Which is the database associated with the ID card system.  Have just read a lengthy, pretty technical document pointing out problems with the system.  To summarize:

The Data protection act is all very well, but it didn't envisage one big database – it assumes lots of different databases for different purposes.

In any case, Government can always overrule the data protection act if they see fit.

Government tends to use vague reasons for its broad powers – this allows for more flexibility but exposes us to a higher risk of abuse.  Such broad powers should be reviewed at a predetermined time eg 10 yrs.  There is also a pressure – function creep – to use something that already exists and extend its original remit.   What we see now is a pressure to use the National identity register as a general population register for public administration – which then demands compulsory ID cards.  That is not what it was originally intended for, and compulsory ID cards were not part of the original deal.

There is an Information Commissioner but he/she has limited powers – cannot audit compliance with data protection act, cannot name and shame transgressors, cannot issue fines for breaches.  Plus, there are a whole bunch of different commissioners – as a system for monitoring, it is pretty disjointed.

Government has a conflict of interest.  It is keen to achieve economies of scale and procedure, but it also has to protect rights.  It often reassures critics by saying, "the Human Rights Act will protect you if a statutory instrument is abused" – but then uses that safe guard as a justification for avoiding debate and rushing legislation through.  The Human Rights Act is all very well, but you have to have the cash to take a case to court, plus it takes the debate out of parliament and politicizes the judiciary.

There are obvious cases where data sharing should be compulsory – crime, health.  But for everything else, surely it should be assumed that consent is necessary?  Otherwise, what motivation exists to protect individual?  Also demands trust from the public that data will be used appropriately, although there has not been any popular mandate for the process, and limited payback.