On Monday, Uber filed a lawsuit against LA’s Department of Transportation (LADOT) pushing back against the requirement that scooter operators share anonymized real-time location data with the city.
The suit that was first reported by CNET but has yet to be filed in LA Superior Court, centers on LADOT’s use of a digital tool called the mobility data specification program (MDS).
The department created the tool as a way to track and regulate all of the electric scooters that are operating on its streets. MDS provides the city with data on where each bike and scooter trip starts, the route each vehicle takes, and where each trip ends. LADOT has said the data won’t be shared with police without a warrant, won’t contain personal identifiers, and won’t be subject to public records requests.
Naturally, MDS has proven controversial with scooter companies, which have balked over having to share location data with the city. It’s growing into a bigger problem beyond LA.
Cities such as Columbus, Chattanooga, Omaha, San Jose, Seattle, Austin, and Louisville are demanding scooter companies agree to share data through MDS as a condition for operating on their streets.
In a statement Uber said MDS would lead to an unprecedented level of surveillance and vowed to stop it. It’s leaning on a recent analysis by California’s Legislative Counsel to make its argument. The counsel said MDS could violate the California Electronic Communications Privacy Act, which was signed into law in 2015.
In August, Uber and Lyft sent a letter to California Attorney General Xavier Becerra, in which the companies argued that LADOT was exceeding its authority with MDS.
The companies wrote: “While we support the creation of a global standard for data-sharing for local municipalities, it appears that certain city MDS requirements may be in violation of CalECPA. We have repeatedly raised concerns directly with these municipalities throughout the development and implementation of MDS, and yet they continue to require the MDS as a condition of our operating permits.”
In a recent statement, Uber said that it has exhausted its options and had no choice but to sue the city.
It said: “Jump riders in Los Angeles have a reasonable expectation of privacy in the trip data created from riding on our bikes and scooters. Independent privacy experts have clearly and repeatedly asserted that a customer’s geolocation is personally identifiable information, and – consistent with a recent legal opinion by the California legislative counsel – we believe that LADOT’s requirements to share sensitive on-trip data compromises our customers’ expectations of data privacy and security. Therefore, we had no choice but to pursue a legal challenge, and we sincerely hope to arrive at a solution that allows us to provide reasonable data and work constructively with the City of Los Angeles while protecting the privacy of our riders.”
LADOT director Seleta Reynolds said that the city encoded privacy protections into the regulations in order to give them the force of law.
She added that it’s a Day One job and a forever job of city officials to make sure that the open source tools that we build do not become tools that people can use to invade the privacy of others.