Privacy by the Wayside: The New Information Superhighway, Data Privacy, and Intelligent Transportation Systems

For a time, it was common to refer to the internet as the “information highway.” As is common with new technologies, physical infrastructure became a handy metaphor for a complex information system, and in this case the term invoked a parallel between the construction of the national highway systems earlier in the twentieth century and the construction of internet infrastructure at the end of the twentieth century. Although “information highway” has faded as a term for the internet, the metaphor has traveled full circle. Interestingly, the phrase is now an apt description of our literal highways, as roads and cars are increasingly linked by information technologies that enable communication between our cars, road infrastructure, and information communications networks. Intelligent Transport Systems (ITS) integrate vehicles and surface transportation infrastructure with information, communication, and sensory technologies to improve the safety, efficiency, security, service, accessibility, environmental responsibility, and reliability of the transportation system.Significant privacy concerns arise from the collection, retention, analysis, use, or disclosure of personal information within ITS, including intra- and inter-governmental data sharing, the cross-border sharing of data, surveillance, and data profiling.This article discusses the data protection and privacy issues raised by the use of ITS. Privacy with respect to ITS implicates informational privacy, as well as privacy in public spaces.The article begins with an overview identifying the central privacy issues that arise with ITS and provides an introduction to the legal and institutional privacy framework in Canada. This is followed by a closer analysis of Canada’s data protection regimes and their application to ITS. The article concludes that, while ITS may offer significant benefits for safety, security, and environmental sustainability, it also raises considerable informational privacy risks. However, these information privacy risks can be moderated by ensuring that the design and deployment of ITS from the outset not only complies with existing data protection obligations respecting the collection, use, and disclosure of personal information set out in Canadian statutes but also anticipates and addresses user concerns about privacy risks.