Skip to content

Part I — Who counts, and what they are owed

2. What the Record May Say

The record can say that Nell was born. A free-form description of what kind of person Nell is has nowhere to go: the vocabulary is declared, and a report must use an admitted kind of entry before the rules will accept it.

The tests try to record that Adam is rich or dangerous. Both entries are refused, because those kinds of assertion lie outside the constitutional record. The refusal says nothing about Adam's wealth or conduct. It says what this record may contain.

The admitted kinds include births and encounters, employment and teaching, injuries and judgments, relationships, proposals, appointments, receipts and challenges. They also include specified evidence about sources, review periods and whether a status continues from one version of the record to the next. Some are direct observations; others report a finding someone has already made.

Personhood itself may be entered directly or follow from the roots in the previous chapter. The name used at first contact may be temporary. Standing can begin under it before a civil identity is reconciled, and a birth entry and a first-contact name each leave civil identity unauthenticated.

What is missing

The admitted kinds include no general field for reliability, deservingness, productivity or predicted risk, and an institution can add one only through a visible change to the constitution's text. The constitutional record also leaves out any unrestricted file of someone's wealth, religion, ancestry, politics, health or associations.

That limit leaves room for the records an operating society needs. A record kept for a particular lawful purpose has its own permissions, access rights and limits on use, set out in the chapter on what may be kept about you. Permission to hold a record covers that purpose; copying its contents into every constitutional decision about the person falls outside it.

Economic records illustrate the distinction. A contribution entry records a payment into a named scheme; it can support a supplement above the floor, and standing, essentials, liberty and the vote are decided without reading it. A compensation entry records a promised payment of a named kind. A competence entry records an authorised attestation of a function. Each speaks to one arrangement and assesses nothing general about the person it names. Where worker status, title, liability, licensing, taxation, credit, insolvency, private economic power or scarcity need a decision, the constitutional record takes the narrow, challengeable result needed for the specified purpose, and that result must meet its route's requirements for authority and review.

Other entries have narrower reach. Recording that Hano has a family leaves his placement where it was, and a family entry has no route to harsher confinement. Reviewer independence needs a positive finding for the case, which an absent parent, marriage or sibling entry leaves unmet. Recording care as employment records work; delivery, consent and authority to decide for another person each need evidence of their own. An adulthood entry in the required form can support the ballot conclusion, while the legal status of adulthood originates outside the entry.

The design still classifies. It distinguishes adjudicated acts and draws consequences from them: severity binds the person, case and incident, and a severity finding in one case lends nothing to placement in another. That is a rating, and it matters for confinement. What the record excludes is a freely writable general verdict on personal worth.

The closure has a cost. An official convinced that someone is dangerous has no entry in which to say so. The belief reaches the person only through a properly made finding or order, with the evidence and review its route requires, and until then it changes nothing the rules conclude about them. The people a real danger would harm wait for that finding, and a person served by several offices may have to give each one the facts its own purpose needs.

Facts and conclusions are kept apart

The record says that Hano injured another person and that the Court judged Hano. Those are inputs. That Hano is a prisoner is a conclusion: it follows through the injury, the judgment, the cited case and the required conviction and custody evidence, and it also depends on the relevant protections and grounds for refusal. An injury and a judgment are only part of the authority to confine.

Try to bypass that route by writing directly that someone is a prisoner. The entry is refused. So are direct assertions of public answerability, of severity and of a credibility finding. These are reserved conclusions: a writer records their premises, and the rules determine what follows.

Public answerability follows from an institution's public status or from a seating by the electorate or the convocation. The Court has it through its public-body entry; a person the convocation seated has it through that seating. Answerability differs from permission to judge, and the later chapters distinguish it from an examiner's authority to sign findings and from authority for a particular public act.

Severity shows why the premises must be read together. The underlying case needs properly made criminal proof, adjudicated defences and fair procedure. An independently reviewed finding of grave injury or aggravated cruelty must identify the subject, case, incident, person harmed, evidence and procedure. Severity rests on those findings alone. A count of people injured, or a raw entry of attack or cruelty, adds nothing to it.

