{"id":54649,"date":"2016-09-30T11:27:00","date_gmt":"2016-09-30T16:27:00","guid":{"rendered":"https:\/\/content.findlaw-admin.com\/ability-legal\/supreme\/legal-commentary\/why-the-new-department-of-homeland-security-real-id-act-regulations-are-unrealistic.html"},"modified":"2016-09-30T11:27:00","modified_gmt":"2016-09-30T16:27:00","slug":"why-the-new-department-of-homeland-security-real-id-act-regulations-are-unrealistic","status":"publish","type":"supreme","link":"https:\/\/supreme.findlaw.com\/legal-commentary\/why-the-new-department-of-homeland-security-real-id-act-regulations-are-unrealistic.html","title":{"rendered":"Why the New Department of Homeland Security REAL ID Act Regulations are Unrealistic"},"content":{"rendered":"\n<div class=\"wp-container-core-columns-is-layout-9d6595d7  fl-block-columns fl-sectionWithSidebar fl-container fl-flex fl-flex-wrap fl-gap30\">\n    \n    <div class=\"fl-page-articles   fl-block-column fl-section-main fl-section-main-full-width\">\n        <div class=\"yui-g\" id=\"leftcol-module\">\n      <!-- Right Line of Links Section -->\n      <!-- BEGIN PICTURE INSERTION -->\n      <!-- BEGIN TITLE AND AUTHOR INSERTION -->\n      <table>\n        <tr>\n\n          <td width=\"100\" rowspan=\"3\" class=\"wiauthor\"><a href=\"\/legal-commentary\/anita-ramasastry-archive\"><img decoding=\"async\" src=\"https://supreme.findlaw.com/static/f/images\/writ\/anita.ramasastry.jpg\" border=\"0\"><\/a><\/td>\n          <td class=\"wititle\"><h1>Why the New Department of Homeland Security REAL ID Act Regulations are Unrealistic:<br><span class=\"subtitle\">Risks of Privacy and Security Violations and Identity Theft Remain, and Burdens on the States Are Too Severe<\/span><\/h1><\/td>\n        <\/tr>\n        <tr>\n          <td class=\"wiauthor\"><a href=\"\/legal-commentary\/anita-ramasastry-archive\" class=\"graybold\"><h2>By ANITA RAMASASTRY<\/h2><\/a><\/td>\n        <\/tr>\n        <tr>\n          <td class=\"widate\">Friday, Apr. 06, 2007<\/td>\n\n        <\/tr>\n      <\/table>\n      <span class=\"smalltext\"><p>In March, the Department of Homeland Security (DHS) published draft regulations to establish minimum standards for state-issued driver&#8217;s licenses and identification cards, in accordance with the REAL ID Act of 2005.<b> <\/b><\/p> <p>The Act &#8211;<b> <\/b>moved quickly through Congress in 2005 as part of a must-pass military appropriations bill &#8212; has been touted as a national effort to prevent terrorism and reduce identity fraud.  Eventually, the Act will require every person in America to carry a REAL ID-compliant identification document, issued by a State Department of Motor Vehicles (DMV), in order to fly on commercial airlines, enter government buildings, or simply open a bank account. <\/p>  <!-- 300x250 AD -->\n\n<p>Unfortunately, DHS&#8217;s proposed regulations do not alleviate any of the major concerns that have been raised regarding privacy and security, ever since the REAL ID Act was passed. Thus, those concerned with privacy and\/or security ought to voice their concerns about the proposed DHS regulations before they become final, and it is too late. <\/p>  <p>In this column, I&#8217;ll outline some of the major problems regarding the proposed regulations. <\/p>  <p><b>DHS Should Have Taken on Identity Theft and Security Directly <\/b><\/p> <p>First, DHS expressly punted on the identify theft issue, despite its importance. <\/p> <p>The proposed regulations assert that &#8220;DHS believes that it would be outside its authority to address this issue within this rulemaking.&#8221; Thus, DHS requires the states to devise a comprehensive security plan for safeguarding information collected, stored, or disseminated for purposes of complying with the REAL ID Act.  As for security of the ID itself, DHS has mentioned that encryption of the magnetic stripe data on licenses might be preferable &#8211; but it has not mandated that states in fact encrypt the data.<b><\/b><\/p> <p>The states, however, are unlikely to be eager to take on this added responsibility. As it is, simply complying with the proposed regulations will put a large fiscal burden on the states. Effectively addressing security concerns will be even more expensive.  <\/p> <p>DHS itself should be forced to confront, not dodge, the important privacy, security and identity theft issues the REAL ID program raises. In addition, the federal government should pay the tab for addressing the information-security issues its legislation will predictably create.<\/p>  <!-- MIDDLE AD PLACEHOLDER -->\n<p><b>The Burdens of Document Verification are Onerous<\/b><\/p> <p>The DHS regulations require verifying the identity of each document submitted by each person who seeks a REAL ID-compliant ID with the original issuing agency. Such agencies might be located in other states, or even in a foreign country. That will be costly indeed. And the regulations will only make it more so: They go beyond the Act to require document re-verification for renewal; mandate two documents evidencing proof of address; and require the verification of birth certificates with state vital records offices.  