Mitigating Transportation Technology Risks: Privacy, Data ...
Transcript of Mitigating Transportation Technology Risks: Privacy, Data ...
![Page 1: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/1.jpg)
2018 Best Best & Krieger LLP
Mitigating Transportation Technology Risks: Privacy, Data
and CybersecurityBB&K Transportation Technology Webinar Series
November 8, 2018
@smartertranspo
Company/BestBestKrieger
![Page 2: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/2.jpg)
CHALLENGING ISSUES FOR DISCUSSION • Safe Integration – What is safe
enough?• Preemption• Regulation of Right-of-Way
• Connection to broadband deployment
• Interoperability• Tax and Revenue
• Paying for infrastructure • Privacy and Data Sharing • Terms of Use (i.e. mandatory
arbitration) • TNC Regulations • Equity • Public Trust / Adoption
![Page 3: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/3.jpg)
TO BE THINKING ABOUT…
• Do we have/need a privacy policy?
• Are we collecting data on our system users? (i.e. do you have an app or online payment system?)
• Does GDPR apply?
• Are software contractors selling user data?
• Do we have the right protections in contracts?
• How to promote collaborative data sharing with private/public pilot projects around emerging technologies?
• What is our vision for integration of technology into transportation system?
![Page 4: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/4.jpg)
EDUCATION AND TRUST
![Page 5: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/5.jpg)
2018 Best Best & Krieger LLP
GREG RODRIGUEZ@smartertranspo
Best Best & Krieger LLP
Washington, D.C.
www.bbklaw.com
![Page 6: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/6.jpg)
Washington State Transportation Center
• A cooperative program to connect WSDOT
with the UW and WSU
• Use university expertise and capabilities to
help solve agency problems
– We often help with agency data issues
![Page 7: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/7.jpg)
Washington State Transportation Center
• A cooperative program to connect WSDOT
with the UW and WSU
• Use university expertise and capabilities to
help solve agency problems
– We often help with agency data issues
![Page 8: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/8.jpg)
Everyone Wants Data
• “ “Without big data analytics, companies are
blind and deaf, wandering out onto the web
like deer on a freeway.” – Geoffrey Moore
![Page 9: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/9.jpg)
Public Vs. Private Sector
• Many public sector staff view it as the public’s
right to have access to the private sector’s
data
– “They operate on our infrastructure!”
• But private sector pays far more attention to
collection and use of data
– Public sector often ignores their own data
![Page 10: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/10.jpg)
Private Sector
• Businesses are exposed to risks sharing data
– Loss of proprietary information to competitors
– Loss of control of customer interaction
– Loss of data value (through public release)
– Loss of trust from their customers
• Risk of increased regulatory burden, decrease in
profitability, increase in liability due to analysis of
business practices
![Page 11: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/11.jpg)
How will the data be used?
• Can the private sector trust the public sector
to not give away their business secrets?
• How are the data to be used?
– Public FOMO versus Business fear of misuse
![Page 12: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/12.jpg)
Trusted Data Repositories
• Proposed by multiple groups, intent is to
provide data to a single, trusted data source
– Issue: cost to operate
– Control of the data and its uses (governance)
• Data quality / integrity
• Data security
• Auditing and accountability
![Page 13: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/13.jpg)
Summary (1)
• Sharing can be good, but is complex and can
impose considerable risk to businesses and
the privacy of data subjects
• Think/talk through allowable uses, and
understand the other sector’s risk/reward
position
![Page 14: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/14.jpg)
Summary (2)
• Define the data to be shared
• Define the uses (and users) that are allowed
with that data
• Adopt policies on subject privacy and data
security
• Create audit and accountability procedures
![Page 15: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/15.jpg)
BBK WebinarPrivacy, Data, and Cybersecurity
Jan Whittington
BBK Webinar
November 8, 2018
University of Washington, Seattle
![Page 16: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/16.jpg)
Are We Sharing Data Yet?
Collective Action ProblemPublic benefits appear obvious
Private “costs” (to individual orgs) appear large
+ Institutional barriers
+ Concern about proprietary data
+ Investment to make shared data “useful”
“What are the benefits to my organization/firm?”
Trusted Data ProblemProtecting the data (security)
Protecting the data subjects (privacy)
Allowing for business competitiveness
![Page 17: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/17.jpg)
Privacy in Location Data
![Page 18: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/18.jpg)
Why Privacy?