In a test, a person the Court judged in a cited case has a raw attack entry against one person and a cruelty entry against another, and severity stays absent. It stays absent when cruelty against the person already attacked is added. The placement chapter follows cases with properly made grave-injury and aggravated-cruelty findings. Those findings permit consideration of secure placement, and a separate decision must show why a less restrictive place is insufficient. Choosing a destination and holding current authority to confine each need more than severity.

A bare claim that the Court is broken likewise leaves the custody cases in place. A defect in a court's jurisdiction or independence needs a properly made disposition of the affected case, identifying the subject, offence, ground, evidence and independent appellate actors, and the appeal is decided by actors other than a party or the original adjudicator. Successful review ends the affected authority in that case alone; the injury record stays, and the review itself releases nobody. The chapter on findings about people follows that relief.

How many people must act before a record takes effect depends on what the record does. A record that only gives or preserves something for the person it concerns, such as an accommodation, continuing care, access to a hearing, interim protection or a claim that opens review, takes effect on its source's record alone, and the independent reviewer it names owes prompt review and can withdraw it. A record that restricts, takes, confines, finds against somebody or gives one person power over another takes effect only after its independent attesters and reviewer agree. Help given on one actor's record stays help: the completed record that other rules read still needs the full procedure, so harm gains no shortcut through it.

One examination is not a credibility finding

A credibility finding in force keeps its subject's signature from counting toward a new credibility finding; it leaves personhood and the floor intact.

The record holds a single examination of Esa, the examiner's only recorded act. Esa's credibility is untouched, and so is the examiner's for having made it. The paired route requires distinct examiners, each authorised to sign, matching findings about the same subject, incident, ground and evidence, and positive independence authority for that case. Permission to make a finding also checks the signers' current disqualifications. Personal consequences require the completed case and its historical eligibility and procedure. The chapter on findings about people follows those conditions and the case-specific route to restoration.

The shield case separates an accusation from the adjudication it needs. A person has exposed an answerable official, and an accepted raw entry alleging that the discloser deceived that official leaves the exposure without a finding in force: the shield continues, and the prisoner conclusion stays blocked. A raw accusation likewise falls short of a personal credibility finding, which must bind its subject, incident, evidence and independent reviewers.

Changing the vocabulary

A new kind of entry needs a declaration placed before its first use, and a declaration made afterwards leaves an earlier refusal standing. An editor can nevertheless declare new vocabulary and use it in the source. The declaration requirement makes that a source change; it shows the change and leaves open whether the editor had authority to make it, and whether the new word hides a judgment that should need a decision of its own. A proposal's declared target shows neither its effects nor authority to enact it: the lawful route reviews the exact replacement text, as the amendment chapter shows.

The record also changes from one version to the next. A status recorded in an earlier version counts in the version in force only where independent witnesses keep it there; the method's section Versions of the record sets out how. Standing works the other way round, because it protects. An accepted later version must state that a witnessed standing is kept. Omitting that statement erases neither the protection nor the evidence of the mismatch: the standing continues, and the omission is marked as a defect.

What this cannot settle

Personhood is itself admitted vocabulary. A fabricated person entry gives a name every floor right and the freedom to move, and a report that someone's sentence is finished makes a person of the name it gives; a fabricated birth or encounter does the same for any name other than a known public body's. Nothing in the rules asks whether a human being answers to the name.

A forged or withheld adulthood entry bears directly on the ballot conclusion; the age behind it, and any outside clock, go unverified here.

The rules forbid a direct verdict while accepting a reported finding that can have almost the same effect. Naming the finder and requiring independent review make responsibility for that finding explicit. The distinction between one examination and a credibility finding holds for the case above; it leaves open what an investigation costs the person investigated, and what a single finding may do elsewhere in the design.

The defect marker for a missing standing statement shows a mismatch between recorded versions and leaves its cause open. The rules lack any representation of a lawful retirement of the protected entry, so the marker reports the statement as missing even where an outside account would call the removal proper. It falls to people outside the record to find an encounter nobody reports, detect a deletion before the compared records, establish an honest witness or make the next record arrive.

