Stories over the past several months have pointed at some of the biggest names in technology as having participated with the government to turn over access to user data. The NSA-backed PRISM project allegedly involved user data from Google Inc (NASDAQ:GOOG), Apple Inc. (NASDAQ:AAPL), Facebook Inc (NASDAQ:FB), and Microsoft Corporation (NASDAQ:MSFT). Other reports claimed that Verizon Communications Inc. (NYSE:VZ), under the compulsion of a secret court order, had turned over months of customer call data. Now a new report reveals that the U.S. government is tapping SecureKey Technologies to allow it to issue secure online IDs to give users a single point of access to various government services and databases.
In the aftermath of what has been billed as one of the biggest invasions of privacy ever, the idea that you should trust the federal government to safeguard private information sounds absurd. From an investment perspective, particularly as we move closer and closer to the initiation of the Affordable Care Act – also known as Obamacare – the potential costs, savings, and shifting of responsibilities could prove significant. While the story has far-reaching political implications, it will have an impact on a range of companies and is worth tracking for serious investors.
The driving initiative
The driving force behind the selection of SecureKey is President Obama’s National Strategy for Trusted Identities in Cyberspace, or NSTIC. In 2011, the President said that a “secure cyberspace is critical to our prosperity.” The idea being pursued is to give users a single secure ID that will grant him or her access to a variety of government agencies.
Additionally, the Federal Cloud Credential Exchange, or FCXX, is designed to give a single password to users to interact with different agencies covering such topics as health benefits, student loan data, and retirement information. One of the ideas behind the program is to keep the actual identities of users confidential from the agency, the third-party vendor, and anyone wishing to snoop. Of course, in light of the recent alleged NSA activities, the idea of storing health and financial data under one password should give us all pause.
The Verizon case
To put some of these security issue in context, the Verizon case is instructive. In response to the barrage of bad press, the company issued a release in which it highlighted that if such a court order had existed, it would have compelled the company to release information, and it would have required that the company make no disclosure that the order ever existed. In other words, Verizon wanted to tell the world without explicitly violating the requirement of secrecy that it was forced to comply and keep quiet about it. Ultimately, what the Verizon case — and PRISM — demonstrate is that consumer data is subject to government discovery without disclosure.
