Telco cites privacy in pulling out of cellphone tracking plan
Population project gets thumbs up from usually querulous Council for Civil Liberties
Telco 2degrees says it has pulled out of a Stats NZ programme that uses cellphone data to track population density — which can, in turn, be used to infer how people move around during the day.
The telco has flagged privacy concerns around the pending commercialisation of the project, and potential mission-creep when that occurs.
And while broadly supportive of the programme and its privacy protections, Spark is giving its customers the chance to opt-out (see below).
However, the population density project has got the thumbs up from the usually querulous Council for Civil Liberties. “We have little objection,” chair Thomas Beagle said, noting the steps taken to anonymise the data before it reached Stats NZ.
And Statistics Minister James Shaw told the Herald he thought 2degrees’ true worry might be potential reputational damage from what some could see as a Big Brother project.
Shaw himself was initially wary, but overcame his qualms after learning more about the project, and two safeguards being put in place: Privacy Commissioner John Edwards reviewing its privacy plan and an independent data ethics panel being given an oversight role.
Edwards told the Herald he saw the population density project as noncontroversial, given the data was anonymised, and there was no way to “re-identify” people.
Compared to similar programmes overseas, the Stats NZ effort could be considered “a model” for good privacy guidelines, Edwards said.
“Maybe 2degrees has the pip because someone else could be commercialising and selling their data,” he told the Herald.
Stats NZ’s new Data Ventures unit ran a programme between February 2018 and February 2019 that saw tracking code distributed to Spark, Vodafone and (briefly) 2degrees to build a picture of how people move around their suburb or city during the day, based on the changing locations of cellphones. In certain areas, snapshots were taken every hour.
Data Ventures head Drew Broadley told the Herald he hopes 2degrees will ultimately come onboard as he readies the tracking project move from its pilot phase to a full-time ongoing venture.
But 2degrees corporate affairs chief Mat Bolland said no dice.
“We briefly engaged with Data Ventures on a pilot to understand how our network information may be of help to government departments with things like transport and health funding,” Bolland told the Herald.
“Network information — very different to customer information — is something we’re open to providing for the right outcomes, such as helping with better infrastructure and policy decisions.
“But we won’t do this at the expense of our customers’ privacy, which we will fiercely guard. We recently decided not to take the pilot further, because we needed more clarity on things like the potential commercialisation and ongoing requests.”
Broadley stresses that the movement data is anonymised.
The limited data collection is in part due to the project’s privacy guidelines, but also a function of the fact that Stats NZ and its government agency clients simply could not handle the deluge of data that would come from more tightly-targeted tracking.
And it doesn’t seem like Data Ventures Crown clients are using the latest data-mining software from Peter Thiel’s Palantir. Broadley says a key constraint is that most of them are using Microsoft Excel, which has limits on the number of rows per spreadsheet. Broadley says Data Ventures is now consulting with the Data Ethics Advisory Group on a framework for resuming the population density tracking — this time on an ongoing basis. The framework will include privacy safeguards around commercial deals.
The Data Ethics Advisory Group was set up by the previous government with the wider remit of auditing and monitoring the sudden proliferation of big data analysis, AI and machine learning being employed by Crown agencies.
Its members include academics from AUT and Victoria, the Prime Minister’s chief science advisor Professor Juliet Gerrard and, from the private sector, Dr Will Koning — chief data officer of Kantar (the parent company of market research companies Colmar Brunton and TNS).
Broadley stresses that it is only aggregated data, in any case.
“We’re counting devices, not people,” he says. “Think of it like a rugby game when the commentators tell you what the crowd attendance is. They say ‘there’s 40,000 people here tonight’. They don’t say ‘Drew Broadley is here tonight’. That’s what population density does, it gives the sum total of people in a given suburb at a given hour.”
The pilot produced some surprising data. Broadley says it found a couple of ski field areas were actually busier during the summer, with campers, hikers an day-trippers.
“The Census tells you the residing population, but this gives us a lens into where people work and play — how many go into the Wellington CBD each workday, how many head to Wairarapa each weekend,” he says.
He also says the population density project will help with emergency planning.
“We can also make better preparations for natural disasters, knowing how many people might be in a suburb if there’s an earthquake at 2pm on Tuesday or 4am on Saturday.”
Spark: you can opt out
A spokeswoman for Spark says the telco participated in the Data Ventures pilot via its data analysis unit Qrious.
She added, “Spark always provides customers the option to opt-out of having their anonymised data provided to Qrious. They can do this at spark.co.nz/help/other/terms/policies/privacy-policy.”
Vodafone’s take
A spokeswoman for Vodafone said the telco became involved in the Data Ventures project “in order to better understand the potential public good use of high-level anonymised telecommunications data”.
She added, “It’s important to note the data is anonymised and aggregated before it gets to Data Ventures and there are no identifying features, just a total number of mobile devices down to a suburb level at any given hour.”
Maybe 2degrees has the pip because someone else could be commercialising and selling their data.
John Edwards, Privacy Commissioner