Digital Governance Proposals

for DSAP Consultation

DRAFT
TABLE OF CONTENTS

01 Introduction
02 Civic Data Trust and Urban Data
03 Responsible Data Impact Assessment Process (RDIA)
04 Governance Case Studies
05 Open Digital Infrastructure and Services
06 Data Localization
07 Summary
08 Questions for Discussion

DRAFT 2
01 Introduction
02 Civic Data Trust and Urban Data
03 Responsible Data Impact Assessment Process (RDIA)
04 Governance Case Studies
05 Open Digital Infrastructure and Services
06 Data Localization
07 Summary
08 Questions for Discussion

DRAFT 3
Sidewalk Labs started with a belief...

A FEW SPECIFIC EXAMPLES

We began by speaking with experts from around the world

From those conversations

Among the new experiences

We knew that technology could catalyze these solutions,

From the outset we knew that the monetization of data

would not be part of our business model.

…and many more

DRAFT 4
We conducted extensive consultations on responsible data use

We engaged Dr. Ann Cavoukian

Privacy by Design framework

We meet regularly with privacy regulators

We convened a Data Governance Working Group

We talked to the private sector

We participated in the public consultations

We carefully considered feedback

We studied examples from around the world

We welcomed thousands of people from Toronto

We established a research grant program

DRAFT 5
 We engaged privacy regulators on issues related to digital governance

“ first advisory project involving

We announced in May 2018 our We also reminded officials of key privacy principles,
including identifying the purposes for collection,
obtaining consent, ensuring individuals could access
their own personal information and being accountable
Sidewalk Toronto, a smart-city for protecting the data and being clear about who owns it.

endeavor between Waterfront

Overall, we are encouraged by
Toronto and Sidewalk Labs,
Sidewalk Toronto’s efforts to
owned by Google’s parent company Alphabet.
The initiative involves building a technology-driven proactively address privacy and
neighbourhood on the city’s eastern waterfront
data security in the design and
that includes sensors aimed at helping city
planners find efficiencies. implementation of the initiative.
Understandably, it is raising many questions
Given the project is still in its early stages, we are
about data collection, privacy, where the
continuing to monitor developments and proactively
information will be stored and how it might be used.
engage with Sidewalk Toronto officials as it progresses.

Along with colleagues from the Office of the Information

smart city initiatives pop up across the country.
“
We also hope the advice we provide will be helpful as other

and Privacy Commissioner of Ontario, members of our

Business Advisory Directorate met with those behind the
project to learn more about it and how they were
addressing some of these privacy concerns. Office of the Privacy Commissioner of Canada

DRAFT 6
A range of concerns and questions surfaced
with regard to data and the Quayside project

Confusion AN ONGOING, COLLABORATIVE PROCESS

This presentation to the Waterfront Toronto

Concern Digital Strategy Advisory Panel

An array of questions:

● Is Sidewalk Labs

Master Innovation
● How will data—particularly data collected in the physical environment
and Development Plan, a draft of which
will be released in early 2019.
● Who will own and control the data

● How do we address the difficulty of obtaining consent

● What are the respective roles of Sidewalk Labs

● How do we ensure all innovators

● How do we make sure the protections of Canadian law apply to all data

DRAFT 7
Sidewalk Labs determined that Privacy by Design would
be embedded into all of our projects, from the beginning

Privacy by Design is an essential component of fundamental privacy protection PRIVACY BY DESIGN

In October 2010
FOUNDATIONAL PRINCIPLES SIDEWALK LABS’ IMPLEMENTATION

Proactive not Reactive

Privacy Embedded
into Design

Privacy by Design embeds privacy measures

Privacy as the
Default Setting

Full Functionality

End-to-End Security Since then, Privacy by Design has developed

Into a global presence

Visibility and Transparency

Respect for User Privacy

DRAFT 8
We established and continue to refine Responsible Data
Use Guidelines that serve as a foundation for our work

These Responsible Data Use Guidelines guide our work NEED FOR A ROBUST FRAMEWORK
Privacy by Design
The pace at which the world is changing
● People first.
● Beneficial public purpose.

● Transparency and clarity of usage.

● People are more connected now

● Meaningful consent.

● Recent high-profile examples

of data and privacy breaches

● De-identify by default.

● Open by default.

● No ads by default.

DRAFT 9
Sidewalk Labs’ proposed approach to digital governance
aims to serve as a model for cities around the world

Sidewalk’s proposed approach to digital governance in Quayside KEY TAKEAWAYS

No one should own original information

Our approach to digital governance is based on the position that:

independent Civic Data Trust.
● Independent governance

To protect privacy,
● All parties
Responsible Data Impact Assessment
● Information architecture and services

one set of rules will

Based on these positions, we propose four key components of a framework for digital governance in Quayside: apply to everyone.
● Responsible Data Use (RDU) Guidelines

Sidewalk Labs will use open standards

● Civic Data Trust

● Responsible Data Impact Assessment (RDIA)

● Open Standards

DRAFT 10
01 Introduction
02 Civic Data Trust and Urban Data
03 Responsible Data Impact Assessment Process (RDIA)
04 Governance Case Studies
05 Open Digital Infrastructure and Services
06 Data Localization
07 Summary
08 Questions for Discussion

