The quote from EFF really highlights concerns about such a system.

I’d love to see the data gathering and protection policies in place for all the footage aggregated. Are the cameras constantly being recorded? Where is the footage stored? Who has access? How is the data (camera locations, footage, authorized users, access logs, etc) protected? How long is it saved? What happens to the data when the contract ends and isn’t renewed? What happens to all the monitoring software installed on a camera “grid” once the contract ends? Is it uninstalled automatically or just shut off and left there?

It’s troubling enough that towns as small as 25k people are blowing such a large chunk of money on hypothetical situations, but there’s zero mention or transparency into the security aspect of this entire enterprise. So many of these IoT outfits ignore data security, because they feel it’s somebody else’s problem. It’s the main reason why you don’t want household IoT devices on the same network as your trusted devices.

We have got to get ourselves a real version of the GDPR and then enforce it. The EU hit it out of the park with the GDPR and their regulatory bodes that investigate and fine violators.

https://trustcassie.com/resources/blog/the-backbone-of-the-gdpr

Can't load article without js