This Article Abstract Free Full Text (Free PDF) Free Alert me when this article is cited Alert me if a correction is posted Services Email this article to a friend Similar articles in this journal Alert me to new issues of the journal Add to Saved Citations Download to citation manager Request Permissions Request Reprints Add to My Marked Citations Citing Articles Citing Articles via Google Scholar Citing Articles via Scopus Google Scholar Articles by Stefanick, L. Search for Related Content Social Bookmarking                         What's this?

Outsourcing and transborder data flows: the challenge of protecting personal information under the shadow of the USA Patriot Act

Centre for State and Legal Studies, Director, BPA Program Council, Athabasca University, Canada

Governments are increasingly outsourcing service provision to private contractors in an effort to realize cost efficiencies. The passage of the USA Patriot Act, however, has caused concern that government outsourcing of data management to US-based companies could result in the violation of fundamental civil liberties. What follows is a case study of a Canadian provincial government's plan to out-source the administration of a public health insurance and drug plan to a Canadian subsidiary of an American company. Within the context of the larger international concern about the reach of the USA Patriot Act, the article discusses the Canadian response to the fear that outsourcing will compromise the security of personal health information. It concludes that while different privacy protection experts worldwide have drawn different conclusions as to the implications of the USA Patriot Act, the ability of governments to protect the large amounts of data that are entrusted to them is becoming increasingly difficult.

Points for practitioners

Globalization and electronic communication not only challenge the sovereignty of the nation-state, but complicate the environment that both companies and governments `do business' in. This is particularly true given the swift passage of the USA Patriot Act 45 days after the September 11 attacks on New York's twin towers. This study of public sector data management outsourcing demonstrates that accountability, transparency and control over governments and their agents must not be compromised in the face of high profile demands to enhance national security or due to more mundane pressure to increase administrative efficiency.

Key Words: accountability • administrative secrecy • data management • data security • national security • privacy protection • service delivery • transparency

