Nicola Tune Registered Foreign Lawyer (England & Wales)
Big Data Collection for Smart Mobility vs Privacy Concern - Is There a Golden Mean?
In December 2017 Hong Kong’s Innovation and Technology Bureau launched its Smart City Blueprint setting out the steps that would need to be taken to develop Hong Kong into a Smart City. The Smart City initiative is divided into 6 key sectors: Smart Mobility, Smart Living, Smart Environment, Smart People, Smart Government and Smart Economy.
Using Big Data, Smart Mobility projects aim to improve the safety and efficiency of a city’s transport system as well as ensuring environmental sustainability. Big Data frequently contains personal information the collection, sharing, and processing of which is subject to rules and regulations.
A conflict undoubtedly arises between requiring access to Big Data to further social economic projects using the latest technology, and protecting individual’s right to privacy.
Hong Kong a Smart City
Smart Mobility is an integral part of Hong Kong’s Smart City initiative and aims to streamline the transport and logistics sectors, ensuring that the city is “future proof” against an ever increasing global population and balancing environmentally sustainable practices with efficiency.
Hong Kong is looking at many different ways of achieving these outcomes, such as:
- implementing green technologies on local ferry operations;
- using driverless cars in the airport to increase efficiency;
- installation of in-vehicles units which will allow payment of tolls / tunnel fees remotely and feed real time traffic information to the drivers with the aim of reducing traffic jams and congestion; and
- deployment of Logistics software systems which can take advantage of real time data to see when peak times are and to route vehicles efficiently.
In the shipping industry, port calls can be optimised by sharing relevant data in advance improving berth occupation planning and the availability of necessary equipment. Hamburg’s smartPORT uses real time navigation and electric vehicles to ensure a smooth flow of traffic at the port.
What is Big Data?
There is no set definition of what “Big Data” means, although it is frequently used to describe data sets that are so vast and varied in type that traditional data processing techniques are unable to analyse the information. Big Data by itself is unusable however new analytical methods are able to extract valuable information such as key trends and future pattern predictions.
Sources of Big Data are diverse from smart phones and social media, to vehicle sensors, and GPS applications. Locational related data is usually the key to producing useful information from Big Data sets especially for Smart Mobility initiatives.
For example, Hong Kong currently collects real time traffic data from smart sensors which feed into traffic lights. The traffic lights then automatically change in reaction to the flow of traffic helping to ease congestion.
Hong Kong’s Personal Data Laws
Personal data is defined in Hong Kong as any data (i) relating directly or indirectly to an individual, (ii) from which it is practicable for the identity of the individual to be directly or indirectly ascertained and (iii) in a form in which access to or processing of the data is practicable.
Taking into consideration the sources of Big Data it is easy to see how some of the information collated can be personal data.
Under the Personal Data (Private) Ordinance (Cap. 486) (“PDPO”), consent of the individual is not a prerequisite to data collection in Hong Kong, however, notice of the data collection should be given. Only relevant personal data should be collected for a lawful purpose and be necessary for or directly related to that purpose.
The 6 Data Protection Principles “DDPs”
- Personal Data must be collected in a lawful and fair way, for a purpose directly related to a function/activity of the data user. Data subjects must be notified of the proposed and the classes of persons to whom the data may be transferred. Data collected should be necessary but not excessive.
- Practicable steps shall be taken to ensure personal data is accurate and not kept longer than is necessary to fulfil the purpose for which it is used.
- Personal data must be used for the purpose for which the data is collected or for a directly related purpose, unless voluntary and explicit consent with a new purpose is obtained from the data subject.
- A data user must take practicable steps to safeguard personal data from unauthorised or accidental access, processing, erasure, loss or use.
- A data user must take practicable steps to make personal data policies and practices known to the public regarding the types of personal data it holds and how the data is used.
- A data subject must be given access to his/her personal data and allowed to make corrections if it is inaccurate.
Advancement of Smart Mobility v Privacy
In 2015 the Privacy Commissioner for Personal Data held a conference highlighting the privacy issues associated with the collection of Big Data, warning that if the collection of Big Data is not well managed then it could lead to a “dictatorship of data” with individual’s losing control over a substantial amount of information concerning them.
There are many ways in which the collection of Big Data in relation to Smart Mobility may contravene the PDPO for example:
- Real time traffic information can be collected from the GPS data transmitted from smartphones. This will show the location of the individual the smartphone is registered to;
- The inclusion of people and their faces in images taken via automated services for mapping purposes;
- The on board units of vehicles may have reference to the license plate numbers and MAC (Media Access Control) addresses. These are considered indirect identifiers;
- Many companies are collecting data without fully understanding or appreciating whether it will be used for a different purpose in the future; and
- The accuracy of the information collected is often not verified nor is the relevance of it checked.
It has long been noted that it is difficult for legislation and regulations to keep up with the pace of technological advancement, and the use of Big Data in Smart projects seems to be no different.
However, the PDPO recognises that there is a need to balance the privacy of individuals with public interest and has provided several exceptions to the PDPO regulations. One of which is data collected and processed for the purpose of research and statistics are exempt from the provisions of DPP3.
As applications are developed to collect Big Data, those designing them should first and foremost identify whether personal data is being collected and how data protection should be incorporated in to the application from the beginning. This could be achieved by stripping out identifying markers at the processing stage.
It is difficult to escape the conflict between striving for a better future via Smart projects and safeguarding individuals’ privacy. There will be big pressure on companies that collate, store, process and utilise Big Data in a way that is compliant with privacy laws and to maintain compliance going forward.
Related news & insights
Insights / Buyer beware – be certain of your grounds for termination
21-09-2020 / Commodities & Trade
Alegrow S.A. v. Yayla Agro Gida San Ve Nak A.S.  EWHC 1845 (Comm)
Insights / Court finds inspector’s certificate final and binding for limited purposes only
13-07-2020 / Commodities & Trade
In this case, the Court found that two different terms relating to cargo quality certificates in a sale contract for high sulphur fuel oil did not conflict.
News / ICC Incoterms 2020
13-09-2019 / Commodities & Trade
The International Chamber of Commerce (“ICC”) has announced the publication of Incoterms 2020. This is the first update to Incoterms since they were last revised in 2010. The new rules become effective from 1 January 2020.
News / Ince lawyers featured in this months issue of Marasi News
29-07-2019 / Commodities & Trade
In this month’s issue of Marasi News, Rania Tadros, Managing Partner and Natalie Jensen, Managing Associate, from our Ince Dubai office have written an article on war risks and the implications of trading in listed areas following the Joint War Committee’s decision to add the Persian Gulf and parts of the Arabian Gulf, including the Gulf of Oman, Oman and the UAE, to its Listed Areas for Hull War, Piracy, Terrorism and related perils. This is a topic that has become very significant and has far reaching consequences to the maritime industry, in particular Shipowners, Charterers and Traders in the region.
News / Iran sanctions update - June 2019
14-06-2019 / Commodities & Trade, Insurance
Iran sanctions - Escalating tensions
News / Liabilities for automated warehousing and distribution centres
25-02-2019 / Commodities & Trade
The growth in e-commerce has brought the efficiency of warehousing and distribution centres to the fore. Rather than being bottle-necks and costs centres, warehouses are increasingly being seen as an asset, providing opportunities for value-added services and cost efficiencies.