Smart City Privacy: Enhancing Collaborative Transparency in the Regulatory Ecosystem

Abstract

The development of smart cities has several privacy implications and it challenges the application and enforcement of data protection law. The SPECTRE project looks at these challenges through the lens of the disciplines of law, social science and economics. The main focus of the project is to make data protection great again by moving towards greater responsibilisation in the smart city environment and by increasing participation of different stakeholders through the development of a collaborative, cost-efficient Data Protection Impact Assessment (DPIA) methodology. Furthermore, the potential of using public procurements rules to incorporate this new method for a DPIA to effectively deal with the privacy impacts of smart cities will also be explored.

Smart City Development: Data Sharing vs. Data Protection Legislations

“…These legislations require the protection of data from unauthorised access and processing to ensure that data is secure and accurate. DPL can enforce additional requirements on data controllers and storage systems, making it necessary for the use of techniques such as encryption, tight access control, and data protection impact assessments (Christofi et al, 2019).…”

The Bigger Picture: Approaches to Inter-organizational Data Protection Impact Assessment

“…Cloud computing, for instance, involves outsourcing aspects of computational processing and data storage to third-party cloud providers, typically acting as processors. Furthermore, the increasing degree of inter-connectivity and integration of systems, such as in smart cities [10], leads to complex and dynamic interactions between services which are determined by very concrete events. Similarly, open data marketplaces allow for the dynamic trade of large-scale data sets based on specific characteristics and their business value.…”