You see, in Norway, all well known news or business portals have enabled a form into the Skattelister (tax records) data set . So, if you are curious enough to know how much a friend of yours made throughout a tax year, you type his/her first and last names and then you get all sorts of nice information such as:
- The exact amount of income of the person.
- The exact amount of tax they paid.
- The exact valued/declared amount of other property entries they have
- Nice comparative graphs to see how the person's income compares to the national/regional/average.
- Nice economic indicators of your income expressed in percentage of tax contributed to useful things (i.e. you paid %percentage of a stipendship salary, of a hospital operation).
On the other hand, the data availability creates certain information and generic security risks. I explain what I mean:
- Each tax record reveals your age (4 digits). Every Norwegian has a social security number (fød.nummer) of 11 digits in the form ddmmyynnnnn. Two of these digits are revealed. So, no big problem for brute force attacks, but still, there are other laws that prohibit the display of the year of birth without the permission of the individual.
- The same goes for your postcode (and hence the full details of your house address).
Apart from privacy concerns and identity theft scenarios, who is the idiot that decided that my entire data should be online to everyone, without my permission? The Norwegian Data Protection authority is sleeping quite heavily at the moment. Somebody should wake them up!