Privacy issues over tolls
Congestion charging might reduce inner-city traffic, but it could come with a privacy toll, according to a study.
As New Zealand edges closer to adopting charging in its busiest cities, University of Auckland researchers are highlighting a critical – yet often overlooked – issue and that’s privacy.
In a new paper, Professor Tana Pistorius, of the business school, and Isa Seow, who is a research fellow at the school of computer science, discuss technology that may be used to roll out systems, such as satellite tracking, number-plate identification cameras and short-range communication systems.
All these technologies carry inherent risks to individual privacy and pose significant challenges within the framework of the Privacy Act, they contend.
Number-plate recognition cameras capture images of vehicles and their plates but can record extra information, such as drivers and passengers.
And with the increasing resolutions of cameras, the researchers say there’s a heightened risk of capturing sensitive biometric information, raising concerns about the recording and storage duration of high-resolution facial data.
Aotearoa’s biometric regulations are still evolving, says Pistorius, pictured, and the widespread use of new automatic number-plate recognition technology and software, which could be required if congestion charging systems are introduced, can accentuate risks associated with processing biometric data.
Seow points out there are further challenges regarding what such data could be used for, with significant concerns around analytics, crime tracking and prediction, all of which could potentially infringe on individual privacy.
Meanwhile, navigation satellite technology can pinpoint a car’s location with “remarkable” accuracy, raising concerns about daily and repeated surveillance.
Another potential option, dedicated short-range communication systems, which facilitate communication between vehicles and roadside equipment, are “particularly risky” if they store data related to payments and vehicle location history on card systems.
Seow says congestion charging systems are exposed to data risk and have been targeted by cyber-criminals overseas.
Overall, the researchers stress that no matter what technology is used, any data collected must be limited to what’s strictly necessary for the intended purpose.
“A privacy-impact assessment, namely a review of the implications and mitigation of risks, should be undertaken by the government before anything is put in place to curb congestion to ensure we have adequate safeguards,” says Pistorius.
The researchers also sought public opinion through four focus groups, which saw Aucklanders and Wellingtonians express concerns about the implications of charging systems on privacy.
Questions were raised regarding the duration of data retention on systems, potential security breaches and the over-collection of data.
Respondents suggested that all data should be deleted after six months to mitigate privacy risks. They also advocated for clear regulations to protect against unwarranted police access to congestion charging data.
Other suggestions to help address privacy risks included anonymising licence-plate information during transit or storage, implementing platforms for individuals to monitor their data across all government services, and establishing geolocation fences to confine data collection and viewing within city limits.
