© Dominique Boutin/TASS via Getty ImagesIt's already hard enough to get people to read the terms of service for the apps they use, and experts are skeptical we could expect any better of someone crossing into the boundary of a smart city neighbourhood, where sensors and data collection abound.
But before long, Quayside may be one of the most sensor-laden neighbourhoods in North America, thanks to Alphabet's Sidewalk Labs, which has been working on a plan to redevelop the area from the ground up into a test bed for smart city technology.
It's being imagined as the sort of place where garbage cans and recycling bins can keep track of when and how often they're used, environmental probes can measure noise and pollution over time and cameras can collect data to model and improve the flow of cars, people, buses and bikes throughout the day.
Generally speaking, the idea is that all of this data - and the newfound insights its analysis could yield - will help cities run more efficiently and innovate at a faster pace than they do today.
The effort is one of a handful of broad initiatives underway across the world in places such as Dublin, London, Dubai and Seattle. The Canadian government is soliciting pitches for more smart cities across the country, and has promised up to $80 million to communities competing in its Smart Cities Challenge prize.
© Sidewalk LabsSidewalk Labs is basing its smart city proposal on this post-industrial stretch of Toronto known as Quayside - the sort of place where garbage cans and recycling bins can keep track of when and how often they're used, environmental probes can measure noise and pollution over time and cameras collect data to model and improve the flow of cars, people, buses and bikes throughout the day.
"I think in some ways what we're facing here is a situation where none of this is very much like anything we've seen before," says David Murakami Wood, an associate professor at Queens University, who studies surveillance in cities.
He's not the only one who's skeptical that the law can keep up.
'You can't rely on legislation'
Anyone who's used an app or online service is probably familiar with the concept of consent. It's a legal requirement that companies or public organizations that want your electronic personal information should not only ask first, but explain in detail what they want to collect, what they plan to do with it, who they might share it with and why.
But in a smart city, consent "goes out the window straight away," says Murakami Wood. It's already hard enough to get people to read the terms of service for the apps they use, and experts are skeptical we could expect any better of someone crossing into the boundary of a smart city neighbourhood.
Smart cities, after all, take data collection and analysis to a new, previously unimagined extreme. And with so many different sensors and so much data being collected and analyzed, how could anyone be expected to understand, much less consent to it all?
"You can't rely on legislation," says Ann Cavoukian, the Information and Privacy Commissioner of Ontario from 1997 to 2014. She's being paid by Sidewalk Labs to advise the company on its approach, which sounds straightforward enough: Don't collect any personal information at all.
Sidewalk Labs and Cavoukian agree not only should as little data be collected as possible, but any that is collected be stripped of all personally identifiable information, or de-identified. Given that smart cities are designed to track people's habits - information that has the potential to be deeply personal and revealing - they believe disassociating that data from the person who generated it is the biggest thing they can do to sidestep privacy concerns.
"Where you get into the realm of privacy is when you get into the realm of what can be traced back to you as an individual," says Rit Aggarwala, Sidewalk Lab's chief policy officer.
Comment: What a ridiculous statement! Cities are made up of individuals. Just because people congregate together in order to go about their business, it doesn't suddenly transform people into a homogeneous blob existing in a new realm where individual privacy does not exist. Just because data 'cannot be traced back to the individual' does not mean privacy has not been invaded, nor does it mean that it cannot be misused. With twisted minds like the above, it's pretty easy to see the direction we're headed.
Cavoukian, a self-described "eternal optimist," doesn't buy the argument that smart cities are inherently tools of surveillance. She's helping the company build privacy into the design of Quayside, an approach she developed in the late 1990s. It dictates that the best way to protect people's privacy is to think about it during the design and development stage, rather than as an afterthought.
"My job is to make sure that this does not become a city of surveillance, where everybody's activities are tracked," she says.
How much data is too much data?
Still, there are many privacy scholars who are dubious that you can have a smarter city and keep your privacy, too - even if the data being collected isn't personal.
"The whole point of a smart city is that everything that can be collected will be collected," says Al Gidari, the director of privacy at Stanford University's Center for Internet and Society in California. He argues that if smart cities wanted to give people more control over their privacy, by default they wouldn't collect any data. Instead, current proposals tend to put limits on the use of data only "after it's already been collected and the damage is done," Gidari says.
© Doug Ives/Canadian PressSmart cities are designed to track people's habits - information that has the potential to be deeply personal and revealing - but Sidewalk Labs says it can avoid privacy concerns by stripping the data it collects of identifying information.
"If people directly see value to having more information collected about them, they will be willing participants," Aggarwala says.
Comment: Yes, please dazzle us with all your ingenious ways of making data collection seem cool. Facebook did it with cat videos and baby pictures, so the bar isn't set that high.
Given the value of that data, experts have argued that privacy is only part of a larger discussion. Open government advocates like Bianca Wylie think we need to start with conversations about who owns the data in the first place. Is it the private companies and equipment operators who run the smart cities, or the cities themselves?
"If we don't collect it and own it, then I don't think we can define the privacy stuff," says Wylie, a columnist who writes about civic tech initiatives and an associate at the consulting firm Open North.
Comment: The people in this industry must have lost their collective minds. This is proof of what happens to the mind when lies are chosen over truth. We can trace this type of thinking back nearly twenty years ago to when the anti-smoking crusade began.
Others have argued that even if the information collected isn't personal, there are broader implications that privacy law, or even privacy by design, can't account for - for example, the potential for tech-centric cities to widen the divide between rich and poor.
"I think maybe we're putting too much emphasis on privacy as a defence against this kind of surveillance capitalism," Murakami Wood says. "And I think we're going to find out the limitations of that approach pretty soon, because it doesn't deal with a lot of other issues around human rights and forms of inequality that are generated through these systems."
What happens next with Sidewalk Labs' Toronto pilot and other projects remains to be seen. Even once it is fully realized, Quayside will only be "smart" on a neighbourhood scale, with truly city-wide projects yet to come.
Sidewalk Labs acknowledges that it's early days for a lot of this stuff, and that they're still thinking the implementation through - trying to be as transparent as possible with citizens about what they're doing and understanding what people are and aren't willing to live with, assures Aggarwala.
"A lot of these questions will fall into the category of doing whatever it takes to make people comfortable," he says.
I have to wonder though.. Given the gaping holes built into network architectures security systems, if someone tracked and murdered a person by using such data, could the victim's family sue the city? Or the company that built and maintained the Orwellian skynet?