Privacy Commissioner Issues Findings On Smart Meters
Monday, December 19, 2011 @ 11:59 AM
Victoria, B.C. –The information and privacy Commissioner for BC, Elizabeth Denham has issued a release on the privacy and security of BC Hydro’s Smart Meters. "It is clear from my investigation that BC Hydro is taking privacy and security seriously as it develops a framework for the implementation of smart meters and a smart grid," said Commissioner Denham. "But there are areas for improvement."
BC Hydro is replacing electro-mechanical and digital meters for its more than 1.8 million customers with smart meters. Once fully operational, smart meters will provide hourly information about customers’ electricity consumption. As a result, analysis of
household consumption may reveal more information about our daily lives.
The Commissioner found that BC Hydro is complying with the Freedom of Information and Protection and Privacy Act with regard to the collection, use, disclosure, protection and retention of the personal information of its customers. However, the Crown
corporation is not in compliance with regard to the notification it provides to its customers about smart meters.
"BC Hydro is required by law to tell their customers the purpose for collecting personal information for the smart meters project, what legal authority they have to do so and to provide contact information for a BC Hydro employee who can answer any questions
that arise regarding collection. Hydro is not currently meeting this requirement, and we’ve made some recommendations to help them improve their customer notification," said Denham.
The report makes 14 recommendations that will improve BC Hydro’s existing privacy and security practices. BC Hydro has committed to put action plans in place to address these recommendations.
"There is still much work to be done by BC Hydro with respect to smart meters and the smart grid. While I am satisfied with the work that has been done to date, my office will continue to take an active role in monitoring this project to ensure BC Hydro is
properly considering privacy and security," said Denham.
The Commissioner’s Office received complaints and correspondence from more than 600 British Columbians about the smart meter program, which prompted the investigation.
Here are the full 14 recommendations:
1. As BC Hydro introduces new elements to the smart grid, or increases the functionality of existing elements of the grid, it should continue to complete privacy impact assessments in each instance and provide it to the OIPC for review and comment before implementation.
2. BC Hydro must develop more comprehensive web pages and paper notices for its customers for the SMI project regarding the purposes for collecting hourly electricity consumption data, the legal authority for collection, and the contact information for the person within BC Hydro who can answer questions regarding the collection.
3. Before any future secondary uses of electricity consumption information take place, BC Hydro should complete a privacy impact assessment and provide it to the OIPC for review and comment prior to implementation.
4. BC Hydro should follow through with its plans to document in detail its role-based access model for the SMI project. This model should include a comprehensive roles matrix that maps job functions with personal information and privileges required to perform those functions. Roles should be defined as specifically as possible. In accordance with the least privilege principle, BC Hydro should ensure each role only has access to the minimum amount of personal information necessary to perform their functions.
BC Hydro should fully document the role-based access matrix and regularly check and update it as required. BC Hydro should also implement a monitoring/auditing plan to evaluate whether its staff is properly accessing and using information.
5. If, in the future, BC Hydro becomes involved in offering its customers the option of disclosing their consumption information to third parties, it should take reasonable steps to ensure that the third parties are transparent about their personal information practices.
6. BC Hydro should ensure that it reviews all policies relating to information security and privacy on a regular basis to ensure that they remain current and relevant. BC Hydro should document this review process; including putting dates on policies to reflect BC Hydro’s most recent review.
7. BC Hydro should make annual privacy and information security training mandatory for all employees and contractors.
8. While it appears to be BC Hydro’s intention, it should ensure that it introduces read-access logging prior to commencing the collection of hourly electricity consumption information. BC Hydro should also implement a monitoring/auditing plan to evaluate the effectiveness of its read-access logging.
9. BC Hydro should archive SMI project records containing personal information that are no longer required for the delivery of customer services on a regular and ongoing basis. BC Hydro should develop a classification scheme to identify those records.
10. BC Hydro should not retain customer personal information indefinitely. BC Hydro should continue to develop and implement a records retention and disposition policy that sets out when the disposal of personal information of its customers and former customers will occur
11. BC Hydro should ensure that it has designated an individual to be responsible for privacy within the organization. This individual should have primary responsibility for privacy within BC Hydro and within the SMI project. This individual should be a member of BC Hydro’s executive team and/or should be fundamental to BC Hydro’s business decision-making process.
12. BC Hydro should develop annual and/or multi-year privacy performance plans for the SMI project.
13. BC Hydro should ensure it has reporting mechanisms regarding its privacy management framework and it should state these mechanisms in its privacy policies and procedures.
14. BC Hydro should develop policies relating to training of employees and service providers, audit and breach management
Comments
I think its great, It saves money. If it keeps Hydro costs under control, go for it.
What does it mean, a hydro guy does not have to get out of his vehicle, he does a drive by, and its all being uploaded onto a laptop. Makes sense to me.
No need for a “drive by” the Smart Meter reports 24 Hours a Day the Usage or a Power Outage via a Cell Link
Why does it appear that everyone’s bills have been going up once the smart meters have been installed? Or, is there any truth to this?
Chester: “Why does it appear that everyone’s bills have been going up once the smart meters have been installed”
Winter …. shorter daylight hours.
Mine has been installed for two billing cycles. So far no increase.
BC Hydro will start charging higher rates for peak ussage periods once the meters are all installed. We will pay more in the end.
Good to hear they need cell service, maybe our cell service will get an upgrade now..until then we are smart meter free!!!!
Ontario spent one billion on smart meters but have no idea if they are having an affect. Not so smart after all.
http://dailybayonet.com/2011/12/not-so-smart-power/
Yes they will start charging for peak periods and yes you will pay more if you choose to use power during that time. No surprizes there.
Can’t wait to get mine so I can see where I can save even more on my power bill!
Right-on, can’t wait to save either!
Hey Mama where’s them candle’s hope we have fire insurance………
Set a letter to Rich Coleman asking for details about smart meters, would like to share some of the replies.
The benefits of BC Hydroâs smart meter program are expected to outweigh the costs by about $520 million over 20 years, helping keep rates lower for British Columbians.
The British Columbia government has directed BC Hydro not to introduce mandatory time of use rates. The smart meter program will pay for itself without the need for time of use rates.
Any thoughts ?
Comments for this article are closed.