ROGER CLARKE'S MAIN PUBLICATIONS
DATA SURVEILLANCE and INFORMATION PRIVACY

Roger Clarke

Principal, Xamax Consultancy Pty Ltd, Canberra

Visiting Professor, Baker & McKenzie Cyberspace Law & Policy Centre, University of N.S.W.

Visiting Fellow, Department of Computer Science, Australian National University

Version of 19 December 2004

© Xamax Consultancy Pty Ltd, 1995-2004

This document is at http://www.anu.edu.au/people/Roger.Clarke/DV/RogersBibl.html

A separate document provides an introduction to information privacy and dataveillance, and definitions of the terms used.

Another lists those papers that are designed to be accessible, rather than intended for publication in journals.

Yet another provides an annotated bibliography.

This document lists my main papers in reverse chronological order.

Finally, the document that is likely to be most up-to-date is my What's New Page.

2004

'Submission to the Review of the Private Sector Provisions of the Privacy Act 1988 (Cth), in particular the Issues Paper of October 2004' November 2004, at http://www.anu.edu.au/people/Roger.Clarke/DV/PActRev0412.html

'Identity Management? Or (Id)Entity Mismanagement?' Presentation for the ACS(Canberra) Branch Conference, November 2004, at http://www.anu.edu.au/people/Roger.Clarke/EC/ACSID0411.html

'Is eGovernment for People, or against People? Challenges to Personal Information Management Arising from eGovernment Business Models and Technology Trends' Invited Presentation to the Ontario Management Board Secretariat, June 2004, at http://www.xamax.com.au/EC/OPS0406.html

'Identity and Nymity: Public Policy Issues' Invited Presentation to the Government of Ontario Enterprise Architecture Conf., June 2004, at http://www.anu.edu.au/people/Roger.Clarke/EC/IdNymPPI.html

'The Concepts of (Id)entity, Nymity and Authentication' Invited Presentation at the University of Ottawa, June 2004, at http://www.anu.edu.au/people/Roger.Clarke/DV/UOttINA.html

'The Search for Balance: The Past, Present and Future of Privacy Impact Assessments' Invited Presentation at Queens University, Kingston Ontario, June 2004, at http://www.anu.edu.au/people/Roger.Clarke/DV/PIAPPF.html

'Identity Management; and PIAs' Invited Presentation at the Office of the Privacy Commissioner of Canada, June 2004, at http://www.anu.edu.au/people/Roger.Clarke/DV/OPCC0406.html

'Biometric Insecurity' Invited Presentation to the AusCERT Conference, Gold Coast, May 2004, at http://www.anu.edu.au/people/Roger.Clarke/DV/AusCERT0405.html

'Identity Management: The Technologies, Their Business Value, Their Problems, Their Prospects' Xamax Consultancy Pty Ltd, March 2004, available for fee from http://www.xamax.com.au/EC/IdMngt.html

'Submissions re Passport Biometrics', on behalf of the Australian Privacy Foundation (co-authored, February-March), of 17 February, 25 February, 2 March, and 15 March

'N.S.W Guidelines for the Operation of Personal Data Systems' Re-typed version of 1977, February 2004, at http://www.anu.edu.au/people/Roger.Clarke/DV/NSWPCGs.html

'Australian Govt Tries To Make Face-Recognition Look Good' Working Paper, February 2004, at http://www.anu.edu.au/people/Roger.Clarke/DV/SmartGate040207.html

'SmartGate: A Face Recognition Trial at Sydney Airport' enhanced version, Working Paper, February 2004, at http://www.anu.edu.au/people/Roger.Clarke/DV/SmartGate.html

'A History of Privacy Impact Assessments' Working Paper, February 2004, at http://www.anu.edu.au/people/Roger.Clarke/DV/PIAHist.html

'Very Black 'Little Black Books'' Working Paper, February 2004, at http://www.anu.edu.au/people/Roger.Clarke/DV/ContactPITs.html

2003

Submission to Queensland Transport in relation to the Proposed Smartcard-Based Driver's Licence, November 2003, at http://www.anu.edu.au/people/Roger.Clarke/DV/QTDL0311.html

'Wireless Transmission and Mobile Technologies' Revised Working Paper, 18 October 2003, at http://www.anu.edu.au/people/Roger.Clarke/EC/WMT.html

'Information Privacy in a Globally Networked Society: Implications for IS Research' Commun. Assn for Infor. Syst. (12, 2003) 341-365 341 (R. M. Davison, R. Clarke, H.J. Smith, D. Langford, and B. Kuo), at http://www.anu.edu.au/people/Roger.Clarke/DV/cais0310.pdf

'Why Biometrics Must Be Banned' Abstract of a Presentation at the Baker & McKenzie Cyberspace Law & Policy Centre Conference on 'State Surveillance after September 11', Sydney, 8 September 2003, at http://www.anu.edu.au/people/Roger.Clarke/DV/Biom030908.html, plus PowerPoint slides

'Identification and Authentication Fundamentals' Notes prepared as an introduction to a session on 'Authentication and Identification: New Paradigms', at the Conference on 'State Surveillance after September 11' , at U.N.S.W. on 8 September 2003, at http://www.anu.edu.au/people/Roger.Clarke/DV/CLPC030908.html

'Authentication Re-visited: How Public Key Infrastructure Could Yet Prosper' Proc. 16th Bled Electronic Commerce Conf., Bled, Slovenia, 9-11 June 2003, at http://www.anu.edu.au/people/Roger.Clarke/EC/Bled03.html

