LuminousVoid

I have previously blogged about the WMATA Smartrip cards. These are RFID enabled platstic cards that are used in the DC metro system. These are different than the paper farecards which are normally discarded after several uses.

EPIC submitted a FOIA request for what sorts of data are kept, and confirmed that data is maintained is associated with the individual data, and is maintained for up to a year detailing entry and exit points and times.

They also got some information on what is done with the data. Included in the FOIA is some subpoenas for SmarTrip data. This ties in to EPIC’s comments on WMATA’s policy of disclosing this data. WMATA is working on their policy and has recently published a revised draft of their policy.

WMATA is proposing to allow law enforcement access to personally identifiable data without requiring a court order. Other than that, access to personally identifiable data is available via a court order or to the subject of the data. Notably, third parties cannot get the data even if they have permission of the subject to do so.