Request accessible format of this publication.
Foundations first
Find out about the right policies, skills, and governance needed to create smart places.
Goals of this stage
Before you get started, it is important to make sure you:
- have the right policies in place
- equip people in your organisation with the right skills and capabilities.
This will help your organisation to deliver smart solutions safely and appropriately.
Creating an open and fair environment
Data can provide rich insights to support good decision making. This will help you deliver better outcomes for the community.
All smart technologies generate data. You will need to ensure you manage this data securely, responsibly and appropriately. This will help you maintain good governance, manage risks and build community trust.
All organisations delivering smart places have a responsibility to:
- develop and follow robust data governance policies and protocols
- identify any digital literacy or data management gaps
- support any capability requirements.
Data can be:
- closed – restricted only to its owner, custodian or holder
- discoverable – a description of the data is listed in search results, so people can seek access
- shared – arrangements and controls are put in place to share data between specific parties
- open – data is publicly available with no restriction on access or use. This excludes possible copyright or licensing requirements. The NSW Government Open Data Policy requires agencies to make data openly available by default.
Data sharing can:
- improve business competition
- drive efficiency
- support better decision making
- deliver greater improved services and outcomes for customers
- stimulate innovation.
Open data fosters innovation, collaboration and competition in businesses and for communities.
Using Standards
Standards support interoperability, providing a common approach for systems and data. This creates an open and fair environment.
They provide a framework to scale solutions more safely, securely and efficiently. They can help provide the 'how' of implementation. Standards can also help scale solutions when place owners might have already determined the 'why'.
If you apply Standards, you:
- will be better equipped to deliver pilots and staged rollouts of technology solutions. When you find a solution that works, you can scale quickly.
- won't be 'locked' into a single solution or provider. This means you will be able to keep pace as technology changes.
- you will be able to consolidate your data and share it with other platforms and organisations.
The family of ISO 37100 standards are the building blocks of creating sustainable or 'smart' cities and communities.
You can find out detailed information about standards and the role they play in supporting Smart Places by reading Smart Places Playbook Standards (PDF 600.18KB).
Data standard
A data standard is a set of guidelines, specifications or rules. For a specific domain or industry, they define how data should be:
- structured
- formatted
- represented
- exchanged.
Using data standards establishes a common language and structure. This in turn allows multiple datasets to be combined and compared.
By using common data standards, you can:
- improve data quality
- streamline data integration processes
- enhance the ability to share data
- enable efficient and accurate data analysis.
Governance standards
Governance standards help organisations meet their responsibilities and stated objectives. They provide:
- guiding principles
- frameworks
- indicators.
These are useful for helping organisations to evaluate, monitor and measure compliance.
For example, the ISO/IEC 27014:2020 Information security, cybersecurity and privacy protection provides guidance on how to evaluate and monitor information security-related processes.
Management system standards
Management standards provide guidance and recommendations on processes and procedures. They may be used within an area or across a range of disciplines. A popular management standard is the ISO 9000 – Quality management. This standard sets out processes and procedures to deliver consistent products and services.
Technical standards
Technical standards provide technical specifications related to a product or service. It may include specific measurements or performance requirements.
Visual standards
Digital Trust for Places and Routines (DTPR) is an open-source communication standard. It seeks to increase transparency and accountability for digital technology in public places.
The creators of DTPR Helpful Places have developed a unified taxonomy and visual language. It seeks to communicate:
- what tech is in a place
- how it is used
- what it will be used for.
It also provides opportunities for citizens to follow up and learn more or provide feedback.
Smart Places resource: Data for Places: A practitioner's guide
The Data for Places: A practitioner's guide to applying place-based data for effective place management (PDF 967.81KB) will help practitioners (or place owners) use data when managing places.
Smart Places Playbook – Standards
Access detailed information about the role of standards in smart places by reading the Smart Places Playbook Standards (PDF 600.18KB).
Relevant standards for smart places
Standards Australia publishes technical and strategic standards related to smart places online.
Some relevant International Organization for Standardization (ISO) standards are highlighted below:
- ISO 37100:2016 Sustainable cities and communities – Vocabulary
- This standard defines terms relating to sustainable development and smart community infrastructure.
- ISO 37101:2016 Sustainable development in communities – Management system for sustainable development
- This standard provides an overall framework for defining sustainable development.
- ISO 37106:2021 Sustainable cities and communities – Guidance on establishing smart city operating models for sustainable communities
- This standard provides guidance on establishing smart city operating models for sustainable communities.
- ISO 37122:2019 Sustainable cities and communities – Indicators for smart cities
- This standard establishes definitions and methodologies for a set of smart cities indicators.
- ISO/IEC 27014:2020 Information security, cybersecurity and privacy protection – Governance of information security
- This standard guides how to evaluate and monitor information security-related processes.
- ISO/IEC TS 27570:2021 Privacy protection – Privacy guidelines for smart cities
- This technical specification sets out guidance for smart places privacy protection.
- SA TS 5386:2024 Multi-function poles
- This standard provides requirements and guidance for the specification and procurement of multi-function poles.
NSW Government Data Strategy
The NSW Government Data Strategy guides the use and management of data across government.
NSW Data Governance Toolkit
The NSW Data Governance Toolkit helps realise the full potential of data opportunities. It guides a consistent approach to data governance, and builds a common understanding of best practice.