'Privacy on the Move: The Impacts of Mobile Technologies on Consumers and Citizens' Abstract prepared for the Information Privacy + M-Commerce Symposium, Queen's University, Kingston Ontario, 31 May 2003, at http://www.anu.edu.au/people/Roger.Clarke/DV/MPrivacy.html

'Mobile Technologies' Notes prepared for the Information Privacy + M-Commerce Symposium, Queen's University, Kingston Ontario, 31 May 2003, at http://www.anu.edu.au/people/Roger.Clarke/EC/MTechno.html

'Dataveillance - 15 Years On' Invited Presentation at the Privacy Issues Forum run by the New Zealand Privacy Commissioner, Wellington, 28 March 2003, at http://www.anu.edu.au/people/Roger.Clarke/DV/DVNZ03.html, together with a slide-set)

'Why I'm Not Going to CFP 2003' 13 March 2003, at http://www.anu.edu.au/people/Roger.Clarke/DV/NotesCFP03.html

Enhanced versions of Resource Pages for the Australian Privacy Foundation's site, February-April 2003:

• Catalogue of Privacy Resources
• Directory of Privacy Organisations
• How To Go About Making A Complaint
• Commonwealth Laws
• Laws of the States and Territories
• Laws of the Rest of the World

'ENUM - A Case Study in Social Irresponsibility' Revised Version of 9 March 2003, published in Privacy Law & Policy Reporter 9, 10 (March 2003) 181-18, at http://www.anu.edu.au/people/Roger.Clarke/DV/enumISOC02.html

'SmartGate: A Face Recognition Trial at Sydney Airport' Working Paper revision of 23 February 2003, at http://www.anu.edu.au/people/Roger.Clarke/DV/SmartGate.html

'Biometrics in Airports: How To, and How Not To, Stop Mahommed Atta and Friends' Working Paper revision of 23 February 2003, at http://www.anu.edu.au/people/Roger.Clarke/DV/BioAirports.html

'The Scope for Privacy-Sensitive Biometric Architecture' Working Paper revision of 23 February 2003, at http://www.anu.edu.au/people/Roger.Clarke/DV/BioArch.html

2002

'Information Privacy in a Globally Networked Society: Implications for Research' Panellist's Statement for ICIS'2002, Barcelona, December 2002, Panel on Information Privacy in a Globally Networked Society: Implications for I.S., at http://www.anu.edu.au/people/Roger.Clarke/DV/ICIS2002.html, including slide-set

'ENUM - A Case Study in Social Irresponsibility', Invited Presentation to the ISOC-AU Forum on New Protocols and Standards-Setting in Australia , 3 December 2002, at http://www.anu.edu.au/people/Roger.Clarke/DV/enumISOC02.html, supported by a primary slide-set, and a supporting slide-set used as a 'play within a play'

'Techno-Reality and Techno-Literature' Presentation to Hawker College, Canberra, November 2002, comprising a slide-set, to support A 'Future Trace' on Dataveillance: The Anti-Utopian and Cyberpunk Literary Genres

'Digital Property Rights vs. Human Rights: Desperate Publishing Houses Are Demanding A New Dark Ages' Invited Presentation to the A.C.S. (S.A.) Conference on Ubiquitous Computing: Trends, Tricks And Traps , Adelaide, 31 October - 1 November 2002, at http://www.anu.edu.au/people/Roger.Clarke/II/ACSSA02.html, plus slide-set

'W(h)ither PKI?' Presentation to the China Information Technology and Law Centre, Departments of Law and CSIS, University of Hong Kong, 25 September 2002, at http://www.anu.edu.au/people/Roger.Clarke/II/HKPKI02.html

'The Mythology of Consumer Identity Authentication', Statement for a Panel Session on 'Understanding e-Business: Can we remain anonymous in the marketplace?' 24th Int'l Conf. of Data Protection & Privacy Commissioners, Cardiff UK, 9-11 September 2002, at http://www.anu.edu.au/people/Roger.Clarke/DV/AnonDPPC02.html, plus PowerPoint slides

'Research Use of Personal Data' Comments to a Panel Session of the National Scholarly Communications Forum on 'Privacy: Balancing the Needs of Researchers and the Individual's Right to Privacy under the New Privacy Laws', Australian Archives, 9 August 2002, at http://www.anu.edu.au/people/Roger.Clarke/DV/NSCF02.html

'eAuthentication: Where's the Public Interest?', Presentation to Baker & McKenzie CyberLaw and Policy Centre, UNSW, 11 July 2002, at http://www.anu.edu.au/people/Roger.Clarke/EC/eAuthCPLC020711.html, plus PowerPoint slides

'e-Consent: A Critical Element of Trust in e-Business' Proc. 15th Bled Electronic Commerce Conf., Bled, Slovenia, 17-19 June 2002, at http://www.anu.edu.au/people/Roger.Clarke/EC/eConsent.html, plus PowerPoint slides

'Biometrics Inadequacies & Threats & Privacy-Protective Architecture' significantly revised set of PowerPoint slides, presentation at Uni. of Hong Kong, May 2002

Notes on Computers, Freedom & Privacy Conference, San Francisco, 16-19 April 2002, at http://www.anu.edu.au/people/Roger.Clarke/DV/NotesCFP02.html

'Biometrics Inadequacies & Threats & Privacy-Protective Architecture', Presentation to Computers, Freedom & Privacy, San Francisco, 16-19 April 2002, at http://www.anu.edu.au/people/Roger.Clarke/DV/NotesCFP02.html#BiomRC, plus PowerPoint slides

