Module 319 min read · AI in Governance

Smart Cities and AI Infrastructure

The smart city promises a future in which urban infrastructure learns, adapts, and responds — where traffic flows without gridlock, energy is distributed without waste, and municipal services arrive before residents need to ask. Realising that promise requires AI at city scale: sensors embedded in streets, cameras tracking movement, data platforms stitching it all together. Understanding what this infrastructure is, what it enables, and what it risks is essential for anyone governing or advising the cities of the 21st century.

Defining Smart City AI

The term "smart city" has been applied to a remarkably wide range of initiatives, from modest sensor deployments in a single park to comprehensive city-wide data platforms integrating dozens of agencies. For the purposes of governance analysis, it is useful to distinguish between the components:

  • Sensing infrastructure — IoT sensors embedded in streets, buildings, vehicles, and utility networks; CCTV and video analytics systems; environmental monitoring equipment; GPS and mobility tracking
  • Connectivity networks — the 5G, LoRaWAN, and fibre networks that carry sensor data to processing systems
  • Data platforms — city operating systems that aggregate, store, and provide access to data from multiple sources, often operated by a central digital office or shared services function
  • AI and analytics layers — the machine learning systems, optimisation algorithms, and predictive models that draw insights and generate actions from the data platforms
  • Actuators and response systems — the automated systems that implement AI-driven decisions: traffic signals that change in response to congestion models, energy systems that load-shift based on demand forecasts, waste trucks routed by fill-level sensors

These components combine to create systems of enormous complexity and interdependence. Governance of smart city AI therefore requires not just oversight of individual applications but of the entire stack — from the sensors that generate data to the models that interpret it to the systems that act on it.

Operational Applications: Where Smart City AI Delivers

Traffic Management and Urban Mobility

Traffic management is one of the most mature and demonstrably effective applications of urban AI. Adaptive traffic signal control systems — which use real-time sensor data to adjust signal timing in response to actual traffic flows rather than fixed time tables — have been shown to reduce average journey times by 10–20% and emissions by similar margins in deployed cities. Pittsburgh's Surtrac system, developed by Carnegie Mellon University, reduced travel times by 25% and emissions by 21% in its initial deployment. The system uses distributed AI agents at each intersection to coordinate signal timing dynamically.

Beyond signal timing, AI platforms are increasingly used for integrated mobility management: optimising public transport scheduling in response to demand, routing buses and trams to minimise crowding, predicting parking availability, and identifying road network anomalies that require maintenance. Singapore's Land Transport Authority uses a comprehensive AI platform to model and manage city-wide mobility, integrating road, rail, bus, and active travel networks.

Energy Grid Optimisation

The electricity grid is perhaps the domain where AI delivers the most straightforward efficiency gains. AI-driven demand forecasting allows grid operators to anticipate load peaks and schedule generation and storage accordingly, reducing the need for expensive peaker plants. Machine learning models trained on weather, occupancy, and historical consumption data can predict building-level energy demand with sufficient accuracy to enable dynamic pricing and automated demand response. Google's DeepMind demonstrated a 40% reduction in data centre cooling energy through AI optimisation — an approach now being adapted for district heating and cooling networks in smart cities.

At the distribution level, AI-enabled smart meters and distribution management systems can detect faults, isolate outages, and reroute power automatically, reducing outage duration and improving resilience. This matters particularly as cities integrate high volumes of distributed renewable generation and electric vehicle charging, which create more complex and variable load patterns than traditional grids were designed to handle.

Waste Management and Predictive Maintenance

Sensor-equipped waste bins that signal fill levels allow dynamic routing of collection vehicles, reducing fuel consumption and collection costs by 20–40% in cities that have deployed them. Barcelona, Copenhagen, and Amsterdam have all implemented smart waste systems with measurable operational benefits. Predictive maintenance applications — using vibration sensors, thermal imaging, and historical failure data to predict when infrastructure will fail before it does — have reduced maintenance costs and service interruptions in water networks, road pavements, bridges, and public transport fleets across dozens of cities.

