1. Transportation Automation and Privacy Issues
96th Annual Meeting
January 10, 2017
Thomas J. Bamonte
Program Manager, Automated Vehicles
North Central Texas Council of Governments

2. Overview Data collection in transportation sector
Privacy implications of automated vehicles

3. Tolling Overview Toll facilities in 35 states
2,900 miles of tolled interstates
6,000 total road miles
5.7 billion annual trips
55 million RFID transponders in use
37 million customer accounts

4. Mechanics of Electronic Tolling4

5. Pay-by-Plate Customers5

6. Trip Data Collection

7. Registered Owner Information
Personal information
Home address and phone number
address
License plate
Credit card information
Vehicle type/color/VIN
Sources
Customer accounts
DMV data
Collection efforts

8. Public Transit Account-Based Ticketing

9. Current Protections of Tollway User Account Privacy
Transponder customer agreements: Pledge to not share data
Customer account and trip data shielded from general disclosure; use allowed –
When conducting tolling
In response to court order, e.g. warrant
When aggregated/anonymized, e.g. traffic studies
High data protection standards in place, e.g. PCI compliance
FOIA exemptions: Locational and customer account data

10. Roadway Camera Coverage

11. Automated License Plate Readers

12. Peering into Car: HOT Lane Enforcement

13. Transit Station Camera Coverage

14. Transit Vehicle Onboard Surveillance

15. Vehicle Sensors

16. Vehicles as Highway Data Generators

17. Other Data Collection Points

18. Driver Fitness Monitoring

19. V2X Connections

20. Vehicle-to-Cloud Connections

21. Automated Transportation Implications
Every vehicle akin to a toll highway customer vehicle
Vehicles are mobile commerce platforms
Vehicles harvest data about occupants, travel patterns
Vehicle ownership supplanted by fleets
Travelers become passengers
Vehicles gather/share massive amounts of data

22. Suggestions Track data gathering/sharing activities
Careful eye on commercial communications
Manage data use by contractors
Look for legislative opportunities
FOIA exemptions
Data purge requirements
Cooperative but not complicit w/law enforcement

23. Thomas J. Bamonte, Program Manager
Contact Information
Thomas J. Bamonte, Program Manager
Covered a lot of material. Thank you for your attention and great questions. Here is my contact information. I welcome opportunity for dialogue.

24. Automated Vehicle Security Challenges
Vehicle hacking threat Legislative response: SPY Car Act
Data security breaches
Mobile commerce
V2V
V2I
Highway agencies
Fleet operators
App integrators

25. State Law Protections
General data security & breach notice requirements
Mandated privacy policies & data security requirements
Laws governing ownership & use of event data recorders
ALPR regulation
FOIA exemptions for transportation-related data
Automated vehicle laws

26. Federal Law Protections
Drivers Privacy Protection Act
Various consumer law protections—e.g. TCPA
Federal securities laws
Federal legislation introduced to protect locational privacy, including vehicles
Jones & Riley decisions

27. Unrelenting Gaze and Automated Transportation
Extensions into law enforcement
“Taking over” vehicles for safety/traffic management
Sponsored ads in visual stream on dashboard
Sale of customer data
V2X data sharing
Will surveillance state/economy prompt public backlash?

28. Research/Policy Issues
Who owns/controls data generated by vehicle?
Can individual control of vehicles be overridden to maximize safety/efficiency/crime prevention?
Do common carrier rules apply in the case of driverless cars/fleets?
What privacy rules apply in fleet services?
Will commercialization of vehicles obviate need for transportation-specific regulation of privacy/security?
Can driver monitoring be mandated for non-robot drivers?