DRAFT 11
Data Trusts are beginning to be used
to govern data in urban contexts

A Civic Data Trust GLOBAL EXAMPLES OF DATA TRUSTS

Barcelona Model: Trusted Intermediary and a Data Commons

A Civic Data Trust is particularly useful where data is being collected

and used in an urban environment

It is an independent third party

A Data Review Board

Estonia Model: API Framework Management

Other cities, countries, and organizations around the world,

D R A F T
AFT
DR PROPOSA
L ONLY 12
Proposal: A Civic Data Trust for Quayside

The Trust would be an independent body BENEFITS OF THE CIVIC DATA TRUST

Urban Data ● Protects

● Following Responsible Data Use Guidelines, the Trust would ● Curtails

approve and control

● Ensures

● Upholds

● The Trust would, as a default, make de-identified Urban Data ● Organizations

freely and publicly accessible—and not owned by any private
entity ● Access

● Opportunities for new

● In performing those functions, the Trust would be guided
by a charter
● Data collection

● Institutions
● The governance of the Trust

DRAFT 13
Defining Urban Data

Urban Data is data collected in a physical space in the city, HOW OUR FOCUS ON URBAN DATA REFLECTS WHAT WE’VE HEARD
which includes:
●

● Placing
●

Urban Data is different from other data and requires ● Requiring

a different approach because:

● Providing
●
● Enlarging
●

● ● Focusing

●
●

DRAFT 14
Proposal: Civic Data Trust

The Civic Data Trust will sit at the centre

01 02 03 04 05 06
RDIA Filing Approval Registry Managing Access Enforcement Exemptions

DRAFT 15
Data Typologies

Governance Considerations RDIA & Approval Process Role of Data Trust

● ● ●
Urban Data Type 1
● ●
●
●

● ● ●

●
●

● ● ●
Urban Data Type 2
● ●
●
○

● ● ○

● ○

● ● ●
Urban Data Type 3
●
● ●
● ●
●
○

● ●

● ● ●
Traditionally ● ●
Collected Data ●

DRAFT 16
01 Introduction
02 Civic Data Trust and Urban Data
03 Responsible Data Impact Assessment Process (RDIA)
04 Governance Case Studies
05 Open Digital Infrastructure and Services
06 Data Localization
07 Summary
08 Questions for Discussion

DRAFT 17
All collection and use of Urban Data will require a
Responsible Data Impact Assessment

All entities seeking to collect and/or use Urban Data in Quayside RESPONSIBLE DATA IMPACT ASSESSMENT

1. PURPOSE

The RDIA is an assessment 2. DATA

3. IMPACT

4. ANALYZE

PRIVACY IMPACT ASSESSMENT

The RDIA enables parties to make decisions

Outcomes

✓ ✓ DECISION:
✓ ✓

✓ ✓

DRAFT 18
Responsible Data Impact Assessment Section 1: Purpose

RESPONSIBLE DATA IMPACT ASSESSMENT

Project Name/Description

Project Objective

Stakeholders

DRAFT 19
Responsible Data Impact Assessment Section 2: Data

RESPONSIBLE DATA IMPACT ASSESSMENT

Nature of Data

Sources of Data

DRAFT 20
Responsible Data Impact Assessment Section 3: Impacts

RESPONSIBLE DATA IMPACT ASSESSMENT

Impact to Individuals and Groups

Benefits

Risks (Inherent)

DRAFT 21
Responsible Data Impact Assessment Section 4: Analysis

RESPONSIBLE DATA IMPACT ASSESSMENT

Mitigating Risks

Decision Analysis

After considering all the above factors, is the activity a “go”, “no go”, or should some aspect of the activity be

DRAFT
recalibrated to reduce the residual risk?
22
01 Introduction
02 Civic Data Trust and Urban Data
03 Responsible Data Impact Assessment Process (RDIA)
04 Governance Case Studies
05 Open Digital Infrastructure and Services
06 Data Localization
07 Summary
08 Questions for Discussion

DRAFT 23
Hypothetical Case Study 01: Traffic Management System

Future hypothetical: Sidewalk Labs is working to implement a plan

APPLICATION 1 APPLICATION 2

Pedestrian Counters Adaptive Traffic Lights

Sidewalk Labs submits an application and RDIA for pedestrian counters to Sidewalk Labs submits an application and RDIA to deploy devices developed
the Data Trust. by a partner that use computer vision

The Data Trust publishes the RDIA Depending on the policies of the Data Trust

The pedestrian counters are installed,

The Data Trust publishes the RDIA

Pedestrian count data is used

The data is also accessed by a community group The adaptive traffic lights are installed

That data is used

The data is also accessed by another company

DRAFT 24
Hypothetical Case Study 02: Parks Improvement Study

Future hypothetical: Startup A is working on a project to make recommendations about improving environmental conditions and usage patterns at several parks

APPLICATION 1 APPLICATION 2

Air Quality Sensors Video Cameras

Startup A submits an application and RDIA Startup A submits an application and RDIA

This application may not be self-certified

The Data Trust reviews the application and approves on the condition

This application may not be self-certified

The Data Trust reviews the application, judges it to provide a net benefit
to the public, and approves on the condition
The Data Trust publishes the RDIA

The Data Trust publishes the RDIA

The cameras are easily installed using open standards-based mounts
The air quality sensors are easily installed

After a time, the data is made freely and publicly available.