'Why Do We Need PKI? Authentication Re-visited' Working Paper, January 2002, at http://www.anu.edu.au/people/Roger.Clarke/EC/PKIRW02.html

2001

'The Re-Invention of Public Key Infrastructure' Review Draft of 22 December 2001, at http://www.anu.edu.au/people/Roger.Clarke/EC/PKIReinv.html

'Authentication: A Sufficiently Rich Model to Enable e-Business' Review Draft of 26 December 2001, at http://www.anu.edu.au/people/Roger.Clarke/EC/AuthModel.html

'Beyond the Alligators of 21/12/2001, There's a Public Policy Swamp' Proc. Privacy.au, Marcus Evans Conferences, Sydney, 23-24 October 2001, at http://www.anu.edu.au/people/Roger.Clarke/DV/PPSwamp.html

'Trust in the Context of e-Business' 1 October 2001, at http://www.anu.edu.au/people/Roger.Clarke/EC/Trust.html

'Authentication Technologies and Their Privacy Implications: Technology and Policy Foundations' Support materials for an invited presentation to the Symposium on 'Authentication Technologies and Their Privacy Implications', run by the Computer Science and Telecommunications Board (CSTB) of the National Academy of Sciences, Dulles Hyatt, Washington DC, 3-4 October 2001, at http://www.anu.edu.au/people/Roger.Clarke/II/NASATPI01.html

'e-Business: Consumer Perspectives' Notes for a presentation to ASCPA (ACT) on 9 September 2001, at http://www.anu.edu.au/people/Roger.Clarke/EC/CPAIT01.html

'Can Digital Signatures and Public Key Infrastructure Be of Any Use in the Health Care Sector ???' Notes for a Panel Session on 'PKI in Health' at the Health Informatics Conference, Canberra, 30 July 2001, at http://www.anu.edu.au/people/Roger.Clarke/EC/PKIHlth01.html

'Certainty of Identity: A Fundamental Misconception, and a Fundamental Threat to Security' Proc. Seminar on eSecurity and eCrime, UNSW Continuing Legal Education Programme, Sydney, 19-20 July 2001. Republished in Privacy Law & Policy Reporter 8, 3 (September 2001) 63-65, 68, at http://www.anu.edu.au/people/Roger.Clarke/DV/IdCertainty.html

'Research Challenges in Emergent e-Health Technologies' Notes to accompany a Panel Session on 'Research Challenges in Emergent e-Health Technologies', IFIP TC8 Conference on 'Developing a dynamic, integrative, multi-disciplinary research agenda in E-Commerce / E-Business', Salzburg, 22-23 June 2001, at http://www.anu.edu.au/people/Roger.Clarke/EC/eHlthRes.html

'Trust in Cyberspace: What eCommerce Doesn't Get' Proc. U.N.S.W. Continuing Legal Education Seminar on 'Cyberspace Regulation: eCommerce and Content', 25 May 2001, Sydney, at http://www.anu.edu.au/people/Roger.Clarke/EC/TrustCLE01.html

'The Fundamental Inadequacies of Conventional Public Key Infrastructure' Proc. Conf. ECIS'2001, Bled, Slovenia, 27-29 June 2001, at http://www.anu.edu.au/people/Roger.Clarke/II/ECIS2001.html

'Biometrics and Privacy' 15 April 2001, at http://www.anu.edu.au/people/Roger.Clarke/DV/Biometrics.html

'Meta-Brands' Privacy Law & Policy Reporter 7, 11 (May 2001), at http://www.anu.edu.au/people/Roger.Clarke/DV/MetaBrands.html

'Privacy as a Means of Engendering Trust in Cyberspace' UNSW L. J. 24, 1 (July 2001) 290-297, at http://www.anu.edu.au/people/Roger.Clarke/DV/eTrust.html

'Invasiveness of the Body-Snatchers' The Canberra Times, Wednesday 28 March 2001, p.11,, at http://www.anu.edu.au/people/Roger.Clarke/DV/BodyParts.html

'P3P Re-visited' Privacy Law & Policy Reporter 7, 10 (April 2001), at http://www.anu.edu.au/people/Roger.Clarke/DV/P3PRev.html

'Why Would M-Marketing be Trusted by Consumers and Small Enterprises??' Powerpoint slides for AMTA Congress, Sydney, 27 February 2000, at http://www.anu.edu.au/people/Roger.Clarke/EC/AMTA01.ppt

'Of Trustworthiness and Pets: What Lawyers Haven't Done for e-Business' Invited Address to the 5th Biennial Pacific Rim Computer Law Conference - Global e-Business Legal Issues for the 21st Century', Sydney, 22-24 February 2001, at http://www.anu.edu.au/people/Roger.Clarke/EC/PacRimCL01.html

'Roger Clarke's PITs and PETs Resources Site' February 2001, at http://www.anu.edu.au/people/Roger.Clarke/DV/PITsPETsRes.html

'Introducing PITs and PETs: Technologies Affecting Privacy' Privacy Law & Policy Reporter 7, 9 (March 2001), at http://www.anu.edu.au/people/Roger.Clarke/DV/PITsPETs.html

'While You Were Sleeping ... Surveillance Technologies Arrived', Australian Quarterly 73, 1 (January-February 2001) 10-14, at http://www.anu.edu.au/people/Roger.Clarke/DV/AQ2001.html

