Source-linked AI summary
Autonomous Vehicles for Smart and Sustainable Cities: An In-Depth Exploration of Privacy and Cybersecurity Implications
Hazel Si Min Lim, Araz Taeihagh
TL;DR
Rapid urban growth increases mobility needs while creating social, economic, and environmental pressures, and AVs are examined as a potential smart and sustainable transportation solution. The paper synthesizes AV benefits and privacy and cybersecurity risks, then reviews government responses across multiple jurisdictions. It concludes that privacy responses mainly use legislation or voluntary guidelines, while cybersecurity responses largely rely on broader regulations, research, and public–private collaboration.
Problem
The paper addresses limited analysis linking AV privacy and cybersecurity risks with smart and sustainable development and limited country-specific evidence on governance responses.
Method
The study reviews literature on AV sustainability, identifies privacy and cybersecurity implications, and examines government responses across countries and US states.
Results
Governments mainly address privacy risks through general legislation or voluntary guidelines, while cybersecurity responses mostly use non-AV-specific regulation, research, and private-sector collaboration.
Takeaways & Limitations
AV sustainability benefits depend on protecting informational privacy and communication networks to support trust, social stability, economic sustainability, and road safety.
Takeaways & Limitations
AV mobility benefits may produce unsustainable effects, including increased congestion and reduced support for walking or cycling, depending on ownership and service patterns.
Abstract
from arXiv · showhide
Amidst rapid urban development, sustainable transportation solutions are required to meet the increasing demands for mobility whilst mitigating the potentially negative social, economic, and environmental impacts. This study analyses autonomous vehicles (AVs) as a potential transportation solution for smart and sustainable development. We identified privacy and cybersecurity risks of AVs as crucial to the development of smart and sustainable cities and examined the steps taken by governments around the world to address these risks. We highlight the literature that supports why AVs are essential for smart and sustainable development. We then identify the aspects of privacy and cybersecurity in AVs that are important for smart and sustainable development. Lastly, we review the efforts taken by federal governments in the US, the UK, China, Australia, Japan, Singapore, South Korea, Germany, France, and the EU, and by US state governments to address AV-related privacy and cybersecurity risks in-depth. Overall, the actions taken by governments to address privacy risks are mainly in the form of regulations or voluntary guidelines. To address cybersecurity risks, governments have mostly resorted to regulations that are not specific to AVs and are conducting research and fostering research collaborations with the private sector.
1. Introduction
Rapid urban growth is increasing mobility demand while intensifying congestion, environmental, social, and economic pressures. The paper examines AVs as a potential smart and sustainable transportation solution, focusing on privacy, cybersecurity, and government responses.
- Motivation: Urban growth is increasing demand for mobility while intensifying congestion, pollution, climate, public-health, and unequal-access problems.US congestion costs reached $124 billion in 2013 and were projected to reach $186 billion by 2030.
- AVs as a potential solution: AVs could reduce emissions and energy consumption while improving efficiency, traffic flow, road safety, and transport accessibility.These benefits are linked to AVs’ connected communication with other vehicles and critical infrastructure.
- Core risks: AV operation and societal impacts depend on managing privacy and cybersecurity risks associated with storing, communicating, and protecting vehicle data.Unclear data ownership, storage, transmission, and vulnerable communication networks create governance challenges.
- Study aims: The study links AV privacy and cybersecurity risks to smart and sustainable development and reviews emerging government responses.It addresses AV sustainability benefits, associated risks, sustainability implications, and solutions across countries.
- Study structure: The paper examines smart and sustainable-city literature, AV benefits and risks, governance responses, and their implications before concluding.
2. Background Information
Sustainable cities integrate long-term environmental, social, and economic objectives, while smart cities emphasize technology, connectivity, and citizen-oriented urban services. AVs use sensing, AI, and vehicle communications to operate independently, but introduce safety, liability, and governance challenges.
- Sustainable and smart cities: Sustainability is framed as meeting present needs without compromising future generations and balancing environmental protection, economic growth, and social equity.The paper presents this balance as the triple bottom line.
