The federal government is contemplating introducing new sovereignty principles for government details that would call for certain datasets to be hosted in accredited details centres in Australia.
Govt Services Minister Stuart Robert exposed at a Countrywide Press Club deal with on Tuesday that the government experienced begun “examining the sovereignty requirements” of government datasets.
Problems close to sovereignty were being thrust into the spotlight before this year, when the government opted to use Amazon Internet Services to host its COVIDSafe speak to tracing application.
Although AWS is lawfully needed to host the COVIDSafe details in Australia underneath the unique laws enacted, the move sparked fears that US law enforcement could obtain the details.
Of specific issue is the United States’ Clarifying Lawful Abroad Use of Details Act (the CLOUD Act), which will let for “reciprocal” details obtain with Australia if a bilateral agreement is signed.
Legislation that is viewed as a pre-requisite for Australia to indication a bilateral agreement underneath the US CLOUD Act is at the moment just before Parliament.
While both Prime Minister Scott Morrison and Robert have stressed that Australian legal guidelines would prevail over US legal guidelines in any event, the fears have introduced the problem of sovereignty to the fore.
“When establishing the COVIDSafe application, Australians were being loud and obvious that they be expecting government to respect their privateness and have their details saved, secured and secured right here in Australia,” Robert stated.
He stated that there was now a need to have for government to “acknowledge community anticipations and be clear about how we manage the facts that Australians are worried about sharing with us”.
“Accordingly, I can announce we are examining the sovereignty requirement that must use to certain datasets held by government, in addition to the current Shielded Security Coverage Framework,” Robert stated.
As component of this, the government will appear at whether or not “certain datasets of concern” – possible these relating to sensitive personalized facts – must be “declared sovereign datasets”.
These datasets would only be ready to be “hosted in Australia, in accredited details centre, throughout Australian networks and only accessed by the Australian government and our Australian provider providers”
“We need to have to make certain that Australians can trust that government will properly manage the facts that they present to us – whether or not it is for a tracing application or for the Census,” Robert stated.