taking into account the nature of the services that will be delivered by the National Identity Service, and its role in preventing offences. Disclosure could assist in the public understanding into the resources available to counter potential threats to UK citizens, helping to ensure informed public debate. Disclosure of this type of information also demonstrates openness, transparency and accountability in how resources are used in preventing and detecting offences.

Some of the information in the performance trials relates in detail to the security and operational requirements, including details of the biometric false rejection and false acceptance trade-off. We consider that release of this information would lead individuals or groups to presume that the tests accurately reflect the totality of current immigration controls and processes that underpin the National Identity Services. Disclosure could lead to offences such as terrorism, illegal immigration, fraud and computer misuse being perpetrated. In addition disclosure could affect the integrity of the National Identity Service's role in providing a reliable way of proving and verifying the identity of individuals, and therefore the ability to prevent identity related crime, would be undermined.

Sections 43(2) and 41(1)
There is a general public interest in being open about the performance results of government systems. This can serve to demonstrate that departments have exercised due diligence when assessing commercial suppliers' products as part of the ICT procurement process and that public money is not wasted.

Some of the information in the contracts relates to information about the successful and unsuccessful bidding suppliers' system performance, environment design, testing strategies and their operating models. We consider that its release would prejudice the ability of the parties in relation to future commercial contract negotiations, which would not be in the public interest. The information would provide the suppliers' competitors with information that could be used to put the suppliers at a disadvantage in future ICT procurements, i.e by replicating proprietary configurations and designs. In addition, although the test configurations used by both successful and unsuccessful suppliers were specific to IPS requirements, potential customers would be aware in advance of the performance results which would put the suppliers at a disadvantage when negotiating future contracts. It would not be in the public interest for major suppliers to government to be put at such a disadvantage, or for the suppliers' relationship with IPS to be subject to detriment. In addition disclosure could deter other suppliers from contracting with government departments, which would reduce the scope for government departments to obtain value for money and the right expertise in future procurements.

Similarly, should its negotiated positions be disclosed, IPS would be put at a disadvantage in relation to future procurements to support the National Identity Service or other ICT procurements. It would not be in the public interest for a government department to be placed at such a disadvantage when negotiating contracts.

After careful consideration we have concluded that the balance of the public interest lies in withholding the information.

21 March 2010 Email to IPS
Dear Ms Reid

Thank you for your letter dated 17 March 2010, ref. FOICR 13728/10.

Please note that I shall be submitting a complaint to the Home Office Information Access Team and other parties.

Yours sincerely

David Moss
3 April 2010 Appeal lodged