Some call T's new Charlie Card an invasion of privacy

When T riders swipe their new Charlie Cards to get on board, some civil libertarians fear, commuters could be letting loose personal and financial information.

The new automated fare collection system, which will debut on the Blue Line's Aquarium and Airport subway stations within the next month, uses cards that contain a computer chip and can be loaded with money, which is automatically debited at fare gates.

The new card can also be linked to a credit or debit card, similar to an option offered by the Massachusetts Turnpike's Fast Lane electronic toll system. A test of the system started on Silver Line buses in February.

The technology is seen as a boon for the aging T system, allowing the MBTA to track riders, cut down on fare evasion, and create a more efficient transit operation, officials said.

But while MBTA officials say customers can keep their privacy because they can buy Charlie Cards without giving any personal information, others say the system is ripe for identity theft.

They say it's possible that hackers could get into T computers and steal personal data or that information could be released by mistake. And they say hackers could try to get information on credit or debit cards through the Charlie Cards' links to them.

''It will be a magnet for identity thieves seeking to get this information, and the worst thing is that consumers have no idea this is going to happen to them," said state Senator Jarrett T. Barrios.

A draft of the T's new privacy policy, which was obtained yesterday by the Globe, prohibits sharing information with anyone other than the person to whom it belongs ''unless subject to legal proceedings, a subpoena, court order, or threat of imminent harm to the cardholder or others."

The policy pledges to safeguard data the T collects by using secure computer servers with an advanced form of information encryption. The T plans to hire a privacy officer to enforce the policy.

The draft policy is to be posted on the T's website April 22 and to be followed by at least three public hearings starting the week of May 2, T officials said yesterday.

The new policy is scheduled to be voted on by the Massachusetts Bay Transportation Authority's board of directors in June or July. Until then, the draft will be used.

''The authority is committed to not only protecting personal information that it may collect from patrons, but also allowing our patrons to participate in the process to develop this new policy," Jonathan Davis, deputy general manager of the T, wrote to Barrios.

Barrios, a Cambridge Democrat, said he is also concerned about how the new system applies to senior citizens, students, or those who are disabled, who must show their identification and have personal information linked to their Charlie Card account to get discounted passes.

T officials say those who decline to reveal that information for privacy reasons must purchase full-fare tickets or Charlie Cards.

''I think that's unfair, and it's likely illegal," said Barrios, who said he has met with T officials three times to discuss the issue.

Carol Rose, executive director of the American Civil Liberties Union of Massachusetts, wants to talk with T officials about safeguarding personal information.

''People should be aware of the dangers when the government can collect information on where you go, what you buy, what you eat, and where you are at any time," Rose said. ''And people shouldn't be required to give up these fundamental private rights in exchange for a Charlie Card or a senior citizens or student discount."

Mac Daniel can be reached at mdaniel@globe.com.