Such requirements appear to be far more than what the federal government itself does to verify the identity of its citizens.<\/p> <p>In addition, states will be asked to verify vital records (that is, birth\/death certificates) using the Electronic Verification of Vital Events (EVVE) system. That system is not yet fully functional.<\/p> <p>States are also concerned about foreign passport verification. There may be no practical or reliable way for DMV agencies to verify the accuracy of each passport with the issuing agency &#8211; that is, the country of which the passport-holder is a citizen.  Passports also change format over the years, so individuals may have outdated passports or ones that are more difficult to verify.<\/p> <p>The federal government should fund the upgrade of document verification systems, as well as the cost of states&#8217; use of the databases. Meanwhile, while the federal government brings the databases up to speed, states should enhance their manual verification and fraudulent documents detection methods.<i> <\/i><\/p> <p>Both visits to and waiting times at already-crowded DMVs will doubtless skyrocket when the regulations are in full effect.  <\/p>  <p>Moreover, the regulations provide flexibility only for extraordinary circumstances.  As the ACLU has noted, this exception, while it won&#8217;t help the ordinary citizen at all, does create a loophole that identity thieves and other criminals could potentially exploit.  <\/p> <p>DHS has conceded that the cost to the states will range from $10.7 billion to $14.6 billion, and individuals will have to cover an additional $7.8 billion in costs. These additional costs could bring the total cost for Real ID up to a reported $23 billion.  (No wonder many states have balked at the prospect of implementing REAL ID. Some have even passed legislation on the topic &#8212; as I&#8217;ll detail below.)<\/p>  <p><b>DHS Should Have Exempted Government Benefits Facilities <\/b><\/p> <p>Another problem with the Act and regulations derives from the requirement that a REAL ID driver&#8217;s license must be used for several &#8220;official purposes.&#8221;  The law itself lists several such purposes, including accessing a federal facility.  In the proposed rule, DHS suggests it will stick to the listed purposes for now, but may consider expanding the list through future rulemakings. <\/p> <p>The problem with the &#8220;federal facilities&#8221; provision is that the very people who may have the greatest difficulty complying with the Act by providing verification documents &#8211; the poor, lawful immigrants, refugees, elderly people, and transient or homeless people &#8211; may also be most in need of the benefits and services offered at federal facilities. <\/p> <p>Thus, Congress or DHS should have exempted federal facilities administering entitlement programs from the REAL ID requirement. No one should be denied a Social Security check due to heightened REAL ID formalities. <\/p>                                  <ul type=\"disc\"> <li class=\"MsoNormal\" style=\"mso-margin-top-alt:auto;mso-margin-bottom-alt:auto; line-height:18.0pt;mso-list:l0 level1 lfo3;tab-stops:list .5in\"> <\/ul>  <p><b>The States&#8217; &#8212; and Some Congresspersons&#8217; &#8211; Objections to REAL ID <\/b><\/p> <p>In January, the Maine legislature passed a resolution rejecting participation in the REAL -ID scheme. Arkansas and Idaho have also followed suit and other states are considering resolutions or legislation rejecting REAL ID.  <\/p>    <p>These resolutions may have little practical force, however, as the federal government has the power to condition states&#8217; receipt of federal monies on their compliance with federal law. Still, they represent a genuine and strong discontent with REAL ID at the state and grassroots levels &#8211; a discontent that Congress and DHS ought to heed.<\/p>  <p>Some in Congress, at least, seem to be listening.  Senators Daniel Akaka (D-HI), John Sununu (R-NH), and Representative Tom Allen (D-ME) have introduced legislation to provide privacy safeguards to the Real ID Act.   Their bills would prohibit the use of REAL-ID license data by third parties, require data encryption, and preserve any state privacy laws that may provide greater protections than REAL ID and its implementing regulations would provide. There is a real fear that private parties such as insurance companies, educational institutions or employers, could use REAL ID licenses for identity verification and other purposes.