Public Safety Applications

This is the most contested domain of smart city AI. Video analytics tools that detect anomalies — abandoned objects, crowd density spikes, traffic incidents — can reduce emergency response times and improve public safety outcomes. Acoustic sensors that detect gunshots or breaking glass have been deployed in several US and European cities. Predictive policing tools that forecast crime hotspots have been used to allocate patrol resources.

The governance tensions in public safety applications are acute. The same infrastructure that enables anomaly detection enables continuous surveillance. The same video analytics that detect crowd crushes can track individuals' movements through a city. These dual-use characteristics mean that public safety justifications for surveillance infrastructure can quickly expand to encompass population monitoring far beyond the original mandate.

The Surveillance Expansion Risk

Scope creep is the primary risk in public safety AI. Infrastructure deployed for one purpose is routinely repurposed for others. CCTV systems installed for traffic management are used for criminal investigations. Mobility data collected for transport planning is requested by law enforcement. Smart city data platforms, once built, create permanent surveillance capabilities whose use is governed by policy rather than technology — and policy can change.

Facial recognition in public space represents the sharpest edge of this risk. It enables the identification and tracking of individuals who have no expectation of identification when walking a public street. The EU AI Act classifies real-time remote biometric identification in public spaces as a prohibited AI practice (with narrow law enforcement exceptions), recognising that the chilling effect on free movement and association is incompatible with democratic rights.

Data Sovereignty and the Question of Urban Data Ownership

Smart city infrastructure generates enormous quantities of data about urban life: who moves where, when, in what patterns; how energy is consumed; what environments people inhabit; how public space is used. Who owns this data, and who controls access to it, is a fundamentally political question that is often treated as a technical one.

In many early smart city deployments, city governments contracted with private technology companies to build and operate data infrastructure. The contracts often left data ownership ambiguous or vested it partly in the private operator. Cities found themselves locked into proprietary platforms, unable to switch providers without losing years of data or facing prohibitive exit costs. This is the vendor lock-in problem in its most consequential form: a city's operational intelligence — traffic patterns, energy consumption, mobility flows — becomes dependent on a private actor's continued goodwill and ongoing operation.

The Barcelona Model

Barcelona's approach to smart city data, articulated through its Data Sovereignty initiative and the Decidim participatory platform, represents a deliberate counter-model to vendor-dependent smart city development. The city has insisted that data generated from city infrastructure belongs to the city and its citizens, that citizens can access and control data about them, and that public interest applications of urban data should be developed on open standards accessible to multiple providers. The Barcelona Digital City plan explicitly rejects the model where city data becomes the raw material for private platform businesses.

Case Study: Sidewalk Toronto and Its Failure

The Sidewalk Toronto project — a collaboration between the City of Toronto and Sidewalk Labs, a subsidiary of Alphabet — proposed the development of a new neighbourhood on Toronto's eastern waterfront, incorporating comprehensive smart city technology including sensors, automated mobility, modular buildings, and a city-scale data layer. Announced with considerable fanfare in 2017, the project was cancelled in 2020.

The cancellation reflected multiple failures, but the most fundamental was a governance failure. The proposal for extensive data collection across a residential and commercial neighbourhood — who enters buildings, when, movement patterns, behaviour in public space — generated intense public concern about surveillance and data ownership. Questions about who would access the data, under what conditions, and with what oversight were never adequately resolved. The project's proponents struggled to articulate a credible answer to the question: "Who governs this data on behalf of residents?"

A parallel concern was the fundamental architecture of the arrangement: a private company building and potentially owning the data infrastructure for a public neighbourhood. Even with the best intentions, this creates a structural conflict of interest between public governance and private value extraction from urban data. The Sidewalk Toronto failure has become a reference point for what not to do in smart city development — and the lesson is primarily about governance, not technology.

Vendor Lock-In and Procurement Risks

Smart city procurement requires careful attention to interoperability, data portability, and exit rights — considerations that standard IT procurement frameworks often fail to address adequately at urban infrastructure scale.