'Introduction to Information Security' February 2001, at http://www.anu.edu.au/people/Roger.Clarke/EC/IntroSecy.html

2000

'Technologies of Mass Observation', 'Mass Observation Movement' Forum, Treasury Theatre, Melbourne, 26 October 2000, at http://www.anu.edu.au/people/Roger.Clarke/DV/MassObsT.html

'Interview re Biometrics', September 2000, at http://www.anu.edu.au/people/Roger.Clarke/DV/BiometixIview.html

'Submission to the Inquiry into the Privacy Amendment (Private Sector) Bill 2000' by the Senate Legal and Constitutional Legislation Committee, September 2000, at http://www.anu.edu.au/people/Roger.Clarke/DV/SenatePBSub2000.html

'Supplementary Submission to the Inquiry into e-Privacy' by the Senate Select Committee on Information Technologies, August 2000, at http://www.anu.edu.au/people/Roger.Clarke/DV/SenateeP2.html

'Supplementary Submission to the Inquiry into e-Privacy' by the Senate Select Committee on Information Technologies, July 2000, at http://www.anu.edu.au/people/Roger.Clarke/DV/SenateeP.html

'How to Ensure That Privacy Concerns Don't Undermine e-Transport Investments', Proc. AIC e-Transport Conf., Melbourne, July 2000, July 2000, at http://www.anu.edu.au/people/Roger.Clarke/EC/EC/eTP.html

'File-Discovery and File-Sharing Technologies (aka Peer-to-Peer or P2P): MP3, Napster and Friends, and Their Impact on Music E-Publishing' July 2000, at http://www.anu.edu.au/people/Roger.Clarke/EC/FDST.html

'Key Design Issues in Marketspaces for Intellectual Property Rights' Proc. 13th International EC Conf., Bled, Slovenia, 19-21 June 2000, at http://www.anu.edu.au/people/Roger.Clarke/EC/Bled2K.html (with Peter Higgs and Gillian Dempsey)

'Famous Nyms', June 2000, at http://www.anu.edu.au/people/Roger.Clarke/DV/FamousNyms.html

'Privacy Laws of the World', May 2000, at http://www.anu.edu.au/people/Roger.Clarke/DV/PrivacyLaws.html

'Submission to the Inquiry into the Privacy Amendment (Private Sector) Bill 2000' by the House of Representatives Legal and Constitutional Committee, May 2000, at http://www.anu.edu.au/people/Roger.Clarke/DV/HoRSub2000.html

'E-Consent: A Key Issue in the New E-Context' KPMG Conference, Barossa Valley, May 2000, PowerPoint slides

'Notes on Computers, Freedom & Privacy Conference', Toronto, April 2000, at http://www.anu.edu.au/people/Roger.Clarke/DV/NotesCFP2K.html

'Privacy Requirements of Public Key Infrastructure' Proc. IIR Conf., Canberra, March 2000, and PowerPoint slides, at http://www.anu.edu.au/people/Roger.Clarke/DV/PKI2000.html

'Privacy Bill needs much more work', the Australian Computer Society column of The Australian, 15 February 2000, at http://www.anu.edu.au/people/Roger.Clarke/DV/ACS000215.html

'Notes on Privacy by Design', January 2000, at http://www.anu.edu.au/people/Roger.Clarke/DV/CFP2000.html

'Beyond the OECD Guidelines: Privacy Protection for the 21st Century', January 2000, at http://www.anu.edu.au/people/Roger.Clarke/DV/PP21C.html

'Submission to the Commonwealth Attorney-General, re: 'A privacy scheme for the private sector: Release of Key Provisions' of 14 December 1999', January 2000, at http://www.anu.edu.au/people/Roger.Clarke/DV/PAPSSub0001.html

'Privacy Laws: Resources', January 2000, at http://www.anu.edu.au/people/Roger.Clarke/DV/PrivacyLaws.html

1999

'The Packer / PBL / Acxiom InfoBase', November 1999, at http://www.anu.edu.au/people/Roger.Clarke/DV/InfoBase99.html

'Submission to the Treasury Taskforce on Industry Self-Regulation', November 1999, at http://www.anu.edu.au/people/Roger.Clarke/EC/SubCons991123.html

'Letter re Mooted TFN Extensions', November 1999, at http://www.anu.edu.au/people/Roger.Clarke/DV/TFN991119.html

'Ethics and the Internet: The Cyberspace Behaviour of People, Communities and Organisations', Proc. 6th Annual Conf. Aust. Association for Professional and Applied Ethics, Canberra, October 1999; Revised version forthcoming in J. Prof'l and Applied Ethics, at http://www.anu.edu.au/people/Roger.Clarke/II/IEthics99.html

'Resources for Workplace Privacy', September 1999, at http://www.anu.edu.au/people/Roger.Clarke/DV/Workplace.html

'Relevant Characteristics of Person-Location and Person-Tracking Technologies', September 1999, at http://www.anu.edu.au/people/Roger.Clarke/DV/PLTApp.html

'Person-Location and Person-Tracking: Technologies, Risks and Policy Implications' Proc. 21st International Conf. Privacy and Personal Data Protection, Hong Kong, September 1999. Revised version published in Info. Techno. & People 14, 1 (2001) 206-231, at http://www.anu.edu.au/people/Roger.Clarke/DV/PLT.html

'Current Developments in Internet Privacy', Proc. IIR Conf. Data Protection and Information Privacy, August 1999, Sydney, at http://www.anu.edu.au/people/Roger.Clarke/DV/ICurr9908.html