<\/p>     <p><b>Why States Believe They May Not Be Able to Comply On Time<\/b><\/p> <p>States also complain that they are being forced to comply much too quickly. The initial deadline was May 11, 2008. An extension has been granted so that some states are allowed to begin issuing compliant licenses no later than January 1, 2010 &#8212; in most cases with a roll-out of new licenses as they expire.  All licenses and identification cards from each State must be compliant by May 10, 2013. <\/p> <p>States have pointed out how much they are being required to do by REAL ID and its regulations: adopt conforming legislation, receive federal funding, and honor procurement processes to implement the far-reaching changes of the Act. They therefore have argued that a 2016 deadline is far more realistic than the 2013 deadline. <i><\/i><\/p> <p>What is taking the states so long? One answer is that they need to first construct large, complex <i><\/i><\/p> <p>database systems, and, second, employ them in checking on a tremendous number of licenses. This is a massive amount of detail-oriented work. Moreover, the existing databases simply will not suffice to allow states to truly comply with the Act.<\/p>        <p><i><\/i><\/p> <p><i><\/i><\/p> <p><b>It&#8217;s Time to Comment Critically Upon the DHS Regulations<\/b><\/p> <p>The only good news here is that these flawed regulations are only proposed; they have not yet been finalized. Now is the time to speak up, and make sure that the regulations address the serious concerns that have been raised. <i><\/i><\/p>  \n\n\n<\/span>\n\n\n\n<hr size=\"1\">\n<p class=\"authorfoot\">\n\n<!-- BEGIN AUTHORS FOOTNOTE -->\n<a name=\"bio\"><\/a>\nAnita Ramasastry is an Associate Professor of Law at the University of Washington School of Law in Seattle and a Director of the Shidler Center for Law, Commerce &amp; Technology. She has previously written on business law, cyberlaw, computer data security issues, and other legal issues for this site, which contains an archive of her columns. \n<br><br>\n\n<\/p>\n    <\/div><div class=\"was-this-helpful\">\n    <div\n            class=\"was-this-helpful__question-container\"\n            aria-labelledby=\"was-this-helpful__question\"\n            role=\"group\"\n    >\n        <span\n                id=\"was-this-helpful__question\"\n                class=\"was-this-helpful__question fl-text-lg-bold\"\n        >Was this helpful?<\/span>\n        <button\n                class=\"was-this-helpful__button fl-text-sm\"\n                aria-label=\"Yes\"\n                value=\"yes\"\n        >\n            <span class=\"was-this-helpful__button-text fl-text-bold\">Yes<\/span>\n            <i class=\"was-this-helpful__button-icon\">\n                <svg width=\"22\" height=\"22\" viewBox=\"0 0 22 22\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n                    <g id=\"thumbs-up\" clip-path=\"url(#clip0_604_3418)\">\n                        <path id=\"Vector\"\n                              d=\"M6 21H3C2.46957 21 1.96086 20.7893 1.58579 20.4142C1.21071 20.0391 1 19.5304 1 19V12C1 11.4696 1.21071 10.9609 1.58579 10.5858C1.96086 10.2107 2.46957 10 3 10H6M13 8V4C13 3.20435 12.6839 2.44129 12.1213 1.87868C11.5587 1.31607 10.7956 1 10 1L6 10V21H17.28C17.7623 21.0055 18.2304 20.8364 18.5979 20.524C18.9654 20.2116 19.2077 19.7769 19.28 19.3L20.66 10.3C20.7035 10.0134 20.6842 9.72068 20.6033 9.44225C20.5225 9.16382 20.3821 8.90629 20.1919 8.68751C20.0016 8.46873 19.7661 8.29393 19.5016 8.17522C19.2371 8.0565 18.9499 7.99672 18.66 8H13Z\"\n                              stroke=\"#666666\" stroke-width=\"2\" stroke-linecap=\"round\"\n                              stroke-linejoin=\"round\"><\/path>\n                    <\/g>\n                    <defs>\n                        <clipPath id=\"clip0_604_3418\">\n                            <rect width=\"22\" height=\"22\" fill=\"white\"><\/rect>\n                        <\/clipPath>\n                    <\/defs>\n                <\/svg>\n            <\/i>\n        <\/button>\n        <button\n                class=\"was-this-helpful__button fl-text-sm\"\n                aria-label=\"No\"\n                value=\"no\"\n        >\n            <span class=\"was-this-helpful__button-text fl-text-bold\">No<\/span>\n            <i class=\"was-this-helpful__button-icon\">\n                <svg width=\"22\" height=\"22\" viewBox=\"0 0 22 22\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n                    <g id=\"thumbs-down\" clip-path=\"url(#clip0_604_3423)\">\n                        <path id=\"Vector\"\n                              d=\"M16 0.999995H18.67C19.236 0.989986 19.7859 1.18813 20.2154 1.55681C20.645 1.9255 20.9242 2.43905 21 3V10C20.9242 10.5609 20.645 11.0745 20.2154 11.4432C19.7859 11.8119 19.236 12.01 18.67 12H16M9.00003 14V18C9.00003 18.7956 9.3161 19.5587 9.87871 20.1213C10.4413 20.6839 11.2044 21 12 21L16 12V0.999995H4.72003C4.2377 0.994543 3.76965 1.16359 