The Internet has gone through a major transition: in the year 2015, the number of devices connected by the Internet surpassed the number of people connected by the Internet. Public policymakers need to move past the idea that the Internet is something that we experience through a browser, using our mobile phones and personal computers. The Internet of Things (IoT) is here.
Vast amounts of bandwidth are now used by devices communicating about their status and our behavior. Experts estimate that there will be over 60 billion devices in the IoT by 2020. That means almost a million new devices are being connected to the Internet each hour—and the time to craft public policy is now.
These device networks will have an impact on our lives both as citizens and consumers. Recently, the global car manufacturer Volkswagen was caught designing software that cheated on Federal pollution tests. In this case, the cars were programmed to deceive the emission testing equipment, a large dynamometer or “rolling road” that measures pollutants as the car drives on a large treadmill-type platform. The scandal has caused immense damage to VW’s global brand. This case is not simply about misleading consumers, but about undermining civic virtue as well. There are good reasons for pollution regulation—we need government to help us achieve a civic goal of polluting less. People who bought VW cars were misled as consumers, but drivers of those cars are implicated as bad citizens—and VW as a bad corporate citizen—for contributing to more photochemical smog in our cities.
The IoT has already become a network that we as individuals have little awareness of or control over. The basis of a democracy is voluntary civic engagement: participation in setting government policy is intentional and a matter of personal choice. In democracies, citizens express their preference through activism and voting. Historically, governments and politicians eager to do a good job interpreting citizen intent also relied on opinion polls, conversations with civic groups, social science research, and huge record-keeping projects like the census.
Public policymakers need to work to keep the IoT open and interoperable, and to make it a public information infrastructure. As individuals, we need to keep track of where our data ends up. Even at this early stage, it would be difficult to make a list of all the third-party vendors, market analysts and government agencies that collect the data we have generated. Down the road, we may have little choice on where our data ends up. Standards that determine access to data are now being set behind closed doors, defined by industry engineers arguing for secrecy and proprietary systems. If these arguments succeed, the next Internet will be even more personally intrusive, publicly unaccountable and susceptible to manipulation than the current one.
To prevent that, a basic step would be to require that any connected device be able to divulge a list of the “ultimate beneficiaries” who benefit from its sensor data. Terms of service always get modified, ownership structures change over time and the number of third parties paying for access to our data only gets longer over time. But if the smart lightbulb you buy is able to relay some data up the network to other organizations, it should be able to pull down a list of the corporate, government and civic entities using your data.
[“Source-brookings”]