- Sustainable and smart cities: Smart-city development uses technology in infrastructure, governance, and education to improve citizen–government interaction and living standards.Smart City 3.0 emphasizes citizens’ active use of smart solutions.
- Sustainable and smart cities: The smart-city concept’s emphasis on connectivity and information use can shift attention away from environmental considerations.The literature’s use of “smart city” surpassed “sustainable city” in 2012.
- Background to AVs: AVs independently make driving decisions using sensor data, AI, and vehicle-to-vehicle and vehicle-to-infrastructure communications.Their information-processing and environmental-adaptation capabilities exceed those of human drivers in the paper’s account.
- Background to AVs: AVs are associated with potential safety gains because they reduce reliance on human judgment, although system errors and cyber-attacks remain risks.Traffic fatalities remain substantial globally, motivating interest in automated driving.
- Background to AVs: Governments must balance AV adoption and its potential mobility and safety benefits against societal, economic, system, cybersecurity, and liability risks.Poorly allocated accident responsibility may expose manufacturers and software providers to lawsuits and deter innovation.
- Background to AVs: The study uses the SAE classification and focuses on fully autonomous AVs at levels 4 and 5.At level 5, vehicles are expected to operate under all environmental conditions.
3. AVs and Sustainability
AVs may support economic, social, health, and environmental sustainability through connectivity, shared mobility, accessibility, and coordinated driving. However, their benefits depend on adoption and usage patterns, which can also increase congestion or disadvantage more sustainable transport modes.
- Economic sustainability: AV connectivity can improve road capacity and traffic flow, reduce congestion, and generate economic benefits through coordinated data management and platooning.The paper notes that congestion benefits increase with longer platoons and greater cooperation between AVs.
- Shared mobility: Shared AVs can reallocate underused vehicles, provide community-tailored transport, free passengers’ time, and reduce labour costs in transportation industries.Short-term employment concerns may arise in freight, food distribution, and traffic policing.
- Social sustainability: AVs can expand transport access for elderly and disabled users, supporting more inclusive economic growth.
- Trade-offs: Shared and individually owned AVs may increase congestion or sideline walking and cycling, requiring balance between accessibility gains and unsustainable aggregate effects.Vehicles may cruise empty or clutter areas around transit stations when mobility services are poorly integrated.
- Public health and wellbeing: AVs may improve public health and wellbeing by addressing transport inaccessibility, noise, poor planning, safety concerns, urban sprawl, and disability-related disadvantages.
- Environmental sustainability: AVs may reduce carbon emissions and improve fuel economy by coordinating vehicles, reducing congestion and idling, and limiting unnecessary acceleration and braking.
4. AV Privacy
AVs collect and share sensitive information needed for connected transport, but unclear access, misuse, surveillance, and governance can threaten privacy, trust, and smart and sustainable development. Governments have responded through privacy legislation, voluntary guidelines, consultations, and data-protection requirements, with approaches varying across jurisdictions.
- Privacy implications: AVs record and transmit sensitive data to vehicles, infrastructure, and third parties, creating privacy concerns despite data sharing’s role in traffic management and liability assignment.Unrestricted sharing raises concerns because AVs can store video and audio recordings and transmit them through V2V and V2I networks.
- Privacy implications: Unclear access to AV data can enable misuse, including inaccurate insurance premiums and credit scores, while surveillance may undermine freedom, democratic participation, and social equity.The paper links privacy risks to discrimination, reduced participation in democratic processes, social unrest, and impaired smart governance.
- Privacy implications: Privacy protection supports consumer trust and market uptake, which the paper connects to further improvements in AV safety, efficiency, and traffic flow.Trust is presented as especially important in sharing-economy settings where consumers provide mobility services themselves.
- Government responses: Governments mainly use general privacy legislation, voluntary guidelines, consultations, and regulatory exploration, while US states increasingly enact AV-specific privacy rules.The surveyed approaches include EU-wide data protection, national laws, non-mandatory guidance, and state disclosure requirements.
