Saps Police Clearance Certificate a Concern for Security?
I am a regular travel writer and contributor to our company blog, and most of my inspiration comes from my business trips. There is always something new and exciting that gets me writing; this time inspiration came from a fellow business traveller to Dubai.
I just returned from my 5th business trip to Dubai. Recuperating from Jet lag, my thoughts returned to the thought provoking conversation. Let me explain. It’s been four years since my first work trip to Dubai and my 90-day multiple entries work Visa is close to expiring, which got me thinking of the whole ordeal I initially had to go through to get it in the first place. Without realizing, my conversation with George kicked in forcefully, George is the gentleman who sat next to me on the plane.
Let me go off in a bit of a tangent. Just so it all makes sense. When you first apply for a work visa to Dubai, you need a Police Clearance Certificate or a PCC for short. Why you might ask? As part of your visa application you are required by the UAE immigration authorities to provide this document. A police clearance certificate is an official document issued to you as a result of a background check by SAPS or any government agency to enumerate any criminal records that the applicant may have. Simply put it’s a document to state you have no criminal record and are of good character.
As we all know the thought of dealing with any Government organization in South Africa can be a daunting prospect. There had to be a simpler and more efficient way to do it I thought after having researched the requirements, and process online. So, I turned to an old friend, whom also has travelled to Dubai for work a couple of time. He recommended I contact Visa Logistics or as he more eloquently put it the “visa facilitation experts”!
Personal recommendations are always good, not that I distrust Bruce, I just like to do my homework first before making any important decisions. They passed my scrutiny, so I decided to give them a go.
In 6 working days, I received my academic and employment documents authenticated. My PCC took three days. So, seven days to complete the whole process including my first work visa for Dubai ‘yay- great!’ I thought. Since they made it a day earlier than their 8 days’ deadline.
Getting back to my reason for writing this article. I shared my positive experience, and the continuing good service I have had with Visa Logistics when conversion with a fellow business traveller to Dubai, called George turned to the increased costs of Visa’s.
Turns out you can’t even trust the Police these days to keep your Personal Information Safe, and all the information you provide to SAPS in order to get a PCC all goes to India! India of all Places. I smelled a rat! George could not have said it better.
“Chris, this whole biometric / PCC thing. Honestly, I’m okay with it. But just the thought of your personal details being in the hands of a private company, and not even a South African Company but an Indian Company?! Do you really appreciate the implications?”
I was stunned and left speechless by the rest of his revelations.
Turns out that all Police Clearance certificates issued in South Africa are processed by a company called VFS Global. Nothing wrong with that you say, they are a registered company with South African offices and employees. They pay their taxes and are above reproach. BUT what they do not tell you is that all your personal data is sent to India for processing and verification?! It sounded like a bad dream. Our own government willingly allows your private information to be sent half way around the globe, but more worryingly is the fact that once there they have no juridical power or recourse to stop or prosecute anyone in the case of data theft.
This could not be true! So, I reached out to an old high-school friend, now a decorated Professor in Law, specialising in Constitutional Law. Turns out every word is true.
I had to dig deeper, this I what I found:
· http://www.tourismupdate.co.za/article/108876/VFS-So-many-questions-such-little-time
I am no legal expert, but when an expert in the legal field cries wolf then you should sit up and take notice! We live in a world where cyber-crime and identity theft is becoming more and more common place.
According to the FBI, “identity theft occurs when someone unlawfully obtains another’s personal information and uses it to commit theft or fraud.” The type of personal information could be anything from general data, like your name or address, to more specific data …
Quoted an online source.
Cyber-crimes in South Africa is predominantly rooted in stolen personal details. “Cyber-crime and Identity theft in 2014 sat at 69% threats compared to 37% of global respondents;” ‘Business Day’ reports. And “R2.2 billion lost due to cyber-crime same year.”
‘CNBCA.com,’ recorded R1 billion-worth identity theft cases annually. On the other end, one of India’s magazine has been quoted saying:
As per the India Risk Survey Report, 2014, there has been an 11% increase in … identity theft in India, followed by a 9% increase in Phishing attacks. In 2013, India had been ranked amongst the top 5 countries with the most number of cybercrimes …
With this in mind, I now understand George’s concerns. Whether biometrics or fingerprints are used to verify your identity, your personal information is still at risk. This includes your academic and financial details, depending on the type of Visa you require and the destination.
Knowing the above facts, should we not be entitled to know; who is storing this data in the first place, what they store and for how long? Not to mention their capability to protect and safeguard our personal data?
Has no one learned anything from GDPR or the recent Facebook data breaches?
Are we not increasing the opportunity and risk of identity theft, by allowing a third party (that is not even in South African Jurisdiction) access to our data? And if so, is it not increasing the possibilities of fraud and cyber-crimes?
What happens when a South African citizens’ personal information gets compromised. Who will be held accountable: The Police? DHA? Or VFS?
If a private company is implicated, under what law will they be held liable and prosecuted for the data breach?
What is even more disturbing is the Immigration Act 13 of 2002 as amended and its corresponding Immigration Regulations of 2014 legalises and authorises the transfer of our personal data to a 3rd party that resides outside of South African jurisdiction.
It is infuriating, that, and I quote:
“Despite the high level of cyber-crimes, there is a startling level of low conviction rate in India. With around 354 Million internet users in India, and … the fact of rising number of cyber-crimes and low conviction rates is problematic. “
“The Centre for Internet and Society.”
Knowing this does not instil a great degree of trust and faith in the Department of Home Affairs or SAPS.
The extremely worrying fact is, you and I have no say. If you want a visa to Dubai for example, looking to immigrate or need a PCC for any other reason you have no choice but to hand over your personal details.
We can all just pray and hope it does not fall into the hands of Criminals, and I am happy that I originally decided to use a company that actually knows what they are doing, and who’s staff is not just ticking of boxes on a list.
Please share this article with all your friends, acquaintances and work colleagues, they have a right to know!