吃瓜大本营

New documents obtained by the New York Civil Liberties Union reveal that wireless E-ZPass tollbooth transponders are being read routinely throughout New York City to systematically collect location data about drivers.

At the NYCLU, we were surprised when we this might be happening. In late 2013, NYCLU staff went on a with a privacy activist who designed a cow-shaped device that mooed every time it detected signals on the same frequency that E-ZPass readers use. We listened as the cow mooed its way through Midtown and Lower Manhattan 鈥� though we weren鈥檛 at any toll plazas, something was reading the E-ZPass tag in our car.

This prompted us to file New York Freedom of Information Law (FOIL) requests to find out why E-ZPass readers had been installed far from any toll booths for some purpose unrelated to their intended use, and what privacy protections, if any, were in place. Earlier this week, the NYCLU the result of that investigation (part of a that hosts records obtained through FOIL requests on how government agencies are collect information on New Yorkers).

The systematic placement of the E-Zpass readers can be clearly seen in these

Location of E-ZPass Readers in New York City

Source: New York City Department of Transportation FOIL Production (July 11, 2014).

Location of E-ZPass Readers in Midtown Manhattan

Source: New York City Department of Transportation FOIL Production (July 11, 2014).

What we鈥檝e learned is that both city and state transportation agencies have set up E-ZPass readers around the state as part of technology-based traffic management programs. Under a program called Midtown in Motion, for example, the city Department of Transportation initially installed 100 microwave sensors, 32 traffic video cameras and E-ZPass readers at 23 intersections to measure traffic volumes and congestion. By July 2014, that program had expanded to 149 E-ZPass readers around the city.

Outside of New York City, the State Department of Transportation in partnership with other entities has set up a similar traffic management program that scans E-ZPass tags on major transportation corridors, away from toll plazas.

There should be strong privacy policies, made readily accessible to the public, that ensure that the data is anonymous.

While traffic management is certainly an important goal, when government agencies engage in this kind of technology-driven data collection, they should make sure that the public knows that their data is being scanned and used for purposes other than what the data was originally intended to be used for (in this case, toll collection). They should also notify the public of a way to opt out (e.g., is it sufficient to put the tag in a cover provided by E-ZPass?).

There should also be strong privacy policies, made readily accessible to the public, that ensure that the data is anonymous and that it cannot be used for any purpose other than for the traffic study. So it鈥檚 troubling, for example, that the New York City Department of Transportation stated in response to the FOIL that it had no policies or training materials on storage, retention, destruction or use of the information collected from its E-ZPass readers.

Our location information reveals a lot of private details about our lives. Governments need to seriously consider the privacy implications of new technologies they adopt and institute meaningful, transparent protections that address privacy concerns and minimize the risk that this technology will become used for some other purpose.

More information about the E-ZPass readers, including an extensive Document Library, is available at the New York Civil Liberties Union鈥檚 new .Toll booth transponders such as E-ZPass were created for one specific purpose: smoothing the flow of traffic at toll booths. We鈥檝e already seen the technology abused for political purposes. The fact that they鈥檙e now being repurposed to track cars around the streets of New York without adequate public notice is exactly the kind of mission creep that we always warn against with powerful tracking technologies.