- Government responses: State requirements commonly mandate disclosure of collected personal information, while Germany, France, and Australia had acknowledged concerns without introducing dedicated privacy legislation.California and several other states require disclosure or related protections; Australia supplements existing law with consultations and privacy-by-design recommendations.
- Government responses: The UK issued eight non-mandatory principles covering data minimisation, appropriate management, ownership, and deletion of sensitive AV data.The principles also recommend ISO 27018 and ISO 29101 practices for personally identifiable information and privacy architecture.
5. AV Cybersecurity
AV cybersecurity is tied to safety, social stability, and the economic value of connectivity because connected vehicle systems expose safety-critical functions to cyberattacks. Governments have mainly combined general cybersecurity laws, research, guidelines, collaborations, and awareness measures, with uneven AV-specific action.
- Cybersecurity implications: Cybersecurity vulnerabilities in AV communication networks can compromise safety-critical functions through hacking, GPS jamming, sensor or map manipulation, and denial-of-service attacks.The paper also identifies weaknesses in the controller area network, where malicious content in one component can affect connected vehicle functionalities.
- Cybersecurity implications: Cybersecurity supports safety and social stability, while inadequate practices can undermine the economic gains expected from connected vehicles.The paper describes cyberattacks as costly and warns that systematic weaknesses could set back connectivity efforts.
- Government responses: Governments commonly address AV cybersecurity through non-AV-specific legislation, further research, guidelines, and, in some countries, public education.The paper identifies Japan and South Korea as lacking an indicated approach to AV or broader cyber-system cybersecurity at the time examined.
- Government responses: The US combines federal research and collaboration with AV-specific recommendations and legislation covering penetration testing, software separation, and collected-data security.NHTSA established cybersecurity research capacity, while the SPY Car Act addresses resilience to hacking and data protection.
- Government responses: US states including California, Massachusetts, and Pennsylvania introduced AV cybersecurity measures, including detection requirements and intrusion notification obligations.Other states enacted broader cybersecurity laws, such as criminalising unauthorised access or establishing cybersecurity research committees.
- Government responses: The EU, China, Singapore, Germany, France, Australia, and the UK used combinations of legislation, guidelines, working groups, consultations, research, or awareness initiatives.The UK developed lifecycle cybersecurity methods, Germany established working groups, the EU issued connected-vehicle guidance, and Singapore amended cybercrime legislation.
6. Discussion and Conclusions
AVs may support smart and sustainable development through environmental, economic, and social benefits, but privacy and cybersecurity risks must be addressed. Governments have mainly responded through general legislation, AV-specific rules in some jurisdictions, voluntary guidance, research, and public–private collaboration.
- AVs and sustainable development: AVs can reduce congestion, emissions, fuel consumption, and transport inaccessibility, although increased accessibility may create unintended trade-offs.Connected AVs can optimise traffic flows and generate economic benefits while potentially increasing induced demand.
- Privacy implications: Informational privacy protects users from data misuse, supports consumer trust, and guards against surveillance that may undermine social equity and democratic participation.Surveillance may discourage citizens’ use of connected platforms and impede smart-city development.
- Privacy governance: Most surveyed governments address AV privacy through legislation applying broadly to personal data, with the EU GDPR described as comparatively broad and restrictive.The US SPY Car Act addresses some vehicle-information uses but does not similarly restrict insurers’ use of data for premiums.
- Cybersecurity implications: AV cybersecurity is central to sustainable development because attacks on sensitive data, vehicles, communication networks, and critical infrastructure can threaten safety, stability, and wellbeing.Cybersecurity also supports market uptake needed for further technological improvements and broader benefits.
- Cybersecurity governance: Cybersecurity governance varies across jurisdictions, combining general cyber legislation, AV-specific rules, consultations, directives, and voluntary guidelines.China and Singapore use broader cyber regulations, while some US states and the federal SPY Car Act address vehicle or AV cybersecurity specifically.
- Policy relevance: The study informs policymakers, scholars, and automotive stakeholders about AV privacy and cybersecurity challenges and governments’ emerging response strategies.Its scope covers the relationship between AVs, smart and sustainable development, and existing risk-management measures.