Asia-Pacific data governance audit finds the information asymmetry between state surveillance capacity and public transparency about its application has reached a scale that researchers describe as structurally stable
Surveillance Study: Governments Know More About Citizens’ Movements Than Citizens Know About the Data
TAIPEI — The Asia-Pacific Data Governance Research Centre released a study Wednesday comparing, across eleven markets, the volume and granularity of citizen movement and behaviour data held by government agencies against the volume and specificity of information available to citizens about how that data is collected, stored, used, and shared. The study found that in all eleven markets, the information asymmetry favoured government knowledge by a margin the study describes as “substantial and structurally maintained,” meaning the asymmetry was not a temporary gap in disclosure but a persistent design feature of how data governance frameworks were built. The study’s lead researcher, Dr. Lin Mei-chen, described the finding as “the expected outcome of surveillance architecture that was designed with collection efficiency as the primary objective and transparency as a secondary consideration whose placement in the design hierarchy is visible in the resulting systems.”
“We are not arguing that surveillance is inherently wrong,” Dr. Lin said at a Taipei briefing attended by civil society representatives, privacy researchers, and two government representatives who confirmed they were present “to listen.” “We are documenting what is known and by whom. The government of any given city knows, through various technical means, where a significant portion of its population was at any given time on any given day. A citizen in the same city who asks what the government knows about their movements, how that information is used, who it is shared with, and when it is deleted will receive, in most of our surveyed markets, an answer that is either ‘we cannot share that information’ or a document of sufficient length and technical density that the practical effect is similar.”
What Is Collected and What Is Disclosed
The study’s collection inventory, assembled from public tenders, privacy impact assessments where available, legislative records, and investigative reporting across eleven markets, identified consistent data collection mechanisms: closed-circuit television networks in public spaces, whose coverage density in the four most surveyed cities exceeded one camera per 14 residents; transit card data recording journeys at entry and exit points; mobile network data held by telecommunications operators under data retention regulations; payment transaction data held under financial monitoring frameworks; and, in seven of the eleven markets, dedicated smart city sensor networks collecting pedestrian density, vehicle movement, and in some cases facial recognition data in designated zones. The collection inventory is necessarily incomplete because, in eight of the eleven markets, the full scope of government data collection is not disclosed in any public document the study’s researchers could locate.
The disclosure inventory — what citizens can learn about data collection and use — was assembled from privacy notices, freedom of information responses, parliamentary records, and independent legal analysis. In nine of the eleven markets, citizens can request information about data held about them through formal data subject access request processes. The study tested these processes in all nine markets, submitting requests through standard channels and documenting the responses. Average response time: 34 days. Average specificity of response: what the study’s qualitative coding classifies as “general category confirmation without individual record access.” In four markets, the response confirmed the type of data held without specifying the data itself. In three markets, the response confirmed that no data of the requested type was held, a response that the study’s analysis team classified as “either accurate or a category of response that the access request process cannot distinguish from accurate.”
The Markets and Their Frameworks
The study rates each of the eleven markets on a transparency index that measures the degree to which public disclosure about data collection matches the collection scope identified through the inventory process. The highest-transparency markets showed indices between 0.6 and 0.7 on a 0-to-1 scale, meaning the public knows approximately 60 to 70 percent of what the study’s researchers could identify about collection practices. The lowest-transparency markets showed indices between 0.1 and 0.2. The study confirmed that transparency index scores did not correlate with political system type in a simple way: some markets with competitive democratic systems showed lower transparency than markets with more concentrated political structures, attributed to the presence or absence of specific privacy legislation rather than to general openness norms. Dr. Lin said this finding was “important context for the assumption that surveillance transparency is primarily a function of political system,” which she said “is partly true and partly not, and the partly-not is worth understanding.”
Freedom House’s Freedom on the Net index, which the study cross-references, finds consistent patterns of surveillance expansion across the region’s internet infrastructure that align with the study’s finding that collection outpaces disclosure. The most significant common pattern across both datasets is what the study terms “the legislative lag” — data collection practices enabled by technology outpace the legislative frameworks designed to govern them, producing a period in which collection occurs in a regulatory space that transparency obligations have not yet reached. In all eleven markets, the legislative lag is acknowledged by government data protection agencies. In seven markets, legislation addressing it is described as “under development.” In three markets, legislation addressing it has been passed but implementation is “ongoing.” In one market, no legislation is under development and the data protection agency did not respond to the study’s request for comment.
What Citizens Think About This
The study’s citizen survey asked 6,200 respondents across eight markets whether they were comfortable with the level of government surveillance in their city, whether they were aware of the specific data collected about them, and whether they would change their behaviour if they knew the full scope of collection. On comfort: 47 percent said comfortable, 31 percent said uncomfortable, 22 percent said they had not previously considered the question, a response the study classifies as “the most informative in the dataset, since the question requires awareness of a situation to have an opinion about it.” On awareness: 23 percent said they were aware of specific data collection practices affecting them; 54 percent said they were aware surveillance existed but not its specific scope; and 23 percent said they were not aware that location or movement data was collected about them through infrastructure they used, a finding that Dr. Lin described as “the clearest indication of the asymmetry the study documents.” On behaviour change: 41 percent said they would change their behaviour if they knew more; 37 percent said they would not; and 22 percent said they did not know, a distribution Dr. Lin described as “the finding that makes the transparency question most consequential.”
