[LINK] Urgent: MyHR Opt-Out

[Karl Auer]

On Thu, 2018-07-19 at 10:04 +1000, Jim Birch wrote:
> [some stuff]

The whole system is founded on a huge betrayal - saying it would be
opt-in, then flipping it to opt-out.

The many so-called controls turn out on closer inspection to be
useless. Permissions must be applied on a document-by-document basis,
access logging is by institution, not down to the individual and so on.

If this was about better medicine or evidence-based policy, the
government would have designed a system that provided those. But it
hasn't.

Remember the health care card that absolutely definitely was not
supposed to be used as an ID card? Yet strangely the government
insisted that it should have a photo and name and address details
printed on it - when these were absolutely unnecessary to the purported
function of the card.

Similarly the MyHR system has lots of characteristics that are not
necessary to its purported function. And it lacks many characteristics
that clearly ARE necessary to its purported function.

Which leads me to the obvious conclusion that its purported functions
are not in fact its intended functions.

Add to that the fact that this fast trove of highly sensitive data is a
couple of votes away from being abused by any future government, and
you have a system that I would not touch with a barge pole.

Regards, K.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer (kauer at biplane.com.au)
http://www.biplane.com.au/kauer
http://twitter.com/kauer389

GPG fingerprint: A0CD 28F0 10BE FC21 C57C 67C1 19A6 83A4 9B0B 1D75
Old fingerprint: A52E F6B9 708B 51C4 85E6 1634 0571 ADF9 3C1C 6A3A