References

• American Civil Liberties Union (2001) `Threats to Civil Liberties Post-September 11: Secrecy, Erosion of Privacy, Danger of Unchecked Government', 14 December 2001, http://www.aclu.org/natsec/gen/14346prs20011214.html, accessed 9 February 2006.
• American Civil Liberties Union (2006) `Oppose the Overreach of Police Powers', 10 May 2003, http://www.aclu.org/natsec/gen/14483res20030510.html, accessed 9 February 2006.
• Anderson, Nate (2007) `Terrorist Financing: What's Illegal in Belgium is Required in the US', ars technical, 16 February 2007, http://arstechnica.com/news.ars/post/20070216-8864.html, accessed 24 April 2007.
• Black, Heather (2005) Speech to the 11th Annual Meeting on Regulatory Compliance for Financial Institutions, 11 November 2005, http://www.privcom.gc.ca/speech/2005/sp-d_051118_hb_e.asp, accessed 17 January 2005.
• Bourgon, Jocelyn (2007) `Responsive, Responsible and Respected Government: Towards a New Public Administration Theory, International Review of Administrative Sciences 73(1): 7—26.[Free Full Text]
• British Columbia (1996) Freedom of Information and Protection of Privacy Act, RSBC 1996.
• British Columbia (2003) Personal Information Protection Act, SBC 2003.
• British Columbia (2005) `British Columbia Government Service and Employees Union versus British Columbia', Minister of Health Services, BCSC 446.
• British Columbia Government Service and Employees Union (2004) `Submission on the USA Patriot Act', submitted to the Office of the Information and Privacy Commissioner for British Columbia, 6 August 2004, http://www.bcgeu.ca/2437, accessed 10 February 2006.
• Canada NewsWire (2004) `Officials Scrambling to see if FBI can get Information through Companies', Canadian Press NewsWire, Toronto, 4 March 2004, http://0-proquest.umi.com.aupac.lib.athabascau.ca:80/pqdweb?did=579730051&sid=5&Fmt=3&clientld=12302&RQT=309&VName=PQD, accessed 12 January 2006.
• Canada, Treasury Board Secretariat (2006) Guidance Document: Taking Privacy into Account Before Making Contracting Decisions, http://www.tbs-sct.gc.ca/pubs_pol/gospubs/TBM_128/gd-do/gd-do_e.asp, accessed 11 August 2006.
• Cavoukian, Ann (2005) `Privacy and Business: Go Beyond Compliance to Competitive Advantage', address to the Rotman School of Management, Executive MBA Program, 18 March 2005, http://www.ipc.on.ca/scripts/index_.asp?action=31&P_ID=11527&N_ID=1&PT_ID=21&U_ID=0, accessed 14 February 2005.
• Clinton, Bill (1995) State of the Union Address, The American Presidency Project, http://www.presidency.ucsb.edu/ws/index.php?pid=51634, accessed 8 December 2006.
• Drechsler, Wolfgang (2005) `The Rise and Demise of the New Public Management ', Post-autistic Economics Review 33, 14 September 2005, article 2. see http://www.paecon.net/PAEReview/issue33/Drechsler33.htm, accessed 7 December 2006.
• Dunleavy, Patrick, Margetts, Helen, Bastow, Simon and Tinker, Jane ( 2006) Digital Era Governance: IT Corporations, the State, and E-government. Oxford: Oxford University Press.
• Holmes, Douglas (2001) eGove: eBusiness Strategies for Government. London: Nicholas Brealey Publishing.
• Korunka, Christian, Scharitzer, Dieter, Carayon, Pascale, Hoonakker, Peter, Sonnek, Angelika and Sainfort, Francois (2007) `Customer Orientation among Employees in Public Administration: A Transnational, Longitudinal Study', Applied Ergonomics 38(3): 307—15.[CrossRef][Web of Science][Medline] [Order article via Infotrieve]
• Loukidelis, David (2004) Letter to the British Columbia Minister of Management Services, 29 October 2004.
• National Immigration Project (2005) `HIV/AIDS and Immigrants: A Manual for HIV/AIDS Service Providers', http://www.nationalimmigrationproject.org/HIV/2004HIVManual/2004hivmanual/page7.html, accessed 17 January 2006.
• Nojeim, Gregory T. (2001) `Threats to Civil Liberties Post-September 11: Secrecy, Erosion of Privacy, Danger of Unchecked Government', American Civil Liberties Union Press Release, 14 December 2001, http://www.aclu.org/natsec/gen/14346prs20011214.html, accessed 14 February 2006.
• Office of the Alberta Ombudsman (1997) Annual Report (31). Edmonton, Alberta.
• Office of the Information and Privacy Commissioner for Alberta (2004) `Alberta's Information Commissioner undertakes review of public sector outsourcing', Press release, 15 December 2004.
• Office of the Information and Privacy Commissioner for British Columbia (2005a) Annual Report. Victoria, BC.
• Office of the Information and Privacy Commissioner for British Columbia (2005b) Privacy and the USA Patriot Act: Implications for British Columbia Public Sector Outsourcing. Victoria, BC.
