Skip to content

Smart City Data Procurement – Public Promises vs Private Contracts

An investigation into four municipal smart city deployments, revealing how administrative loopholes allowed councils to bypass standard procurement schedules and grant private vendors unprecedented access to citizen telemetry.

A low-angle view of a modern smart streetlight against a twilight sky. Beneath the main LED lantern sits a small glass sensor dome reflecting a grid of digital telemetry lines.

San Diego officials publicly pitched a $30.23 million street lighting upgrade as a benign environmental measure. A month later, the filing of Ordinance O-20784 legally ceded ownership of the extracted citizen telemetry to a commercial vendor. The new hardware arrived pre-configured with a ‘Situational Awareness’ service built explicitly for law enforcement.

Glossary

  • Master Lease: A primary rental agreement that dictates long-term equipment use and frequently controls the secondary assets, like data, generated by that equipment.
  • Joint Venture: A commercial arrangement pooling resources between two or more parties, frequently allowing operations to be shielded by commercial confidentiality rules.
  • Telemetry: The automatic measurement and wireless transmission of data from remote sensors, such as smart streetlights, back to a central server.
  • Municipal Smart City: A local government area equipped with interconnected physical hardware, such as sensor nodes and Internet of Things meshes, to continuously extract digital telemetry and manage urban infrastructure, frequently involving the transfer of processed civic data to commercial vendors.

The Pitch vs The Contract

The divergence began in December 2016. The San Diego City Council unanimously approved the deal with GE Current to retrofit 8,600 streetlights and install 4,200 ‘Intelligent System sensor nodes’.

Project directors explicitly stated at the launch that the cameras would not capture video.

They promised an open data portal for civilian application developers. The entire public relations campaign focused on environmental metrics and traffic monitoring. One month later, Ordinance O-20784 was filed in the municipal archive.

The filing authorised a Master Lease with GE Government Finance to secure the physical hardware. A Master Lease is a primary rental agreement that dictates long-term equipment use. Yet the intellectual property clauses were separated from the main text and placed into the technical schedules. These vendor-authored annexes legally ceded ownership of all ‘processed data’ to the commercial provider. They also activated a ‘Situational Awareness service’ configured specifically for law enforcement. City officials had spent the previous month promising residents a benign environmental tool. Ordinance O-20784 instead granted police direct access to the newly installed network.

San Diego Deployment: Pitch vs Contract

The Public Pitch (December 2016) The Legal Reality (January 2017)
30.23 million dollar street lighting upgrade presented as an environmental and traffic monitoring measure. Ordinance O-20784 authorised a Master Lease securing physical hardware under commercial finance terms.
Cameras explicitly stated by project directors not to capture video. Vendor-authored technical annexes activated a 'Situational Awareness service' configured specifically for law enforcement.
Promised an open data portal for civilian application developers. Ownership of all processed citizen telemetry legally ceded to the commercial provider.

The Operational Reality of San Diego

For over a year, the hardware’s video capability remained undocumented in the public sphere. San Diego Police Department personnel started extracting criminal investigation footage from the streetlights in August 2018. They did this without a municipal surveillance policy.

Council registers contain no record of a public consultation prior to the shift. Officers simply logged into the new system.

Public awareness reached a critical threshold during civil unrest in May and June 2020.

The system ran quietly until the civil unrest of May and June 2020, when journalists at TechPolicy.Press published the network’s digital footprint. According to the media reports, the digital footprint indicated that police had accessed the municipal feeds at least 35 times to monitor protests and property damage.

Public anger forced the council to order a network shutdown.

That directive exposed the physical reality of the technical annexes. When city administrators tried to cut the camera feeds, they hit a hard infrastructure trap. They found they could not deactivate the digital surveillance sensors without cutting the electrical power to the streetlights.

The vendor maintained control over the data flow and refused to resolve the issue until all financial commitments were met. A subsequent County Grand Jury audit confirmed the operational breakdown. Promised energy savings never materialised, the nodes were never installed. San Diego remains contractually bound to pay $2.3 million annually in debt servicing for deactivated equipment.

The internal audit detailing the exact number of times the Situational Awareness service was queried before 2020 remains absent from the public.

The Operational Breakdown in San Diego

  • December 2016

    Public Approval

    San Diego City Council unanimously approves the deal with GE Current to retrofit 8,600 streetlights and install 4,200 sensor nodes.

  • January 2017

    Ordinance O-20784 Filed

    The municipal archive filing grants police direct access to the network and legally transfers processed data ownership to the commercial vendor.

  • August 2018

    Undocumented Police Extraction Begins

    San Diego Police Department personnel start extracting criminal investigation footage without a municipal surveillance policy or public consultation.

  • May to June 2020

    Surveillance Exposed and Network Shutdown

    Journalists publish the network's digital footprint during civil unrest. Public anger forces a shutdown order, trapping the city in a debt servicing contract for deactivated equipment.

The Bristol Joint Venture Blackout

Similar breakdowns occurred across local authorities in the United Kingdom, driven by corporate structure.

Bristol City Council launched the Bristol Is Open project in April 2015. They presented it as an ‘open programmable city’. Public communications stated that citizens would provide their data once, and it would be reused securely and only with explicit permission.

Then, NEC Corporation entered the project.

The Japanese technology firm announced a long-term partnership with Bristol Is Open in February 2016. This agreement integrated fibre networks, wireless systems, and an Internet of Things sensor mesh. The project operated as a Joint Venture, a commercial arrangement pooling resources between two or more parties, between the council and the University of Bristol.

This specific corporate structure allowed the city to manage the digital rollout outside of standard public procurement schedules. Bristol City Council transferred the project to its sole ownership in December 2019. The company then became dormant. The final disposition of the intellectual property and the historical sensor data collected during the active phase is missing from the public registry.

