Privacy-Enhancing Technologies (PETs) in the age of video surveillance
From the high street to offices, hospitals and transport hubs - video surveillance cameras are everywhere. Technological advancements in smart systems and facial recognition technology allow organisations to heighten security and unlock the potential of video surveillance to learn more about their customers and employees.
However, concerns around unauthorised recording, data breaches or misuse of technology soon follow.
Against this backdrop, Privacy-Enhancing Technologies (PETs) emerge as a means to protect individuals' privacy. Generally, PETs are designed to help organisations manage and analyse data without compromising individual privacy. They achieve this by employing various strategies to minimise the use of personal data while maximising its security.
In fact, the market for privacy-enhancing technology is projected to reach a valuation of $25.8 billion by 2033, growing at an estimated rate of 26.6%. In the United States, the market for PETs surges as demand for rapid technological advancement grows, with the US currently holding a leading share of 76.1% of the global market in 2023.
This is being bolstered by international collaborations, which are enhancing the development and adoption of PETs. Notably, Singapore and South Korea have initiated programs to support the adoption of emerging PETs. In 2021, the United States and the United Kingdom also announced plans to collaborate on advancing PETs.
PETs in video surveillance are clearly instrumental in protecting individuals' privacy - but how?
PETs: the vanguard of video privacy
PET technologies are not standalone solutions but are part of a broader data infrastructure - designed to integrate with other PETs and governance procedures to create a holistic system for data governance and minimise data exposure.
Dynamic blurring, pixelation, and video redaction are all prime examples. These work by identifying and obscuring faces or identifiable markers in video feeds and stored video footage, to ensure individuals remain unidentifiable. For instance, a city surveillance system can monitor public spaces for security purposes, while maintaining the anonymity of passersby.
Encryption also plays a critical role in the secure handling of video data. By encrypting video feeds during transmission and storage, organisations ensure that access to this data is strictly confined to authorised personnel. This is particularly crucial in scenarios where sensitive environments are monitored, such as in hospitals or schools.
Another example is differential privacy, which introduces randomness into data analysis, allowing data processors to extract useful insights without identifying individuals. This is particularly useful for urban planning or traffic management, where aggregate data can inform improvements without compromising privacy.
Navigating the challenges of PETs
PETs are not necessarily a silver bullet.
While they can be instrumental in improving data security and privacy, organisations often grapple with a fundamental lack of internal capacities and specialised expertise. They often require substantial computational resources, which may not be accessible to all and can create a false sense of security that might undermine privacy and security.
There are also hurdles including technical limitations and high implementation costs.
Organisations can tackle these obstacles by investing in research and development for more adaptable and efficient PET solutions, conducting cost-benefit analyses to understand long-term value, and engaging in educational initiatives to bolster awareness about privacy and PETs.
Regulatory and legal landscape
Laws and regulations concerning surveillance and privacy vary widely across jurisdictions, sometimes making compliance a challenge for PET adoption.
In June 2023, the Information Commissioner’s Office (ICO) released guidance on Privacy-Enhancing Technologies (PETs) for data protection compliance, emphasising the critical role of PETs in maintaining privacy without compromising on security.
In the EU, the implementation of PETs must be GDPR compliant, which requires explicit consent for personal data processing - even for privacy-enhancing technologies.
In the US, the regulatory landscape is fragmented, with no comprehensive federal privacy law. In turn, bodies implementing these technologies must follow state and sector-specific regulations, such as California's CCPA and HIPAA. There has also been guidance from federal bodies; for example, the FTC has emphasised the importance of developing technologies that respect consumer privacy and cautioned against misleading claims about privacy and security practices.
The evolution of PETs in video surveillance
The advancements in these technologies, alongside the push for wider adoption, will have a significant effect on the video surveillance industry, with a growing appetite and need for effective and compliant privacy-enhancing solutions.
We can expect continued global partnerships and research & development investments, alongside efforts to make PETs more accessible and integrate them into surveillance systems. Growing awareness and technological progress are poised to make PETs a fundamental component of video surveillance.
The integration of PETs in video surveillance is a pragmatic approach to achieving a balance between security needs and privacy rights. By prioritising the adoption of PETs, entities that collect visual data can protect individual privacy while reaping the benefits of surveillance. While PETs should not be considered the be-all-end-all of privacy protection, they are a valuable tool in the arsenal of organisations, particularly when supplemented with proper governance frameworks and procedures