As municipal technology rapidly advances, balancing public safety with the fundamental right to privacy has become one of the most critical responsibilities of City Hall. Recently, I have heard from several concerned residents regarding the Guelph Police Service’s use of Automated Licence Plate Recognition (ALPR) cameras.
In the summer of 2023, utilizing provincial funding, ALPR cameras were expanded to all Guelph Police patrol vehicles. These systems scan thousands of license plates per hour. Naturally, voters want to know: Who is watching the watchers, and what is happening to our data?
Before running for Mayor, I built a career rooted in network systems, computerized controls, and IT security including roles as a Controls System Technician at GE Oil & Gas and an Inspector at Lloyd’s Register. I hold an advanced diploma in Network Systems and hold certifications in Microsoft Security, Compliance, and Identity Fundamentals.
Because of this background, I look at municipal technology through a highly technical lens. I know firsthand how automated telemetry systems and large databases operate on the backend and exactly how vulnerable they are to scope creep, misuse, and data breaches if they are not fiercely governed.
Here is my stance on the use of ALPR in Guelph and how I will protect taxpayer privacy as your Mayor.
1. Targeted Law Enforcement, Not Mass Surveillance
Under the strict guidelines set by the Information and Privacy Commissioner of Ontario (IPC) and the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA), an ALPR system is legally only allowed to identify plates on a specific “hotlist” (such as stolen vehicles, suspended drivers, and active warrants).
I strongly support the use of ALPR exclusively as a targeted law enforcement tool for these specific scenarios. However, I am firmly opposed to it being used for mass surveillance, tracking the general public, or creating unwarranted databases of citizen movement.
2. Rigorous Scrutiny for Tech Contracts
I will not vote to fund any expansion or new ALPR contract unless it undergoes rigorous technical scrutiny. Any vendor we contract with must guarantee complete data sovereignty. I will oppose any contract that attempts to introduce “scope creep,” such as secondary data-sharing agreements where municipal data is sold or shared with private, third-party data brokers.
3. Strict Data Retention and Independent Oversight
Policies on paper are not enough we need technical enforcement. By law, all ALPR “non-hits” the scans of everyday citizens going about their lives must be immediately deleted.
- Zero Retention: I will mandate an automated, immediate digital purging process for all non-hit data.
- Strict Access Controls: I will require strict access controls ensuring that ALPR data is shielded from internal misuse.
- Independent Audits: I will champion regular, independent cybersecurity and data-compliance audits reported publicly through the Police Services Board. We must guarantee that retention schedules are being strictly followed at the server level.
Guelph needs leadership that actually understands the technology we are deploying on our streets. We can equip our first responders with the tools they need to keep us safe without sacrificing the privacy rights of our citizens.