'Identification, Authentication and Anonymity in a Legal Context', Proc. IFIP User Identification & Privacy Protection Conference, Stockholm, June 1999, at http://www.anu.edu.au/people/Roger.Clarke/DV/AnonLegal.html (primary author A. Smith). Republished in Computer Law & Security Report 16, 2 (March/April 2000) CLSR 95-101

'Anonymous, Pseudonymous and Identified Transactions: The Spectrum of Choice', Proc. IFIP User Identification & Privacy Protection Conference, Stockholm, June 1999, at http://www.anu.edu.au/people/Roger.Clarke/DV/UIPP99.html

'The Willingness of Net-Consumers to Pay: A Lack-of-Progress Report', Proc. 12th International Bled EC Conf., Slovenia, June 1999, at http://www.anu.edu.au/people/Roger.Clarke/EC/WillPay.html

'Computers, Freedom and Privacy Conference - Personal Notes, April 1999, at http://www.anu.edu.au/people/Roger.Clarke/DV/NotesCFP99.html

'Privacy-Enhancing and Privacy-Sympathetic Technologies - Resources', April 1999, at http://www.anu.edu.au/people/Roger.Clarke/DV/PEPST.html (April 1999)

'The Legal Context of Privacy-Enhancing and Privacy-Sympathetic Technologies', presentation at AT&T Research Labs, Florham Park NJ, 5 April 1999, at http://www.anu.edu.au/people/Roger.Clarke/DV/Florham.html

'Internet Privacy Concerns Confirm the Case for Intervention', Communications of the ACM, 42, 2 (February 1999) 60-67, at http://www.anu.edu.au/people/Roger.Clarke/DV/CACM99.html

1998

'A History of Privacy in Australia: Current Developments', December 1998, at http://www.anu.edu.au/people/Roger.Clarke/DV/OzCurrent.html

'A History of Privacy in Australia', December 1998, at http://www.anu.edu.au/people/Roger.Clarke/DV/OzHistory.html

'Second Submission to ACCC re ADMA's Request for Approval of a Unilaterally-Prepared Code of Practice', for the Australian Competition and Consumer Commission, December 1998, at http://www.anu.edu.au/people/Roger.Clarke/DV/ACCC-ADMA-2.html

'Submission to ACCC re ADMA's Request for Approval of a Unilaterally-Prepared Code of Practice', for the Australian Competition and Consumer Commission, October 1998, at http://www.anu.edu.au/people/Roger.Clarke/DV/ACCC-ADMA.html

'Reference List: Surveys of Privacy Attitudes' rev. August 1998, http://www.anu.edu.au/people/Roger.Clarke/DV/Surveys.html

'Supplementary Submission to the Senate Legal and Constitutional References Committee's Inquiry Into Privacy and the Private Sector' 5 August 1998 , at http://www.anu.edu.au/people/Roger.Clarke/DV/SLCCPteSupp.html

'Public Submission re the Victorian Data Protection Bill' 31 July 1998, at http://www.anu.edu.au/people/Roger.Clarke/DV/VicDPSub.html

'Submission to the Senate Legal and Constitutional References Committee's Inquiry Into Privacy and the Private Sector' 7 July 1998, at http://www.anu.edu.au/people/Roger.Clarke/DV/SLCCPte.html

'Information Privacy On the Internet: Cyberspace Invades Personal Space' Telecommunication Journal of Australia 48, 2 (May/June1998), at http://www.anu.edu.au/people/Roger.Clarke/DV/IPrivacy.html

'Public Key Infrastructure: Position Statement', May 1998, at http://www.anu.edu.au/people/Roger.Clarke/DV/PKIPosn.html

'Confidentiality Provisions for Information Provided During the Course of Consultations', May 1998, at http://www.anu.edu.au/people/Roger.Clarke/DV/ConsConf.html

'Platform for Privacy Preferences: A Critique' (April 1998), Privacy Law & Policy Reporter 5, 3 (August 1998) 46-48, at http://www.anu.edu.au/people/Roger.Clarke/DV/P3PCrit.html

'Platform for Privacy Preferences: An Overview' (April 1998), Privacy Law & Policy Reporter 5, 2 (July 1998) 35-39, at http://www.anu.edu.au/people/Roger.Clarke/DV/P3POview.html

'Smart Card Technical Issues Starter Kit', for Centrelink (April 1998), at http://www.anu.edu.au/people/Roger.Clarke/DV/SCTISK.html

'Serious Flaws in the National Privacy Principles', Privacy Law & Policy Reporter 4, 9 (March 1998), at http://www.anu.edu.au/people/Roger.Clarke/DV/NPPFlaws.html

'Direct Marketing and Privacy', Proc. AIC Conf. on the Direct Distribution of Financial Services, Sydney, 24 February 1998, at http://www.anu.edu.au/people/Roger.Clarke/DV/DirectMkting.html

'Privacy Impact Assessments', Notes of 10 February 1998, at http://www.anu.edu.au/people/Roger.Clarke/DV/PIA.html

1997

'Smart Move by the Smart Card Industry - Part II', Privacy Law & Policy Reporter 4, 5 (October 1997), pp.97-98 at http://www.anu.edu.au/people/Roger.Clarke/DV/SMSC2.html

'Information Systems Audit & Information Privacy', October 1997, http://www.anu.edu.au/people/Roger.Clarke/DV/Audit.html

