Page 38 - Reference framework for integrated management of an SSC - A U4SSC deliverable on city platforms

of the data, its processing in the country of destination is protected by safeguards appropriate to
those provided for in the directive itself.

The centrality of personal information has positive aspects because it enables new and better
services, products or solutions. Nevertheless, it also carries risks since information about individuals
multiplies exponentially, is more accessible by more actors and is increasingly easier to process.
At the same time, it is more difficult to control its destination and use.

The development of Smart Cities inevitably involves the processing of all kinds of information –
including geolocation, traffic, energy consumption and the environment – much of which falls within
the scope of the data protection laws and, consequently, its collection and use for this purpose are
prohibited without the informed consent of the persons concerned.

That people make cities more efficient and sustainable will have a clear impact on the privacy of
these people, even though they will be the primary beneficiaries of these services.

Some measures have indeed been agreed upon that would reduce the impact caused by the
massive processing of information in the private spheres of individuals. So far, we can find abstract
concepts of emerging interpretation such as the principles of Privacy by Design, Privacy by Default,
or the principle of minimisation. However, the truth is that we cannot be held back by the search
for, and continuous review of, the principles and technical solutions that allow smart initiatives to
develop more safely.

What are the virtues of these advances? Which principles will benefit city dwellers in the future?
And what, ultimately, are the dangers that mask this future? What are, or should be, the roles of
government and the private sector, and what price will people pay for the privilege of living in a
Smart City? Is it morally acceptable to impose exceptions to people’s privacy in the public interest?
How can we address the security risks associated with collecting and using private information for
other purposes? Our current policy and legislative initiatives are feasible to facilitate innovation
and the development of Smart Cities?

Due to the exponential growth of Big Data that is gradually being stored in smart city platforms,
special attention should be given to reflecting on the concept of profiling. This involves creating
profiles of users or consumers of various public or private services to obtain large amounts of
information through data-mining techniques, analysing common behavioural patterns to offer
advanced solutions, and optimising resources according to statistical inferences. Examples of
profiling could be:

• Through intelligent transport tickets with NFC (Near Field Communication) technology, profiles
can be made on a person’s trips, habits and customs based on the specific use of urban public
transport.
• Water consumption may indicate how many people can live in a house.

• The energy consumed by home, to discover what schedules they have or their lifestyles.

24 Reference framework for integrated management of an SSC | June 2023