The child with nobody

Nell's birth entry is admitted, and personhood follows. The test also tries to enter a classification of Nell as vulnerable, and the closed vocabulary refuses it as an unknown word before any rule could read it. Nell's protection follows from personhood alone, and nothing adverse follows from the birth entry: Nell's credibility is untouched.

With the standing root present, the next question is what every person is owed.

Run it: the companion runs this chapter's cases on your own device, at dhilipsiva.dev/rights-nobody-has-to-earn/cases.

Argument: Why the record is closed by name

The companion states these rules as Articles 2 and 31.

I close the record by name because an entry about a person travels. Once an official or a system may write that someone is unreliable, undeserving or a risk, the next office reads that entry as a fact another office checked, and the person meets a conclusion with no act behind it to contest. Where files and labels have travelled, the people described bore the error. Australia's Royal Commission found that Robodebt, which raised welfare debts by averaging income data from the tax office, was "a crude and cruel mechanism, neither fair nor legal"; some 381,000 people were refunded.[1] The Dutch childcare-benefits affair, which opens Part II, is another. Virginia Eubanks argues that the most invasive and punitive automated systems are aimed at the poor.[2] Admitting only declared kinds of entry, and reserving confinement, answerability, severity and credibility findings as conclusions that must follow from recorded premises, ties each adverse conclusion to an act somebody recorded and a finder who can be named. Helen Nissenbaum's contextual integrity names the norm: information should flow by the norms of its context.[3]

The strongest alternative is the integrated case record: a joined account of what agencies know, used with discretion and risk-based targeting. Governments hold it when they build systems such as SyRI, the Dutch state's risk-indication system for benefit, allowance and tax fraud. It promises that a person tells their story once, that a need seen in one office reaches another, and that fraud diverting money from entitled people is found. Its best evidence is the 2020 judgment against SyRI: the District Court of The Hague held the legislation incompatible with Article 8(2) of the European Convention on Human Rights, yet found the instrument neither unsuitable nor disproportionate in itself, and faulted its safeguards, transparency and verifiability.[4] European data protection law bounds it without closing the file: it bars further processing incompatible with a record's purpose, and gives a right against decisions based solely on automated processing that significantly affect a person, with exceptions.[5]

Against that alternative my rule has a price. People who need several services repeat their account, because each record serves its own purpose; the cost falls hardest on those who struggle to explain themselves or need someone to speak for them. A need written in one office's file can go unseen by the next. An official's accurate suspicion must become a properly made finding before it counts against anyone, and the people it would protect wait meanwhile. I accept that price because an open file's errors arrive as conclusions a person must disprove, and the closed record makes the office bring a properly made finding first.

I would reconsider if integrated records with contest before effect and independent review were shown, for the people least able to contest, to produce fewer wrongful adverse decisions than purpose-bound records, or if people whose need sat in one office's file were shown to go unfound for want of a joined account.


Notes

  1. Royal Commission into the Robodebt Scheme, Report (7 July 2023), vol. 1, pp. xxvi–xxix. ↩︎

  2. Virginia Eubanks, Automating Inequality: How High-Tech Tools Profile, Police, and Punish the Poor (New York: St. Martin's Press, 2018). ↩︎

  3. Helen Nissenbaum, "Privacy as Contextual Integrity", Washington Law Review 79 (2004), 119; Privacy in Context: Technology, Policy, and the Integrity of Social Life (Stanford, CA: Stanford University Press, 2010), ch. 7, https://doi.org/10.1515/9780804772891. ↩︎

  4. District Court of The Hague, 5 February 2020, ECLI:NL:RBDHA:2020:865 (English translation ECLI:NL:RBDHA:2020:1878), paras 6.77, 6.86, 6.95 and 7.2. ↩︎

  5. General Data Protection Regulation, Regulation (EU) 2016/679, Articles 5(1)(b) and 22. ↩︎

dhilipsiva · prose CC BY 4.0MarkdownSources & licencesAgent index