of the data. Integrity means that the data must be kept authentic, complete and
protected against improper or accidental modification and destruction. Birth
certificates should include some security feature or features that enable fraud or
alteration to be detected, and as a preventive measure against malpractice.
77.
Integrity also refers to the integrity of the computers, networks and software
that comprise the civil registration system, which must be secured from unauthorized
penetration or the possibility of falsification of data. Confidentiality implies preserving
authorized restrictions on access and disclosure including protecting personal
privacy and proprietary data. Availability refers to ensuring timely and reliable access
to and use of the data, which must available for ease of retrieval when required.
Where paper files are used, these must be systematically stored and catalogued for
eventual retrieval, modification or updating of data. Back up measures must be in
place to ensure that the data is not completely lost in case of destruction of the
original information by possible disruptive events such as natural disasters, wars,
accidents, power failures, fire or attacks.
78.
The legal framework must particularly address issues such as the
responsibilities of internal staff that access or process the data on a day to day basis
(civil registrars, archivists, cleaners or system administrators), external staff where IT
services are outsourced and third party service providers (mobile network operators;
internet service providers). Where the civil registration system functions in
collaboration with, or is interconnected to, hospitals, clinics, national statistics office
and/or other government agencies, the legal framework for protection of personal
data must also provide for the responsibilities of those working in those agencies that
have access to, or process, the vital information at issue. The legal framework must
also provide for the requisite control mechanisms to ensure the data is always safe
and prompt action is taken in case of any security threat to it.
5.2.2.3
79.
Registration immediately after birth
The Charter provides for registration of every child immediately after birth.
The Committee interprets “immediately” to mean as soon as possible, with due
28