'Privacy Advocates and the Privacy Commissioner's Discussion Paper of August 1997 Regarding (Self-)Regulation of the Private Sector', October 1997, at http://www.anu.edu.au/people/Roger.Clarke/DV/AdvPC.html

'Instrumentalist Futurism: A Tool for Examining I.T. Impacts and Implications', October 1997, at http://www.anu.edu.au/people/Roger.Clarke/DV/InstFut.html

'Privacy On the Internet: Threats, Countermeasures and Policy' IBC 1997 Australian Privacy Forum, Sydney, 21-22 October 1997, at http://www.anu.edu.au/people/Roger.Clarke/DV/Internet.html

'Beyond 'Fair Information Practices: A New Paradigm for 21st-Century Privacy Protection', Sketch of September 1997, at http://www.anu.edu.au/people/Roger.Clarke/DV/BeyondFIP.html

'Chip-Based ID: Promise and Peril', for the International Conference on Privacy, Montreal (September 1997), at http://www.anu.edu.au/people/Roger.Clarke/DV/IDCards97.html

'Introduction and Definitions' (August 1997), at http://www.anu.edu.au/people/Roger.Clarke/DV/Intro.html

Promises and Threats in Electronic Commerce (August 1997), at http://www.anu.edu.au/people/Roger.Clarke/EC/Quantum.html

Public Interests on the Electronic Frontier, Invited Address to IT Security '97, 14 & 15 August 1997, Rydges Canberra (August 1997), http://www.anu.edu.au/people/Roger.Clarke/II/IIRSecy97.html

Five Most Vital Privacy Issues, Invited Comments to Michel Venne, for the Montreal Daily, Le Devoir, prior to the International Conference on Privacy, Montreal (July 1997), at http://www.anu.edu.au/people/Roger.Clarke/DV/VitalPriv.html

'Data Surveillance: Theory, Practice and Policy', submitted to the ICIS Dissertation Competition (July 1997), at http://www.anu.edu.au/people/Roger.Clarke/DV/ICIS97.html

Serious Dangers in the Commonwealth Government's Current Outsourcing Policy (July 1997), at http://www.anu.edu.au/people/Roger.Clarke/DV/ClthOutsrcing.html

'Privacy and Public Registers', Proc. IIR Conference on Data Protection and Privacy, Boulevard Hotel, Sydney, 12-13 May 1997, at http://www.anu.edu.au/people/Roger.Clarke/DV/PublicRegisters.html

'Customer Profiling and Privacy: Implications for the Finance Industry', AIC Conference on Customer Profiling for Financial Services, Sydney (May 1997), http://www.anu.edu.au/people/Roger.Clarke/DV/CustProfFin.html

Privacy and E-Lists (May 1997), at http://www.anu.edu.au/people/Roger.Clarke/DV/E-Lists.html

Protecting Your Privacy On the Internet, Seminar on 'Consumer Protection on the Internet', The Policy Network, Mitchell Library, Sydney (April 1997), http://www.anu.edu.au/people/Roger.Clarke/DV/Internet.html

Privacy Implications of Digital Signatures, IBC Conference on Digital Signatures, Sydney (with Graham Greenleaf, March 1997), at http://www.anu.edu.au/people/Roger.Clarke/DV/DigSig.html

Exemptions from General Principles Versus Balanced Implementation of Universal Principles, at http://www.anu.edu.au/people/Roger.Clarke/DV/Except.html (February 1997)

'Flaws in the Glass; Gashes in the Fabric: Deficiencies in the Australian Privacy-Protective Regime' Invited Address to Symposium on 'The New Privacy Laws', Queen Victoria Ballroom, George St, Sydney, 19 February 1997 , at http://www.anu.edu.au/people/Roger.Clarke/DV/Flaws.html

'Cookies' February 1977, at http://www.anu.edu.au/people/Roger.Clarke/II/Cookies.html

'Spam' February 1977, at http://www.anu.edu.au/people/Roger.Clarke/II/Spam.html

'What Do People Really Think? MasterCard's Survey of the Australian Public's Attitudes to Privacy' Privacy Law & Policy Report 3,9 (January 1997) , at http://www.anu.edu.au/people/Roger.Clarke/DV/MCardSurvey.html

1996

'Identification, Anonymity and Pseudonymity in Consumer Transactions: A Vital Systems Design and Public Policy Issue', Conference on 'Smart Cards: The Issues', Sydney, 18 October 1996, at http://www.anu.edu.au/people/Roger.Clarke/DV/AnonPsPol.html

'Initial Reactions to the Commonwealth Attorney-General's Discussion Paper of September 1996 on Privacy Protection in the Private Sector' (September 1996), at http://www.anu.edu.au/people/Roger.Clarke/DV/ClthPte.html

'Federal Privacy Legislation in Australia' (September 1996), at http://www.anu.edu.au/people/Roger.Clarke/DV/FedLeg.html

'The Information Infrastructure is a Super Eye-Way', a Book Review of Simon Davies book 'Monitor', Privacy Law & Policy Reporter 3, 5 (August 1996), at http://www.anu.edu.au/people/Roger.Clarke/DV/Monitor.html

'Privacy Issues in Smart Card Applications in the Retail Financial Sector', in 'Smart Cards and the Future of Your Money', Australian Commission for the Future, June 1996, pp.157-184. At http://www.anu.edu.au/people/Roger.Clarke/DV/ACFF.html

'Trails in the Sand' (May 1996), at http://www.anu.edu.au/people/Roger.Clarke/DV/Trails.html