3.40212 1.47599C3.0346 1.78839 2.79235 2.22309 2.72003 2.7L1.34003 11.7C1.29652 11.9866 1.31586 12.2793 1.39669 12.5577C1.47753 12.8362 1.61793 13.0937 1.80817 13.3125C1.99842 13.5313 2.23395 13.7061 2.49846 13.8248C2.76297 13.9435 3.05012 14.0033 3.34003 14H9.00003Z\"\n                              stroke=\"#666666\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\n                    <\/g>\n                    <defs>\n                        <clipPath id=\"clip0_604_3423\">\n                            <rect width=\"22\" height=\"22\" fill=\"white\"\/>\n                        <\/clipPath>\n                    <\/defs>\n                <\/svg>\n            <\/i>\n        <\/button>\n    <\/div>\n    <span class=\"was-this-helpful__taken-action fl-text-sm-bold\"><\/span>\n    <div class=\"was-this-helpful__feedback-container\">\n        <div class=\"was-this-helpful__choose-option-message\" role=\"status\">\n            <p class=\"was-this-helpful__choose-option-message-text\"><\/p>\n        <\/div>\n        <form class=\"was-this-helpful__feedback-form\">\n            <div class=\"was-this-helpful__feedback was-this-helpful__feedback--positive\">\n                <fieldset>\n                    <legend class=\"was-this-helpful__feedback-form-title\" tabindex=\"0\">Why was this helpful?<\/legend>\n                    <div class=\"fl-radio-button-field fl-flex was-this-helpful__feedback-form-title\">\n                        <input\n                                id=\"was-this-helpful__radio-button--understandable\"\n                                class=\"fl-radio-button-field-input\"\n                                type=\"radio\"\n                                name=\"positive-feedback\"\n                                value=\"Easy to understand\"\n                        >\n                        <label\n                                class=\"fl-radio-button-field-label fl-text-sm was-this-helpful__radio-label\"\n                                for=\"was-this-helpful__radio-button--understandable\"\n                        >Easy to understand<\/label>\n                    <\/div>\n                    <div class=\"fl-radio-button-field fl-flex was-this-helpful__feedback-form-title\">\n                        <input\n                                id=\"was-this-helpful__radio-button--solved-problem\"\n                                class=\"fl-radio-button-field-input\"\n                                type=\"radio\"\n                                name=\"positive-feedback\"\n                                value=\"Solved my problem\"\n                        >\n                        <label\n                                class=\"fl-radio-button-field-label fl-text-sm was-this-helpful__radio-label\"\n                                for=\"was-this-helpful__radio-button--solved-problem\"\n                        >Solved my problem<\/label>\n                    <\/div>\n                    <div class=\"fl-radio-button-field fl-flex was-this-helpful__feedback-form-title\">\n                        <input\n                                id=\"was-this-helpful__radio-button--other\"\n                                class=\"fl-radio-button-field-input\"\n                                type=\"radio\"\n                                name=\"positive-feedback\"\n                                value=\"Other\"\n                        >\n                        <label\n                                class=\"fl-radio-button-field-label fl-text-sm was-this-helpful__radio-label\"\n                                for=\"was-this-helpful__radio-button--other\"\n                        >Other<\/label>\n                    <\/div>\n                <\/fieldset>\n            <\/div>\n            <div class=\"was-this-helpful__feedback was-this-helpful__feedback--negative\">\n                <fieldset>\n                    <legend class=\"was-this-helpful__feedback-form-title\" tabindex=\"0\">Why was this not helpful?<\/legend>\n                    <div class=\"was-this-helpful__choose-option-message\" role=\"status\">\n                        <p class=\"was-this-helpful__choose-option-message-text\"><\/p>\n                    <\/div>\n                    <div class=\"fl-radio-button-field fl-flex was-this-helpful__feedback-form-title\">\n                        <input\n                                id=\"was-this-helpful__radio-button--missing-info\"\n                                class=\"fl-radio-button-field-input\"\n                                type=\"radio\"\n                                name=\"negative-feedback\"\n                                value=\"Missing Information\"\n                        >\n                        <label\n                                class=\"fl-radio-button-field-label fl-text-sm was-this-helpful__radio-label\"\n                                