• Office of the Privacy Commissioner of Canada ( 2006) `Privacy Matters: The Federal Strategy to Address Concerns about the USA PATRIOT ACT and Transborder Data Flows', http://www.tbs-sct.gc.ca/pubs_pol/gospubs/TBM_128/pm-prp/pm-prp_e.asp, accessed 11 August 2006.
• Office of the Privacy Commissioner of Canada ( 2007) `Privacy Commissioner Examines Transborder Financial Transactions ', News release, 2 April 2007, http://www.privcom.gc.ca/media/nr-c/2007/nr-c_070402_e.asp, accessed 1 May 2007.
• Osborne, David and Gaebler, Ted (1992) Reinventing Government. New York: Plume.
• Privacy International (2006) `Pulling a Swift One? 27 June 2006, http://www.privacyinternational.org/article.shtml?cmd%5B347%5D=x-347-538978, accessed 6 December 2006.
• Public Policy Forum (2004) ` IT Offshore Outsourcing Practices in Canada', Public Policy Forum and Information Technology Association of Canada Roundtable, Ottawa, ON, 20 May 2004.
• Richard, Elisabeth (1999) `Tools of Governance', in Barry N. Hague and Brian D. Loader (eds) Digital Democracy: Discourse and Decision Making in the Information Age, pp. 73—86. London: Routledge.
• Roberts, Alistair (2006) Blacked Out. Cambridge: Cambridge University Press.
• Savage, Charlie (2006) `Bush shuns Patriot Act requirement: In addendum to law, he says oversight rules are not binding', The Boston Globe, 24 March, http://www.boston.com/news/nation/washington/articles/2006/03/24/bush_shuns_patriot_act_requirement/, accessed 7 December 2006.
• Savoie, Donald (1995) `Globalization, Nation States and the Civil Service ', in B. Guy Peters and Donald J. Savoie (eds) Governance in a Changing Environment, pp. 82—110. Montreal: McGill-Queens University Press.
• Schachter, Harvey (1994) `Revolution from Within', Canadian Business November 31—47 as quoted in Sandford Borins (1995) `A Last Word', Canadian Public Administration 38(1): 137—8.
• Sindane, Abakholwa Moses (2004) `Public Administration versus Public Management: Parallels, Divergences', International Review of Administrative Sciences 70(4): 665—72.[Abstract]
• Smith, Peter Jay (2004) `New Information Technologies and Empowerment: The Implications of Politics and Governance', in E. Lynn Oliver and Larry Sanders (eds) E-government Reconsidered: Renewal of Governance for the Knowledge Age, pp. 135—49. Regina: Saskatchewan Institute of Public Policy Publications.
• Sterling News Service (2004) ` US Threat to BC Citizens' Privacy under Review', British Columbia, 28 May 2004, http://0-proquest.umi.com.aupac.lib.athabascau.ca:80/pqdweb?did=645967311&sid=1&Fmt=3&clientld=12302&RQT=309&VName=PQD, accessed 17 January 2006.
• Swift (2006) `SWIFT supports calls for debate to move beyond data privacy to security and public safety ', Press release 16 November 2006, http://www.swift.com/index.cfm?item_id=60784, accessed 7 December 2006.
• Thatcher, Margaret (1986) Speech to the Conservative Party Conference, Bournemouth, Hampshire, 10 October 1986. See Margaret Thatcher Foundation, Speeches, http://www.margaretthatcher.org/speeches/displaydocument.asp?docid=106498, accessed 7 December 2006.
• Torres, Lourdes, Pina, Vincente and Acerete, Basilio (2006) `E-governance Developments in European Union Cities: Reshaping Government's Relationship with Citizens ', Governance: An International Journal of Policy, Administration, and Institutions 19(2): 277—301.
• USA Patriot Act (2001) Pub. I., No. 107—56, 115 Stat. 272.
• Victoria Times Colonist (2004) ` Officials scrambling to see if FBI can get information through companies', Canadian Press NewsWire, 4 March 2004.
• Wilby, Peter (2007) `Nanny Knows Best', New Statesman, 16 April 2007.
• Zureik, Elia (2004) `Appendix A: Overview of Public Opinion Research Regarding Privacy', Queen's University, March 2004, http://www.queensu.ca/sociology/Surveillance/files/Overview_Appendix_A.pdf, accessed 6 December 2006.

International Review of Administrative Sciences, Vol. 73, No. 4, 531-548 (2007)
DOI: 10.1177/0020852307083456


CiteULike    Complore    Connotea    Del.icio.us    Digg    Reddit    Technorati    Twitter    What's this?

This Article Abstract Free Full Text (Free PDF) Free Alert me when this article is cited Alert me if a correction is posted Services Email this article to a friend Similar articles in this journal Alert me to new issues of the journal Add to Saved Citations Download to citation manager Request Permissions Request Reprints Add to My Marked Citations Citing Articles Citing Articles via Google Scholar Citing Articles via Scopus Google Scholar Articles by Stefanick, L. Search for Related Content Social Bookmarking                         What's this?