DRAFT 25
01 Introduction
02 Civic Data Trust and Urban Data
03 Responsible Data Impact Assessment Process (RDIA)
04 Governance Case Studies
05 Open Digital Infrastructure and Services
06 Data Localization
07 Summary
08 Questions for Discussion

DRAFT 26
Quality of life comes first—no tech for tech’s sake

RECAP We have identified a set of innovations that could help improve urban life in Quayside.
A non-exhaustive list:
From the start of this project, we imagined a
set of new experiences that could be possible Mobility
in a new type of city.
Streets that prioritized safety, pedestrians, and Public Realm
cyclists

Sustainability

Community

Buildings
Buildings with a far more diverse and vibrant mix
of uses
Access + Equity

Accessibility
Significantly reduced carbon emissions

DRAFT 27
Sidewalk Labs will build solutions—but not exclusively

AN EXAMPLE: ENERGY USE

To accomplish this, Sidewalk Labs will:

● devices from the market that measure energy use and environmental conditions
● ubiquitous network
● standardized mounts
● digital map
● open data hub

This will not be done to the exclusion of others. To the contrary, this place will be more successful when alternatives are encouraged:
● easy to replace Sidewalk Labs-developed technology
● many network providers
●
●
●

mobility public realm community buildings accessibility

DRAFT 28
Enabling innovation by a wide range of players

WHAT SIDEWALK LABS WILL BUILD WHAT OTHERS WILL BUILD

The lion’s share of technologies that make Quayside

sustainability flexible public realm community buildings unique will be developed and deployed by an ecosystem
accessibility of many innovators:

●
●
●
●
● ●

DRAFT 29
Open architecture makes this possible

In order for anyone to innovate,

● Well-documented, standardized formats and interfaces

○

● Easy access to public-domain data

○

● Data portability
○

DRAFT 30
Urban Digital Architecture Sketch

Energy Optimization
Applications

Data Sharing Portals Open Data Hub

Measurements and Traffic Volume

High-Resolution Map
other data Sensors

Connectivity Ubiquitous Wi-Fi

Physical Mounts Standardized Mounts

and Power

DRAFT 31
Example of an Open System: The World Wide Web

You can use any browser...

to visit any web page...

served by any web server.

DRAFT 32
Example: World Wide Web Standards

Formatting Anyone can build a web browser

Images

Interactivity Likewise, anyone can build a web

server

Communication

With partners,
Security

DRAFT 33
01 Introduction
02 Civic Data Trust and Urban Data
03 Responsible Data Impact Assessment Process (RDIA)
04 Governance Case Studies
05 Open Digital Infrastructure and Services
06 Data Localization
07 Summary
08 Questions for Discussion

DRAFT 34
Ensuring the protection of data in accordance
with Canadian Law does not require data localization

Canada and other places with leading data protection regimes Sidewalk agrees with the position of the
Business Council of Canada, as expressed in
its September 2018 Report on the Data Economy

Individuals and businesses should be free

“ to transfer data across provincial and
international borders, provided appropriate
“
●
safeguards are in place.

There should be a general presumption against

●
“ local data storage and processing requirements.
● Governments may need to exercise sovereignty
● over data flows in rare cases when it is “
necessary to protect the public interest.

DRAFT 35
01 Introduction
02 Civic Data Trust and Urban Data
03 Responsible Data Impact Assessment Process (RDIA)
04 Governance Case Studies
05 Open Digital Infrastructure and Services
06 Data Localization
07 Summary
08 Questions for Discussion

DRAFT 36
In summary: our proposed approach

Establishment of a Data Trust:

Data Trust to Make Urban Data Freely and Publicly Available:

Responsible Data Impact Assessments:

RDIAs and Registry of Devices Maintained by the Data Trust:

An Ecosystem of Technologies by Many Innovators:

Data Always Handled in Accordance with Canadian Law:

DRAFT 37
Reviewing what we heard

Confusion about Sidewalk Labs’

plans related to data, exacerbated by
the time it’s taken to work through
complicated issues

Concern that data monetization

●
is a key part of Sidewalk Labs’
business model ●
●
●

DRAFT 38
01 Introduction
02 Civic Data Trust and Urban Data
03 Responsible Data Impact Assessment Process (RDIA)
04 Governance Case Studies
05 Open Digital Infrastructure and Services
06 Data Localization
07 Summary
08 Questions for Discussion

DRAFT 39
Some of our open questions

1. What needs to be added

2. How should a Civic Data Trust

3. What should the structure

4. Should the Civic Data Trust

5. What will be involved

6. Should the Trust

7. Are the typologies of Urban Data

8. What are the mechanisms

9. How can we best encourage

DRAFT 40