'Privacy, Dataveillance, Organisational Strategy' (the original version was a Keynote Address for the I.S. Audit & Control Association Conf. (EDPAC'96), Perth, 28 May 1996). At http://www.anu.edu.au/people/Roger.Clarke/DV/PStrat.html

Cryptography in Plain Text', published in Privacy Law & Policy Reporter 3, 4 (May 1996) 24-27, 30-33. At http://www.anu.edu.au/people/Roger.Clarke/II/CryptoSecy.html

'Crypto-Confusion: Mutual Non-Comprehension Threatens Exploitation of the GII' Privacy Law & Policy Reporter 3, 4 (May 1996). At http://www.anu.edu.au/people/Roger.Clarke/II/CryptoConf.html

'Smart move by the smart card industry: The Smart Card Industry's Code of Conduct' Privacy Law & Policy Reporter 2, 10 (January 1996) 189-191, 195. At http://www.anu.edu.au/people/Roger.Clarke/DV/SMSC.html

1995

An Overview of the author's doctoral supplication, entitled 'Data Surveillance: Theory, Practice & Policy' (August 1995), at http://www.anu.edu.au/people/Roger.Clarke/DV/PhD.html#Intro

'When Do They Need to Know 'Whodunnit?': The Justification for Transaction Identification; The Scope for Transaction Anonymity and Pseudonymity' Proc. Conf. Computers, Freedom & Privacy, San Francisco, 31 March 1995. At http://www.anu.edu.au/people/Roger.Clarke/DV/PaperCFP95. Revised version published as 'Transaction Anonymity and Pseudonymity' Privacy Law & Policy Reporter 2, 5 (June/July 1995) 88-90

'Clients First or Clients Last? The Commonwealth Government's IT Review' Privacy Law & Policy Reporter 2, 4 (April / May 1995). At http://www.anu.edu.au/people/Roger.Clarke/DV/CFCL.html

'Computer Matching by Government Agencies: The Failure of Cost/Benefit Analysis as a Control Mechanism' Information Infrastructure & Policy 4,1 (March 1995) 29-65. At http://www.anu.edu.au/people/Roger.Clarke/DV/MatchCBA.html

'A Normative Regulatory Framework for Computer Matching' Journal of Computer and Information Law XIII,4 (Summer 1995) 585-633, at http://www.anu.edu.au/people/Roger.Clarke/DV/MatchFrame.html

1994

Special Issue of Information Technology & People 7, 4 (1994) on 'Identification Technologies'. Preface at http://weber.ucsd.edu/~pagre/identification.html

'Human Identification in Information Systems: Management Challenges and Public Policy Issues' Info. Technology & People 7,4 (December 1994). At http://www.anu.edu.au/people/Roger.Clarke/DV/HumanID.html

'Dataveillance by Governments: The Technique of Computer Matching' Information Technology & People 7,2 (December 1994) 46-85. Abstract at http://www.anu.edu.au/people/Roger.Clarke/DV/MatchIntro.html

'Information Technology: Weapon of Authoritarianism or Tool of Democracy?' Proc. World Congress, Int'l Fed. of Info. Processing, Hamburg, September 1994. At http://www.anu.edu.au/people/Roger.Clarke/DV/PaperAuthism.html

'The Digital Persona and Its Application to Data Surveillance' The Information Society 10,2 (June 1994). At http://www.anu.edu.au/people/Roger.Clarke/DV/DigPersona.html

'The Eras of Dataveillance' (March 1994). At http://www.anu.edu.au/people/Roger.Clarke/DV/NotesDVEras.html

'Dataveillance: Delivering 1984' Chapter in Green L. & Guinery R. (Eds.) 'Framing Technology: Society, Choice and Change' Allen & Unwin, Sydney, 1994. At http://www.anu.edu.au/people/Roger.Clarke/DV/PaperPopular

1993

Position Statement for a Privacy Panel at the International Conference on Information Systems, Orlando FL (December 1993). At http://www.anu.edu.au/people/Roger.Clarke/DV/PanelITProf'l.html

'Profiling: A Hidden Challenge to the Regulation of Dataveillance' Int'l J. L. & Inf. Sc. 4,2 (December 1993). At http://www.anu.edu.au/people/Roger.Clarke/DV/PaperProfiling.html. A shorter version was published as 'Profiling and Its Privacy Implications' Australasian Privacy Law & Policy Reporter 1,6 (November 1994). At http://www.anu.edu.au/people/Roger.Clarke/DV/AbstractProfiling.html

'Matches Played Under Rafferty's Rules: The Parallel Data Matching Program Is Not Only Privacy-Invasive But Economically Unjustifiable As Well' Working Paper (Nov 1993). At http://www.anu.edu.au/people/Roger.Clarke/DV/PaperMatchPDMP.html. Versions published in Privacy Law & Policy Reporter 1,1 (February 1994), and in Policy (Autumn 1994)

'Best Practice Guidelines for Controls Over the Security of Personal Data', for the Australian National Audit Office (September 1993), overview at http://www.anu.edu.au/people/Roger.Clarke/DV/PDSecy.html

'Computer Matching and Digital Identity', Proc. Conf. Computers, Freedom & Privacy, San Francisco, March 1993, at http://www.anu.edu.au/people/Roger.Clarke/DV/CFP93.html

'A 'Future Trace' on Dataveillance: Trends in the Anti-Utopia / Science Fiction Genre' (March 1993) At http://www.anu.edu.au/people/Roger.Clarke/DV/NotesAntiUtopia.html

