of the data. Integrity means that the data must be kept authentic, complete and protected against improper or accidental modification and destruction. Birth certificates should include some security feature or features that enable fraud or alteration to be detected, and as a preventive measure against malpractice. 77. Integrity also refers to the integrity of the computers, networks and software that comprise the civil registration system, which must be secured from unauthorized penetration or the possibility of falsification of data. Confidentiality implies preserving authorized restrictions on access and disclosure including protecting personal privacy and proprietary data. Availability refers to ensuring timely and reliable access to and use of the data, which must available for ease of retrieval when required. Where paper files are used, these must be systematically stored and catalogued for eventual retrieval, modification or updating of data. Back up measures must be in place to ensure that the data is not completely lost in case of destruction of the original information by possible disruptive events such as natural disasters, wars, accidents, power failures, fire or attacks. 78. The legal framework must particularly address issues such as the responsibilities of internal staff that access or process the data on a day to day basis (civil registrars, archivists, cleaners or system administrators), external staff where IT services are outsourced and third party service providers (mobile network operators; internet service providers). Where the civil registration system functions in collaboration with, or is interconnected to, hospitals, clinics, national statistics office and/or other government agencies, the legal framework for protection of personal data must also provide for the responsibilities of those working in those agencies that have access to, or process, the vital information at issue. The legal framework must also provide for the requisite control mechanisms to ensure the data is always safe and prompt action is taken in case of any security threat to it. 5.2.2.3 79. Registration immediately after birth The Charter provides for registration of every child immediately after birth. The Committee interprets “immediately” to mean as soon as possible, with due 28

Select target paragraph3