Jordan

Syrian Arab Republic

In the world’s biggest refugee camp, Syrians are effectively forced to have their iris scans recorded in exchange for receiving the aid they need to survive. Is the use of this tech on vulnerable people innovation or exploitation? This in-depth coverage raises significant allegations. For instance, while the company that owns the technology provides the hardware and software to UNHCR for free, it reportedly has a partnership with Goldman Sachs as a result of an undisclosed sum. The financial giant allegedly makes a 1% profit each time a person registered with UNHCR makes a transaction. The documentary also reveals that the former head of the British Secret Intelligence Service and a former US Homeland Advisor to George W. Bush both occupy seats on the company's advisory board. Furthermore, its raises concerns about potential data privacy and protection issues, suggesting that the company could access the iris records through the backend of the system without anyone's knowledge.

Cashing in on Crisis: The Refugee Eye Scan Experiment Documentary

In May 2018, I was working as the regional data, identity, and information management officer in the UNHCR Middle East and North Africa (MENA) bureau when I received an email from senior leadership at the Global Service Center, located in UN City, Copenhagen, Denmark, along with other UNHCR staff holding key regional registration and identity management positions related to IrisGuard. The Global Data Service has been at the heart of all of UNHCR's crucial decisions, heated high-level meetings, and coordination activities worldwide related to data. The subject of the email read, "Picture needed: Educating refugees about their data rights." The chain of email communication exchanges that ensued in the following weeks had a very specific purpose: finding a picture that "showed refugee education" to publish in UNHCR's blog post on inclusion (which later became UNHCR's Innovation Service Digital Inclusion Public Website) and responding to a documentary report titled "Cashing in on Crisis? The Refugee Eye Scan Experiment" by journalist Yasmin Fanselow, specifically minutes 2:30 to 3:40, on the use of Iris Scan technology in Jordan. There were no systematic procedures in place for refugees to exercise their right to asylum if they chose not to provide their biometric data to UNHCR or their right to be forgotten once registered. They had no effective means to file a complaint or provide feedback on their satisfaction with the services they received from UNHCR once they were registered. UNHCR has never issued a report on the number of complaints made by applicants about the use of rights and entitlements during the registration process, the nature of these complaints, the outcomes of investigations, and how quickly they were resolved. There were no global means and practical tools to collect and analyse this data as feedback to inform, rectify, and enhance UNHCR's practices. A few regional offices sent in pictures along with ideas for posters and information leaflets, while the MENA region suggested an alternative approach. We did not have a poster ready with the requested focus on "refugee education" in the region. But we proposed to develop one as part of a comprehensive "KnowYourRights" Global Campaign. The documentary raises important allegations; for example, the company IrisGuard has a partnership with Goldman Sachs, the details of which remain undisclosed. While providing this hardware and software technology to UNHCR for free, financial institutions profit 1% each time a person makes a transaction. The documentary also raises concerns about data privacy and protection, suggesting that the company could access the iris records through the system's backend without anyone's knowledge. According to the report, the former head of the British Secret Intelligence Service and a former US Homeland Advisor to George W. both occupy seats on the company's advisory board. I must have watched it at least 10 times to identify the key messaging points for the KnowYourRights Campaign. Watching it again today, I have no memory of having any thoughts or concerns about UNHCR's connection to IrisGuard or discussing it with other concerned staff in any meetings. We did not question or delve into the claims made in the documentary in email exchanges across the globe. We remained within a status quo of the collective institutional culture, which allowed us all to remain silent. IrisGuard eventually became one of UNHCR's primary biometric tools in the MENA region.