for=\"was-this-helpful__radio-button--missing-info\"\n                        >Missing the information I need<\/label>\n                    <\/div>\n                    <div class=\"fl-radio-button-field fl-flex was-this-helpful__feedback-form-title\">\n                        <input\n                                id=\"was-this-helpful__radio-button--complicated\"\n                                class=\"fl-radio-button-field-input\"\n                                type=\"radio\"\n                                name=\"negative-feedback\"\n                                value=\"Too complicated\"\n                        >\n                        <label\n                                class=\"fl-radio-button-field-label fl-text-sm was-this-helpful__radio-label\"\n                                for=\"was-this-helpful__radio-button--complicated\"\n                        >Too complicated \/ too many steps<\/label>\n                    <\/div>\n                    <div class=\"fl-radio-button-field fl-flex was-this-helpful__feedback-form-title\">\n                        <input\n                                id=\"was-this-helpful__radio-button--dated\"\n                                class=\"fl-radio-button-field-input\"\n                                type=\"radio\"\n                                name=\"negative-feedback\"\n                                value=\"Out of date\"\n                        >\n                        <label\n                                class=\"fl-radio-button-field-label fl-text-sm was-this-helpful__radio-label\"\n                                for=\"was-this-helpful__radio-button--dated\"\n                        >Out of date<\/label>\n                    <\/div>\n                    <div class=\"fl-radio-button-field fl-flex was-this-helpful__feedback-form-title\">\n                        <input\n                                id=\"was-this-helpful__radio-button--negative-other\"\n                                class=\"fl-radio-button-field-input\"\n                                type=\"radio\"\n                                name=\"negative-feedback\"\n                                value=\"Other\"\n                        >\n                        <label\n                                class=\"fl-radio-button-field-label fl-text-sm was-this-helpful__radio-label\"\n                                for=\"was-this-helpful__radio-button--negative-other\"\n                        >Other<\/label>\n                    <\/div>\n                <\/fieldset>\n            <\/div>\n            <div class=\"was-this-helpful__form-buttons-container\">\n                <button\n                    class=\"was-this-helpful__feedback-button was-this-helpful__feedback-button--positive at-feedback-submit fl-button secondary\"\n                    type=\"submit\"\n                >\n                    <span class=\"fl-button-content\">Submit<\/span>\n                    <i\n                        class=\"fa fa-angle-right medium\"\n                        aria-hidden=\"true\"\n                    ><\/i>\n                <\/button>\n                <button\n                    class=\"was-this-helpful__feedback-button was-this-helpful__feedback-button--cancel fl-button primary disabled\"\n                    type=\"reset\"\n                >\n                    <span class=\"fl-button-content\">Cancel<\/span>\n                    <i\n                        class=\"fa fa-times-circle medium\"\n                        aria-hidden=\"true\"\n                    ><\/i>\n                <\/button>\n            <\/div>\n        <\/form>\n    <\/div>\n    <div class=\"was-this-helpful__thank-you-message\" role=\"status\">\n        <i class=\"was-this-helpful__thank-you-message-icon fa fa-check\"><\/i>\n        <p class=\"was-this-helpful__thank-you-message-text\" aria-live=\"polite\"><\/p>\n    <\/div>\n<\/div>\n\n\n    <\/div>\n    \n    <div class=\"fl-block-column fl-section-sidebar\">\n        \n    <\/div>\n<\/div>","protected":false},"parent":49876,"menu_order":0,"template":"app\/Http\/Controllers\/Templates\/ArticlePageController.php","meta":{"_acf_changed":false,"_stopmodifiedupdate":false,"_modified_date":"","_cloudinary_featured_overwrite":false},"class_list":["post-54649","supreme","type-supreme","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/supreme.findlaw.com\/legal-api\/wp-json\/wp\/v2\/supreme\/54649","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/supreme.findlaw.com\/legal-api\/wp-json\/wp\/v2\/supreme"}],"about":[{"href":"https:\/\/supreme.findlaw.com\/legal-api\/wp-json\/wp\/v2\/types\/supreme"}],"up":[{"embeddable":true,"href":"https:\/\/supreme.findlaw.com\/legal-api\/wp-json\/wp\/v2\/supreme\/49876"}],"wp:attachment":[{"href":"https:\/\/supreme.findlaw.com\/legal-api\/wp-json\/wp\/v2\/media?parent=54649"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}