GFF files constitutional complaint against superfluous and dangerous transmission of census test run reporting data
GFF, together with the Census Working Group, has filed a constitutional complaint against the mass transmission of reporting data (i.e., personal information reported by individual citizens in response to government inquiry) as part of a test run for the 2021 census. Never before have such extensive data records been made accessible in a central database. Such an extensive collection of “reporting” data is not necessary in order to carry out a test run. Moreover, it is dangerous.
Help us to prevent this serious breach of data protection – support our efforts with a donation!
The constitutional complaint is directed against the Amending Act to the Census Preparation Act 2021. This law, which was passed by the Bundestag in a fast-track procedure, provides for a large-scale test run for the 2021 census in which the reporting data of all citizens is to be made available to the Federal Statistical Office within four weeks of January 13, 2019. This test run is intended to validate the method of transmission and the quality of the data. It is completely unnecessary, however, in the extremely broad form envisaged. In fact, the test run creates through the back door an unprecedentedly extensive database of all citizens.
Centrally stored data – a potential target for hacker attacks
As part of the test run, an entire catalogue of data, some of it extremely sensitive, for example information such as name, gender identity, marital status or religious affiliation, was transmitted within the space of four weeks following January 13, 2019. The data were not anonymized or pseudonymized. With the help of so-called order characteristics, relationships between individual persons can be inferred and deduced. These data were transmitted by the registration offices to the statistical offices of the Länder and can be called up centrally by the Federal Statistical Office.
This is the first time that such extensive data records of all citizens have been brought together in one central location – an attractive target for criminal hackers and a massive violation of data protection principles. According to information available to the GFF, the data is not held by the Federal Statistical Office itself, but by a third party whose reliability is unclear.
Violation of data protection fundamental right
GFF regards this procedure as a violation of the “fundamental right to data protection”, otherwise stated, the right to informational self-determination. This right was established by the Federal Constitutional Court in its 1983 census judgment. The court set clear limits for the state with respect to the collection and utilization of the data of its citizens.
The reported data collected by the State may only be used for absolutely necessary purposes, including to conduct censuses. The test run envisaged clearly exceeds this limit. The purpose of testing software for the 2021 census is disproportionate to the risk of personal data being misused by third parties.
In particular, data should be anonymized to the extent possible. This would have been perfectly sufficient for purposes of the current test. Instead of transmitting the actual reported data of up to 82 million people, the authorities could have used fictitious data to test the transmission of a large volume of data. Moreover, a small sample have from the real data would have sufficed to test the quality of the data.
Need for action misjudged
In order to halt the test at short notice, GFF applied for interim measures with the Federal Constitutional Court in January 2019. The Federal Constitutional Court rejected GFF’s urgent application at the beginning of February and thus failed to recognize the urgent need for action to ensure the protection of the data. The Court conceded that the requirement to anonymize real data that is transmitted and stored lacks clarification in the law. Nevertheless, after weighing the consequences, the Federal Constitutional Court refused to halt the test run.
However, in its decision on the emergency appeal, the Federal Constitutional Court expressed clear doubts as to the necessity of the test run. The Court found that a constitutional complaint against the Census Preparation Act 2021 was not manifestly outside its purview or unfounded.
GFF against government data collection
The aim of the constitutional complaint is to reduce the unnecessary risk of third parties gaining access to the real data of citizens. The reporting data already collected for the test run is to remain stored centrally for up to two years. In addition, we want to prevent comparable test runs in the future.
GFF defends fundamental human rights, in particular against state interference. Not only would the planned central database be a potential target for hacker attacks, there is the further danger that, in addition to the Federal Statistical Office, other authorities may want to claim an interest in gaining access to this data. This step towards a surveillance state must therefore be prevented from the outset.
Background information
- You can find the complaint written by attorney Benjamin Derin here (in German).
- You can find the motion written by attorney Benjamin Derin here (in German).
Press
Here you will find our current press release (in German).
Further press releases:
- GFF files urgent application to the Federal Constitutional Court against superfluous and dangerous transmission of reporting data for census test run (10.01.2019) (in German)
Here you will find the press review (in German).
Freedom and justice need many friends – become a supporting member of the GFF!
Photo Credit: “Hans” on Pixabay, licensed under CC0.