On Iris Guard

Kenya

Somalia

South Sudan

Ethiopia

In 2009, the sprawling refugee camps of Dadaab in Kenya, home to over 300,000 souls seeking refuge, saw the introduction of a new verification system. UNHCR's intent was simple: ensure every person was rightfully tied to their given identity document. The system was advanced, deploying biometric fingerprint technology in its early years, and I was at the centre of it. The promise was clear: a more efficient system to prevent fraud and ensure resources were accurately distributed. Yet the reality on the ground painted a different, more complex picture. Engaging with the community primarily involved communication through elected leaders, predominantly male elders from majority clans, inadvertently sidelining women and minority clan voices. Safety concerns restricted our mobility in the camp, often requiring vulnerable residents with severe medical conditions to endure hours-long walks just to reach verification sites. The fear of losing their ration cards, a lifeline in such settings, was palpable. Imagine: 2,000 people congregating daily, anxiety evident in their eyes, trying to prove their existence, identity, and right to assistance. The resulting chaos and tension often led to Kenyan police and soldiers exerting 'reasonable force', which in reality were physical beatings. And then, there were the silent challenges. No structured process existed for residents to contest inactivation or de-registration decisions. Health complications, no matter how severe, didn't guarantee prioritization for resettlement to third countries due to the anticipated high medical costs. This exercise was not just about numbers and technology. It was about people, their hopes, fears, and aspirations. Yet many of these challenges, from the institutional to the human, never made it to official narratives. There was no acknowledgment of the heavy recruitment by Islamist al-Shabab militants within the camps, for fear of inciting political tensions with the Kenyan government or jeopardising funding. The image portrayed was that of a seamless, efficient system. But, as with many things, the true story lay beneath, in the lived experiences of the very people that passed through the verification Rubb Halll in chaos.

Verification Exercise 

Conditioning right to seek asylum on biometric data collection removes the choice element or autonomy on the part of refugees - consent can not be considered to be freely given where the alternative is the denial of being registered and sent back to a country where the person fears to be persecuted, which is a violation of the right to seek asylum. Questions:<ol><li>Is the IrisGuard&nbsp;technology safe?&nbsp;</li><li>Who can access to to the data stored in IrisGuard?&nbsp;</li><li>How are refugees informed of their data rights?</li><li>Do the financial financial instituions e.g.; Goldman Sachs&nbsp;benefit from its use?&nbsp;</li><li>How many people did not consent to provide UNHCR with their biometric data?&nbsp;</li><li>What is the number of people who refuse to provide UNHCR with biometric data?&nbsp;</li><li>What happens to people who did not consent to provide UNHCR with their biometric data?</li><li>What is the number of complaints made by persons of concern to UNHCR in relation to registration services, through which channels they were made, what they were about, and how they were resolved?</li></ol>

Conditioning Right to Seek Asylum on Biometric Data Collection

This guidance is designed to ensure that the registration of individuals of concern is conducted efficiently and in accordance with international standards as a resource for UNHCR staff, partner organizations, and governments involved in the registration and identity management of persons of concern. Below are the key steps and components covered in this guidance:

1. Introduction: This section provides an overview of the entire registration and identity management process. It outlines the importance of registration in the context of UNHCR's work.

2. Working with Governments and Other Partners: UNHCR collaborates closely with host governments and various partners during the registration process. This collaboration is crucial for the successful implementation of registration activities.

3. Planning and Preparing Registration and Identity Management Systems: Planning is a critical phase in registration. This section explains how UNHCR plans and prepares for registration activities, including the selection of appropriate tools and technology.

4. Communicating with Communities about Registration: Effective communication with the affected communities is essential. UNHCR emphasizes the importance of transparent and inclusive communication to ensure that individuals of concern understand the purpose and benefits of registration.

5. Implementing Registration within an Identity Management Framework: Registration is integrated into a broader identity management framework. This section elaborates on how identity management is structured and implemented.

6. Emergency Registration: In emergency situations, rapid registration is essential. UNHCR provides guidance on conducting registration efficiently in emergency contexts.

7. Working with Registration Data: Data management is a critical aspect of registration. UNHCR outlines procedures for the secure collection, storage, and handling of registration data.

8. Continuous Registration and Verification: Registration is an ongoing process. UNHCR explains how continuous registration and verification activities are conducted to maintain accurate and up-to-date records.


UNHCR Guidance on Registration and Identity Management

The UNHCR Data Protection Policy (formally called the ‘Policy on the Protection of Personal Data of Persons of Concern’) sets out the principles and rules relating to how UNHCR processes the personal data of refugees, asylum-seekers and other persons of concern.

