Who owns your snapper trail?

That big pile of accumlated data from years of using your snapper card, who owns it?

Snapper card are smart cards in use by wellington buses. You use these for payment for your trips, and all other fares except the one trip cash fares have been phased out, so if you commute you gotta use snapper or start paying a forture / carrying cash.


CC licensed photo by Alan Macdougall

Imagine all the bus trips, the shops you go past, the amounts you spend/topup. Google have proven the value of such information in their targeted adverts. Amassed enough data, it has a value, and who owns it? Can they sell it? Need they tell you if they sell it?

Today the New Zealand Privacy Commision told snapper they ought to revise their privacy policy (computerword.co.nz)

There are incentives to register your card -- being able to see an audit trail and claiming lost funds when you lose your card -- but even if you take the risk and don't register they're still building a good profile of nameless you and your movements.

My own thoughts: We can't be complacent and assume someone else is looking out for our prvacy. While I might trust the folks who run snapper today (and I don't yet), do i know for sure i'll trust the folks who buy them out in 2 years time? For myself I would rather they collected no information at all -- beyond a short period of time (maybe 4 weeks), then I want my data gone, erased, unretrievable and/or completely unable to be matched up with me, because it's proven even the most trusted can screw up. In much the same way no-one can find out who voted for New Zealand First last election (though that's possibly a bad example).

Then there's nothing to lose, and nothing to sell.

Comments

I don't like them for the

I don't like them for the privacy reason. Don't catch buses too much anyway, so what do I have to complain about really? :) As a technical sideline, I've seen them misbehave on crowded buses when many people are standing near the back door. I think it was saying "One at a time please" . Dumb machine: You fail at managing interference! What if you wanted to 'snap off' and it wouldn't read it because it was having a cry over too many cards? At that point do you get 'ripped off'?

What difference does it make?

What difference does it make? Who cares what bus I take and when?

you, Aaron, may not care who

you, Aaron, may not care who knows your movement, but I will always defend the rights of others who want privacy.

I'm not really worried about

I'm not really worried about the privacy either, although I do respect others concerns. What I'd like to know is what they can do with the data and how that would affect me? Perhaps if I knew more I'd be more afraid.

good place to start is

good place to start is reading snapper's privacy statement .. (which still hasn't been updated as per privacy commission recommendations)

Their privacy policy in a

Their privacy policy in a nutshell:

- We collect everything we can
- We store it forever
- We may use the data however we like internally
- We may hire others to analyse information for us
- We may release anonymised, aggregate information

Read the original thing - I may well have missed additional permissions they've given themselves.

It's the "retain forever" bit

It's the "retain forever" bit that has privacy commisioner concerned.

I'm somewhat concerned about

I'm somewhat concerned about the privacy issues, but not enough to not get the card. It generally works well, although the tagging off is a bit of a hassle.

What really gets my goat though is that to use the site as a user requires a bit of M$ code which means I can't check it from Firefox and/or Linux. I assume Mac users have the same issue.

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <blockquote> <p> <img> <br>
  • Lines and paragraphs break automatically.
  • Twitter-style @usersnames are linked to their Twitter account pages.
  • Twitter-style #hashtags are linked to search.twitter.com.

More information about formatting options

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.
5 + 7 =
Solve this simple math problem and enter the result. E.g. for 1+3, enter 4.