The Greater London Authority (GLA) has published a London Privacy Register as a central catalogue of data protection impact assessments (DPIAs) of its smart city projects that collect personal information in public spaces.
The GLA’s chief digital officer, Theo Blackwell, announced that the register is now available in public beta, saying it provides a step towards greater public transparency.
He said the London Privacy Register is part of the Emerging Technology Charter for London, that is providing guidance on the trials and use of data gathering smart city technologies.
Outlining the move in a blogpost, Balckwell said it is important because of an expected acceleration in the deployment of smart city technologies – including internet of things sensors, drones, robotics, mobility services and augmented reality – over the next decade.
DPIA requirement
Organisations are required to undertake a DPIA when a project could create a risk to people’s privacy and produce a privacy notice, telling people why personal data is being collected and where and for how long it is stored. The Information Commissioner’s Office encourages that DPIAs are published, although it is not a legal requirement.
The register includes a function through which people can request the publication of a DPIA or privacy register for relevant technologies.
Blackwell said the register could be changed in response to feedback from users, and there are plans to expand its scope by encouraging local authorities, private landowners and others in London to use it for publishing DPIAs.
