By Molly Connelly and Jan Bultmann
As Seattle City Light customers, we ask Seattle City Light (SCL) to create an advanced metering infrastructure policy that mandates that SCL obtain informed consumer consent before installing advanced metering devices (AKA “smart meters”) — that is, an opt-In policy.
The system should carry no financial disincentives for those customers who decide not to opt-in.
In this blog:
- Threats to Privacy
- Potential Unintended Consequences
- Erosion of Public Trust
- Current Legal Landscape
- Gap Analysis of Federal and State Regulations
- Precedents that Support an Opt-in Model
- Conclusion
Threats to Privacy
Advanced metering technology poses a threat to individual privacy, as federally funded research shows. Government agencies including the Congressional Research Service1, Department of Energy2 and National Institute of Standards and Technology3, have written extensively about the specific threats to privacy generated by residential smart meters. Independent researchers have further documented the level of intimate detail that can be gathered from smart meter data, such as what customers are watching on television.4,5
Potential for Unintended Consequences
We are concerned that smart meters can now, or in the future, be misused to act as data collection devices which make previously private activities inside our dwellings subject to unauthorized official and criminal surveillance. We are concerned about such data being collected and stored in databases that may not be protected against warrantless searches, and may be managed by companies that have a history of profiting off of warrantless electronic surveillance.6 We are concerned about a lack of clarity regarding Constitutional protections for information collected by Seattle City Light that could be shared with city, state and federal law enforcement via the Seattle Shield Program7 and the Washington State Fusion Center.
Erosion of Public Trust
In the midst of the continuing Snowden revelations about government use of unregulated technology for warrantless electronic surveillance, public trust in the ability of elected officials and public institutions to adequately protect us is at a low point. We need laws and regulations to catch up with technology so that there are clearly defined privacy protections for smart meter data, and data collection and storage protocols that are based on established, relevant law, not just departmental policies.
Current Legal Landscape
Legal experts acknowledge that our current federal laws and regulations don’t provide adequate smart meter data privacy protection. For example, the Federal Wiretap Act could allow a utility to give permission to law enforcement or a third party to intercept smart meter data without a warrant.8 The third party doctrine as it relates to utility records containing smart meter data has not yet been tested in the Supreme Court. The Stanford Technology Law review advises that “When confronted with a business record or other information held by a third party, the Court should ask whether the record, or the technology used to create the record, reveals information about activities taking place inside the home that otherwise would not be available absent a trespass into the home. The Court should further inquire as to whether the consumer has been able to exercise any real choice about whether to create such records…Under this test, information about in-home activities generated by advanced meters or sensors in a demand response system would be protected by the Fourth Amendment” and “law enforcement officials should be required to obtain a warrant before being given access to those records”.9
At the September 26, 2013 Foreign Intelligence Surveillance Court Review, Senator Mark Udall asked Deputy Attorney General James Cole for clarification on whether section 215 of the Patriot Act (the “business records” provision of the Foreign Intelligence Surveillance Act which allows records to be collected via secret general warrants issued with a diluted standard of probable cause and placing the recipient under gag order) can be used by the National Security Agency to collect business records including “utility bills”; Mr. Cole was unable to rule it out.10
Gap Analysis of Federal and State Privacy Protections
The US Supreme Court has asserted that “at the very core [of the Fourth Amendment] stands the right of a man to retreat into his own home and there be free from unreasonable government intrusion”.11Our Washington State Constitution provides even more rigorous protection of privacy rights than those guaranteed by the Fourth Amendment. Unlike the Fourth Amendment, WA State Const. Article I Section 7 “clearly recognizes an individual’s right to privacy with no express limitations”12 and states that “No person shall be disturbed in his private affairs, or his home invaded, without authority of law.” Washington State has historically recognized that an individual has some level of protected privacy interest in power usage, but existing regulations on how law enforcement can access utility records are based on analog meter electrical consumption records collected monthly which are not able to reveal discrete information about a customer’s in-home activities.
The current Revised Code of Washington (RCW 42.56.335) which regulates law enforcement access to utility records does not require a warrant, or a showing of probable cause, but instead only requires the weak standard of “reasonable belief” that the utility record will help establish that the customer committed a crime. Advanced meter electrical consumption records can reveal discrete information and intimate details about a customer’s activities occurring within the confines of their home, including use of medical equipment, hours of occupancy, and more. These merit Constitutional protection requiring a warrant for law enforcement to access.
Our laws have not kept pace with changing technology, and we are at risk of violating constitutionally protected privacy rights. In 1994 State v. Young the WA Supreme Court recognized strict privacy protections regarding infrared as a device that discloses information about activities occurring within the confines of a home, and which a person is entitled to keep from disclosure absent a warrant. An apt quote from the ruling:
“However, in construing Const. art. 1, § 7, we have resisted the uncertain protection which results from tying our right to privacy to the constantly changing state of technology. We recognize as technology races ahead with ever increasing speed, our subjective expectations of privacy may be unconsciously altered. Our right to privacy may be eroded without our awareness, much less our consent. We believe our legal right to privacy should reflect thoughtful and purposeful choices rather than simply mirror the current state of the commercial technology industry.”13
We need the City of Seattle to step in and model privacy policies that reflect thoughtful and purposeful choices.
Precedents that support an opt-in policy
Other jurisdictions have heard customer concerns about smart meters including privacy and data security issues and have responded by creating opt-in policies. The Eugene Water and Electric Board (Oregon’s largest customer owned utility) voted unanimously on Oct. 1, 2013 to move forward with an advanced metering project that takes an opt-in approach that focuses on consumer choice.14 In 2012 the state of New Hampshire enacted a law which prohibits electric utilities from installing smart meter gateway devices without the property owner’s consent.15 Vermont now requires written notice before installing a smart meter, and prohibits fees for those customers who choose not to opt-in.16 Section 1252 of the United States Energy Policy Act of 2005 acknowledges consumer choice and supports an opt-in approach. There is a current bill in the Washington state legislature that will give additional statutory protection to smart meter data by adding it to the public records disclosure exemptions.17
Conclusion
Given the privacy risks of smart meters, consumers must be allowed to choose whether to accept these risks or avoid them by not opting-in to a smart meter. In the absence of adequate state and federal legislation, we call upon the City of Seattle and Seattle City Light to enshrine the “Opt-in” model in law. The current plan for an opt-out presumes consent; which we argue is inadequate and potentially even unethical, because the technology of smart meters has gotten ahead of consumers as well as regulators. The opt-in model requires explicit, informed consent and encourages customers to be active participants in their utility decisions by allowing them to make an informed consumer choice after being educated about the benefits and risks of smart meters and the security of their information.