![Page 19: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/19.jpg)
Trusted Data Governance
Fair Information Practice PrinciplesTransparency, Individual Participation, Purpose Specification, Data Minimization, Use Limitation, Data Quality/Integrity, Security, Accountability and Auditing
Solving Problems of Public InterestPublic benefits that are widespread and obvious
Protecting Privacy of the Data SubjectProtection against re-identification as well as breach
Individual secure access
Privacy audits
![Page 20: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/20.jpg)
Key Concerns
Handling sensitive data + Low bar of re-identifiability (mathematics)
+ Threat varies geographically (land use and density matter)
+ Query-based solutions (narrow mosaic ‘attack surface’)
Reducing bias in location datasets+ Population
+ Purpose or intention, from public point of view
+ Population represented in the data, and the private intent of its use
Conducting PIAs or risk/benefit analyses+ Low tolerance for risk (merge technical with legal protection)
+ Inform of scenarios/trajectories for re-identifiability and harm
+ Business decisions remain with public-facing firms
![Page 21: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/21.jpg)
Legal context
Institutional EnvironmentAn unsettled area of law
+ Concerns about disposition of data held by firms
+ Carpenter case and third party doctrine
+ Agencies request public ownership of data
Current lack of protection for privacy in geospatial data
Role fit for a UniversityUniversities harnessing research to meet privacy challenge
+ Corporate Affiliate Program for private firms
+ Repository for privacy research on sensitive data
+ Privacy-protected data products on a contractual basis
![Page 22: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/22.jpg)
https://www.uwtdc.org/
![Page 23: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/23.jpg)
Fears about Open Data
https://www.uwtdc.org/
![Page 24: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/24.jpg)
Medicine’s Model
Legal frameworkPhilosophy of mutual interest backed by strong governance:
+ Corporate Affiliate Program for location data privacy research
+ Data sharing and use agreements
+ Products for public consumption developed upon request
Private
Public
TDC
![Page 25: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/25.jpg)
Hosting Heterogeneous Data
Simple ArchitectureMobility data is intrinsically heterogeneous – multiple secure endpoints
+ Triage hosts any files in any format for data that needs TDC protections but has not yet been parsed and processed.
+ Lake hosts json for data that does not necessarily conform to a standard API, but can be represented in a semi-structured data model
+ Warehouse hosts structured data uploaded through one of several standard APIs
![Page 26: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/26.jpg)
Approach
Policies and protocols to address data ownership, access, use, and privacy in the interest of partner organizations and the persons represented by the data;
A neutral third-party hostwith transportation expertise to enable data sharing, analysis, and the development of applications;
Protection from the disclosure of unique traces privacy-preserving research and algorithms and the administrative and legal support available to the UW;
Secure cloud platformsecurity tools such as policy-based encryption key management to track and audit the uses and users of data
![Page 27: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/27.jpg)
For More Information
https://www.uwtdc.org/
Jan WhittingtonPI, Transportation Data CollaborativeDirector, Urban Infrastructure LabAssociate Professor, Urban Design and PlanningUniversity of Washington
![Page 28: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/28.jpg)
A trusted third party data platform for monitoring and evaluating mobility services in cities
www.populus.ai
Regina Clewlow, CEO & Co-FounderB&BK WebinarNovember 8, 2018
![Page 29: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/29.jpg)
THE IMPORTANCE OF DATA FOR MANAGING MOBILITY SERVICES
New mobility services (Uber/Lyft, bikeshare, scooters) are being launched in cities at an unprecedented pace.
Cities need data to developed informed policies and transportation plans. Their goals typically are to steer progress towards:
1
2
3
Safety: reducing transportation-related injuries and fatalities.
MOBILITY SERVICE ADOPTION IS ACCELERATING
Equitable access: improving availability and accessibility of transportation services to people of all backgrounds.
Efficiency: prioritizing efficient use of public space, and reducing transportation energy use/ climate impacts.
www.populus.ai
![Page 30: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/30.jpg)
POPULUS MOBILITY MANAGER HELPS CITIES AND PRIVATE OPERATORS WORK MORE SEAMLESSLY TOGETHER - THROUGH BETTER DATA
Populus Mobility Manager
Our platform:
● Integrates and harmonizes live data feeds from all major mobility operators.
● Provides cities with a single, user-friendly dashboard for operational and planning needs.
● Securely analyzes and aggregates data to protect sensitive data, reducing the technical burden on cities.
www.populus.ai
![Page 31: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/31.jpg)
NEAR-TERM OPPORTUNITIES FOR CITIES TO HARNESS MOBILTIY DATA
MONITORING OPERATORS
● Are operators adhering to scooter/bike minimums or maximums?● Are vehicles located in geographic areas that the city has incentivized or
restricted?
MEASUREMENT TO DRIVE DATA-DRIVEN POLICIES
● Are new mobility services expanding equitable access?● Are vehicle utilization rates high enough to justify potential increases in
bike/scooter caps?
NEW DATA FOR TRANSPORTATION PLANNING
● Where might the city place new bike/scooter infrastructure such as docking stations or charging stations?
● Where might the city add new bike/scooter lanes?
www.populus.ai
![Page 32: Mitigating Transportation Technology Risks: Privacy, Data ...](https://reader034.fdocuments.in/reader034/viewer/2022042114/62578278ba5b2969c4224dd8/html5/thumbnails/32.jpg)
Questions? Thank you for attending!