Open Standards as Default
Procurement specifications should require open data standards and APIs that allow components from different vendors to interoperate and allow cities to switch providers without data loss. Proprietary data formats are a red flag in smart city procurement.
Data Ownership Clauses
Contracts must explicitly vest ownership of data generated from public infrastructure in the city or responsible public authority, with clear terms on what the vendor may do with data generated during service provision. Secondary uses of urban data for commercial purposes require express authorisation.
Exit Rights and Data Portability
Contracts should specify the format and conditions for data export at contract termination, and require migration assistance. Cities that cannot export their data are effectively locked into perpetual renewal regardless of performance or price.
Security Requirements
Smart city infrastructure represents critical infrastructure from a cybersecurity perspective. Contracts should specify security standards, incident notification requirements, penetration testing obligations, and liability for security failures. A compromised city data platform is a city-wide vulnerability.

Community Consent and Urban AI Governance

Perhaps the most underdeveloped dimension of smart city governance is the question of community consent. Residents of a neighbourhood equipped with comprehensive sensor infrastructure have not, in most current deployments, been asked whether they consent to that infrastructure or what limits they wish to place on its use. The decision to deploy smart city technology has typically been made by city governments and technology partners, sometimes with consultation, rarely with genuine consent mechanisms.

This is beginning to change. Several jurisdictions have introduced democratic requirements for surveillance technology deployment. San Francisco and Seattle have enacted laws requiring city council approval for acquisition of surveillance technologies, with public hearings and impact assessments. Portland, Oregon has enacted some of the most comprehensive facial recognition restrictions in the United States. The UK's Surveillance Camera Commissioner provides oversight of public space surveillance. These mechanisms represent early attempts to bring democratic accountability to decisions that were previously made administratively.

For practitioners working in urban contexts, the governance question to ask is not "what can this technology do?" but "what have we asked residents whether they want it to do?" Community engagement processes for smart city infrastructure should be genuinely participatory, technically informed — so residents understand what they are being asked to decide — and should result in documented consent and enforceable constraints, not merely awareness.

Emerging Best Practice in Urban AI Governance

Leading cities are developing specific governance frameworks for urban AI infrastructure: impact assessment requirements before deployment, sunset clauses requiring active reauthorisation, independent oversight bodies with audit access to city data platforms, public registers of deployed surveillance technology, and annual transparency reports on usage. Amsterdam and Helsinki have published algorithmic transparency registers. These are imperfect but represent genuine progress toward democratic governance of smart city AI.

Procurement Considerations for City-Scale AI

The scale and longevity of smart city infrastructure investments make procurement decisions consequential in ways that routine IT procurement is not. A city that builds its transport management system on a particular vendor's proprietary platform in 2025 may find itself dependent on that vendor's pricing and support decisions for the next 20 years. Procurement teams need specific expertise in AI systems evaluation, not just standard commercial and legal skills.

Key considerations include: performance standards that are measurable and contractually enforceable; fairness and bias testing requirements before deployment and on an ongoing basis; security certification standards; human oversight requirements for AI-assisted operational decisions; and staged deployment frameworks that allow evaluation before full rollout. Reference contracts developed by organisations like the Open & Agile Smart Cities initiative provide useful starting frameworks that incorporate these considerations.

For Practitioners

The smart city is not an end state but a continuous process of deploying, evaluating, and governing technology in urban environments. The governance frameworks needed — data sovereignty rules, community consent mechanisms, vendor lock-in protections, surveillance oversight bodies — require sustained political commitment and technical expertise. Cities that invest in the governance as seriously as the technology will realise the benefits. Cities that treat governance as an afterthought will eventually face the consequences, as Sidewalk Toronto illustrates.

Looking Ahead

Module 4 examines the deepest governance challenge posed by AI in public contexts: how do democratic accountability mechanisms — transparency, parliamentary oversight, freedom of information, public trust — apply to algorithmic government? The tools of democratic control were designed for human decision-makers. Adapting them for AI systems requires both conceptual clarity and institutional innovation.