The Bristol Joint Venture Bypass

Phase 01

April 2015: Bristol City Council launches Bristol Is Open, stating citizen data will only be reused with explicit permission.

Phase 02

February 2016: NEC Corporation enters a long-term partnership, integrating an Internet of Things sensor mesh.

Phase 03

Administrative Bypass: The project operates as a Joint Venture between the council and the University of Bristol, shielding the digital rollout from standard public procurement schedules.

Phase 04

December 2019: The council transfers the project to sole ownership. The company becomes dormant, leaving the final disposition of intellectual property unrecorded.

The Manchester Cooperative Loophole

Manchester City Council employed a different administrative loophole. The UK Government awarded the city £10 million in December 2015 for the CityVerve project. Sir Richard Leese issued a press release focusing on citizen health, environmental monitoring, and talkative bus stops. The technical architecture relied on aggregating previously disconnected datasets from 21 different organisations.

Independent reviews published after 2018 exposed a severe administrative bottleneck.

Negotiating the intellectual property and data sharing agreements took between six and 12 months prior to contract signature. Council reports indicate that deployments were approved by ‘written agreement within the cooperative governance, rather than requiring contracts or contract schedules’. Bypassing standard contract repositories removed the data processing terms from standard public schedules. The specific commercial entities that retained rights over the analytical models are absent from standard council meeting minutes.

The Cooperative Governance Bypass

  • The UK Government awarded Manchester 10 million pounds for the CityVerve project, pitching environmental monitoring and citizen health.
  • The technical architecture relied on aggregating previously disconnected datasets from 21 different organisations.
  • Independent reviews exposed an administrative bottleneck where intellectual property negotiations took up to 12 months in private.
  • Deployments were approved by written agreement within cooperative governance, bypassing standard contract repositories.
  • The specific commercial entities retaining rights over the analytical models remain absent from standard council meeting minutes.

Missing Analytics in Barking and Dagenham

The London borough of Barking and Dagenham initiated its physical hardware swap in March 2017. Contractors from Volker Highways installed an initial 15,890 LED lanterns across the municipality.

The final target was 28,000 smart street lights.

Council promotional materials framed the massive public works project entirely around carbon reduction. Residents were pitched a straightforward upgrade designed to save £350,000 per annum on energy bills.

The network operates an Urban Control Central Management System.

This system acts as a platform for continuous Telemetry extraction, which is the automatic measurement and wireless transmission of data from remote sensors. Procurement registers confirm (Contracts Register – May 2024) continuous highway maintenance contracts with the provider. The public consultation completely ignored the deployment of a city-wide digital management system. The specific Article 28 data processing schedule is missing from the public record. We do not know if the vendor is permitted to aggregate and resell movement data.

Barking and Dagenham Dual Deployment

The Public Works Project

Hardware Installation

Contractors from Volker Highways installed an initial 15,890 LED lanterns, targeting a total of 28,000 smart street lights.

Stated Objective

Promotional materials framed the project entirely around carbon reduction and saving 350,000 pounds per annum on energy bills.

The Unadvertised Data Extraction

Urban Control System

The network operates a Central Management System capable of continuous telemetry extraction from remote sensors.

Missing Privacy Schedules

The public consultation ignored the digital management system. The specific Article 28 data processing schedule is missing from the public record.

Source

Sources include: the ‘Smart Streetlights’ report by the San Diego County Grand Jury (2021-2022); legal analysis in City Attorney Mara W. Elliott’s ‘Report RC-2020-2’; the ‘Manchester Digital Strategy 2021-2026’ and executive meeting minutes from Manchester City Council; the independent ‘Smart City Demonstrators’ review by the Connected Places Catapult; the ‘Contracts Register’ from the London Borough of Barking and Dagenham; corporate press releases from NEC Corporation; and media reports from TechPolicy.Press.

Claim-Source Matrix

Core Finding Primary Source Document Status
January 2017 Ordinance O-20784 establishes the legal reality of vendor-owned processed data and a law enforcement Situational Awareness service. City Attorney Report RC-2020-2 Confirmed
35 documented instances of San Diego Police Department protest surveillance in mid-2020. TechPolicy.Press (Unprivileged Media Report) Confirmed
Bristol Is Open structural shift marks the moment the joint venture became a dormant company, leaving the intellectual property unrecorded. Joint Venture Registry / Master Timeline Confirmed
Manchester City Council admission of bypassed standard contracts confirms deployments relied on cooperative governance agreements. Manchester City Council Executive Minutes Confirmed
Absence of a public data processing schedule outlining how the Barking and Dagenham telemetry data is stored or shared. Missing Pieces Inventory Confirmed

What We Still Do Not Know

  • The exact data transfer rights granted to NEC during the active phase of the Bristol Is Open partnership before the company became dormant.
  • The final corporate ownership of the analytical models generated by the Manchester CityVerve project after the council deliberately avoided standard contract schedules.
  • Whether the overarching Data Processing Agreement for the London Borough of Barking and Dagenham permits the vendor to train proprietary algorithmic models on citizen telemetry.
  • The exact volume, frequency, and destination of the data telemetry extracted by GE Current and Ubicquia in San Diego between 2018 and 2020.
  • Internal access logs detailing the exact number of times the San Diego Police Department queried the Situational Awareness service outside of the May and June 2020 civil unrest window.
PRIORITY_NEWSLETTER_BRIEFINGS

Archive Updates

New Veriarch investigations and unresolved questions, sent directly to your inbox every other week.

CONNECTION SECURE. UNSUBSCRIBE AT ANY TIME.

Comments (0)

Leave a Reply

Your email address will not be published. Required fields are marked *

Similar Topics

Back To Top