UNHCR adopted the Data Protection Policy out of recognition that UNHCR and partner organizations hold, manage and process a lot of information on individual refugees, asylum-seekers and other people to whom it provides protection and assistance. UNHCR also recognizes that the personal information of persons of concern is often highly sensitive.

Here's an explanation of the relevant processes:

Policy Adoption: UNHCR adopts the Data Protection Policy recognizing that it handles significant amounts of personal data from individuals in need of protection and assistance. This data often includes sensitive information.
Protection of Rights: The policy aims to protect the rights of individuals whose information UNHCR holds. This includes ensuring that the processing of personal data aligns with key data protection principles.
Data Collection Purpose: UNHCR commits to collecting data only for specific and legitimate purposes. This means that data is gathered with a clear and lawful reason, such as providing protection and assistance.
Minimal Data Processing: UNHCR processes data only to the extent necessary for the intended purpose. This principle emphasizes data minimization to reduce unnecessary data handling.
Data Accuracy: UNHCR maintains accurate records to ensure the quality and reliability of the data it holds.
Respecting Individual Rights: UNHCR respects the rights of individuals whose data is being processed. This includes respecting their right to privacy and providing mechanisms for individuals to exercise their data-related rights.
Confidentiality: The policy mandates the maintenance of data confidentiality at all times. This involves safeguarding data from unauthorized access or disclosure.
Data Security Measures: UNHCR is required to implement appropriate data security measures to protect the data it holds. This includes measures to prevent data breaches and ensure the integrity of the data.


UNHCR Policy on the Protection of Personal Data of Persons of Concern

Why does UNHCR collect  my biometrics during  registration? 

You have the right to decline or agree to provide your informed consent to UNHCR in writing or through a verbal statement. Different services require different levels of and types of personal detail. UNHCR is obliged to receive your informed consent prior to sharing your information with third parties to benefit from assistance and/or protection provided by UNHCR, and other humanitarian agencies or the host Government. You can withdraw your consent at any point after registering with UNHCR. If you choose to do so, you have the right to receive information on the consequences of the withdrawal.

Right to Informed Consent

Data protection law emerged from the fundamental right to privacy, recognized in the Universal Declaration of Human Rights, other international and regional human rights instruments and national constitutions. In the 1970s and 1980s, data protection laws began to emerge in national laws and regional agreements. in 2023, more 120 countries have adopted data protection or privacy laws and this process continues. The UNHCR Data Protection Policy therefore stands on two legs, the organisation’s international legal mandate towards forcibly displaced persons, and human rights law.

Right to Privacy and Data Protection

The right to seek international protection from persecution in another country by fleeing one's own country.

Right to Seek Asylum

In an effort to bring timely assistance to refugees, Jordan is using iris scan technology to enable them to access their funds. This means they do not need a bank card or PIN code. Currently around 23,000 families living in urban areas in Jordan benefit from monthly cash assistance.

Safeguarding Fundamental Human Rights Thematic Chapter
More than 4.4 million refugees and asylum-seekers have been biometrically enrolled in 48 countries using UNHCR’s biometric systems, such as the biometric identity management system (BIMS) or IrisGuard. By doing so, UNHCR helped partners and host governments to standardize registration and case management practices. ....UNHCR employed iris scanning during the registration of refugees to verify and authenticate identities and instantly enrol them in digital banking. Refugees were then able to access funds without a cash card, meeting their needs with dignity through actions that support the local economy.

UNHCR’s commitment:
Expand the use of biometrics for
refugee registration to a total of
75 country operations by 2020
In 2020, UNHCR met its commitment to use
biometrics for refugee registration in 75
operations globally, against the 2016 baseline of
34 operations. More than 7 out of 10 refugees
currently registered by UNHCR have a
biometrically-anchored digital identity. Over 10
million individuals are currently enrolled. UNHCR
has successfully protected the identities of
persons of concern from theft and substitution
through biometric data collected during
registration. The use of biometrics has also
reduced duplication and management costs for
UNHCR and its partners, including WFP and IOM,
as well as for refugee-hosting States and
resettlement countries.

Welcome to REFUGEE DATA MINDER tutorial!

Tags