'Why the Public Is Scared of the Public Sector' (February 1993), at http://www.anu.edu.au/people/Roger.Clarke/DV/PaperScared.html

1992

'Keeping Confidential Information on a Database with Multiple Points of Access: Technological and Organisational Measures' Seminar on Unauthorised Release of Government Information, N.S.W. Independent Commission Against Corruption, Sydney, 12 October 1992. Republished as 'Privacy Needs More Than Good Intentions' in Prof'l Comp. (November 1992). At http://www.anu.edu.au/people/Roger.Clarke/DV/PaperICAC.html

'Balancing Benefits Against Risks in the Proposed Health Communications Network' Seminar of the Australian Medical Informatics Ass., Perth (Oct 1992). At http://www.anu.edu.au/people/Roger.Clarke/DV/PaperHCN.html

'LEAN Times Ahead: The Proposed Law Enforcement Access Network' Policy 7,6 (Winter 1992). At http://www.anu.edu.au/people/Roger.Clarke/DV/PaperLEAN.html

'Computer Matching in Government: A Normative Regulatory Framework' Working Paper (August 1992) 110 pp. (which eventually resulted in three publications)

'The Resistible Rise of the Australian National Personal Data System' Software L. J. 5,1 (January 1992). At http://www.anu.edu.au/people/Roger.Clarke/DV/SLJ.html

Selected Publications Prior to 1992

'The Tax File Number Scheme: A Case Study of Political Assurances and Function Creep' Policy 7,4 (Summer 1991). At http://www.anu.edu.au/people/Roger.Clarke/DV/PaperTFN.html

During 1989-90, a series of papers was prepared under consultancy assignments for the Commonwealth Privacy Commissioner, on:

• the Privacy Act 1988;
• Data Matching;
• Transborder Data Flows; and
• Draft Commonwealth Public Service Guidelines for Data Matching.

During the period 1985-1990, several Policy Papers were prepared for the Australian Computer Society, on:

• 'Information Privacy Implications of Information Technology' Policy Statement, Austral. Comp. Soc., Sydney (Nov 1990);
• the Enhanced Tax File Number Scheme;
• Consumer Credit Reporting; and
• a National Information Policy

'Social Implications of IT - The Professional's Role' Austral. Comp. J. 22,2 (May 1990)

'Current Health Care Information Privacy Issues' Presentation to the Australian Medical Informatics Association, Perth, April 1990. At http://www.anu.edu.au/people/Roger.Clarke/DV/PaperMedical.html

'The Privacy Act 1988 as an Implementation of the OECD Data Protection Guidelines', 66 pp. (June 1989). At http://www.anu.edu.au/people/Roger.Clarke/DV/PActOECD.html

The Commonwealth Privacy Act 1988: Interpretation and Annotations from the Information Systems Perspective', 73 pp. (March 1989). Abstract at http://www.anu.edu.au/people/Roger.Clarke/DV/AbstractPrivacyAct.html

'The OECD Data Protection Guidelines: A Template for Evaluating Information Privacy Law and Proposals for Information Privacy Law' Working Paper (25pp.) (October 1989). At http://www.anu.edu.au/people/Roger.Clarke/DV/PaperOECD.html

'The Information Privacy Principles of the Australian Privacy Act 1988: An Unofficial Short Form' (February 1989). At http://www.anu.edu.au/people/Roger.Clarke/DV/IPPsUnofficial.html

'The Commonwealth Privacy Act 1988: A Personal Summary' (February 1989). At http://www.anu.edu.au/people/Roger.Clarke/DV/PaperPrivacyActShort.html

'Consumer Credit Reporting and Information Privacy Regulation' Policy Paper for the Australian Computer Society (February 1989). At http://www.anu.edu.au/people/Roger.Clarke/DV/PaperCredit.html

Economic, Legal and Social Implications of Information Technology' MIS Qtly 12,4 (December 1988) 517-9, at http://www.anu.edu.au/people/Roger.Clarke/DV/ELSIC.html

'Information Technology and Dataveillance' Comm. ACM 31,5 (May 1988) Re-published in C. Dunlop and R. Kling (Eds.), 'Controversies in Computing', Academic Press, 1991, at http://www.anu.edu.au/people/Roger.Clarke/DV/CACM88.html

''Just Another Piece of Plastic for Your Wallet': The Australia Card' Prometheus 5,1 June 1987 Republished in Computers & Society 18,1 (January 1988), with an Addendum in Computers & Society 18,3 (July 1988). At http://www.anu.edu.au/people/Roger.Clarke/DV/OzCard.html

Australian Proposals to Implement the OECD Data Protection Guidelines' Working Paper (January 1988)

'Aspects of the Australian Law Reform Commission's Information Privacy Proposals' J. L. Inf. Sci. 2,1 Aug 1986 (with G.W. Greenleaf)

'Impact on Practitioners of the Australian Law Reform Commission's Information Privacy Proposals' Austral. Comp. J. 17,2 May 1985

'Database Retrieval Technology and Subject Access Principles' Austral. Comp. J. 16,1 February, 1984 (with G.W. Greenleaf)

During 1974-76, a series of papers was prepared for the N.S.W. Privacy Committee.

Navigation

Go to Roger's Home Page.

Go to the contents-page for this segment.

Send an email to Roger

Original Version: 15 February 1995

Last Amended: 19 December 2004

These community service pages are a joint offering of the Australian National University (which provides the infrastructure), and Roger Clarke (who provides the content).