NSW Government Open Data Policy
The NSW Government Open Data Policy requires all state agencies to start from a position of data openness. It promotes the release of data unless there are security or privacy implications. This approach should be considered by all organisations.
Data legislation and policies
Data.NSW hosts an up-to-date list of relevant NSW data legislation and policies.
Keeping information safe
In smart places, you need to have policies and practices in place to maintain privacy and protect against malicious cyber attacks.
Smart places should always treat data safely, lawfully and securely. Avoid collecting, housing, sharing and using private and sensitive data whenever possible.
Close consultation with local communities about data and privacy will build trust for smart places.
You must be transparent about, and accountable for:
- the collection of data
- how it is managed, used, stored, and disposed of
- the benefits it can generate
- who has access
- how privacy is protected
- how data breaches are managed.
Information security and ethical considerations should be part of any third-party agreements.
There are a range of privacy considerations for smart places, including:
- governance
- data management
- risk management
- engineering
- citizen engagement.
Keep information safe in your smart place by following legislation, policies and global standards. It will also help grow community trust in smart places.
Take care to respect First Nations cultural practices and Indigenous Cultural and Intellectual Property, when setting up data governance.
First Nations peoples' rights to their heritage and culture is not always covered by copyright laws.
Related resources: Privacy
Smart Places Data Protection Policy
The Smart Places Data Protection Policy brings together legislation and policies relevant to the full lifecycle of smart places data. It will help you to uphold best practice and adhere to related policies and relevant laws, including the NSW Privacy and Personal Information Protection Act 1998.
Privacy protection
The technical specification ISO/IEC TS 27570 Privacy protection – Privacy guidelines for smart cities sets out guidance for:
- smart places ecosystem privacy protection
- how standards can be used for the benefit of citizens
- processes for smart places privacy protection.
NSW privacy laws
A range of laws and regulations help protect privacy in NSW. This includes the Privacy and Personal Information Protection Act 1998 and the Health Records and Information Privacy Act 2002.
Mandatory Notification of Data Breach Scheme
Under the Mandatory Notification of Data Breach Scheme, NSW public sector agencies and state-owned corporations must notify affected individuals if there has been an eligible data breach of their personal or health information.
Information and Privacy Commission NSW's digital projects factsheet
Th digital projects factsheet provides guidance on information access and privacy issues. These should be considered when designing and implementing smart place solutions.
Office of the Australian Information Commissioner's Privacy Impact Assessments
Use the guide to undertaking privacy impact assessments at the start of a project. It will help you understand the privacy impacts of your project, technology, service or policy.
Aboriginal Cultural and Intellectual Property (ACIP) Protocol
Indigenous Cultural and Intellectual Property (ICIP) rights are the rights that Aboriginal peoples have to their cultural heritage. This is also known as ICIP. Refer to guidance provided by Aboriginal Affairs NSW.
In smart places, you need to manage cyber risks to reduce the impact of any malicious cyber activity and data breaches. This could include:
- reducing vulnerabilities
- providing appropriate monitoring
- alerting and incident response procedures
- compliance with appropriate Australian or international standards
- considering risk controls with engaged suppliers.
Related resources: Cyber security
Australian Cyber Security Centre's Essential Eight
The Australian Cyber Security Centre recommends that all organisations implement 8 essential cyber risk mitigation strategies. These are known as the Essential Eight.
Implementing them can be more cost effective than having to respond to a large-scale cyber security incident.
It is important to note that the Essential Eight does not have a certification process. However, using the Essential Eight Maturity Model can help you understand supplier and partner performance.
Cyber security standards
Consider asking suppliers to verify their compliance with relevant standards.
The ISO/IEC 27001 Information security, cybersecurity and privacy protection provides a model for setting up and operating an information security management system. Compliance with this standard can support audit and certification processes.
If suppliers confirm compliance with this standard, you can have more confidence about the underlying security of their smart places-related technology. Companies might also be able to demonstrate additional cyber security capabilities.
NSW Cyber Security Policy
All NSW government agencies must follow the NSW Cyber Security Policy. We also encourage all organisations to adopt it. It will help your organisation manage cyber risks and make your smart place more resilient against attacks.
Image
SmartNSW Case Study: Digital Trust for Places and Routines
Engaging early with the community is essential to building community trust. See how Sydney Olympic Park is being transparent about their data value chain with their community.
Image
Applying the principle of the Smart Places Customer Charter
Smart places collect information with a clear purpose. Learn how to apply the principles of the Smart Places Customer Charter.
Artificial Intelligence and machine learning
In smart places, it is critical to generate insights by combining and analysing data. Artificial Intelligence (AI) and machine learning can assist this process.
They both use technology, programs and advanced computing algorithms to generate insights. They both also can aid decision making. They do this by identifying meaningful patterns in data.
Machine learning is a subset of AI. It can automate repetitive administrative tasks. In smart places, machine learning can also:
- evaluate the current condition of smart devices
- predict future behaviour
- optimise the operation of assets.
You will need to consider and manage potential discrimination and bias when using AI. This is because the needs of some minority groups may not be represented in trends or averages.
You also need to consider and manage:
- the quality and reliability of original data sources
- how AI is informing decisions
- any unintended consequences.
To be trusted, organisations must use AI responsibly. They must also keep a clear focus on outcomes for people.
The NSW Government has a suite of resources to encourage the responsible use of AI in government. This includes:
- Common understanding: simplified AI definitions from leading standards
- Artificial Intelligence Strategy
- Artificial Intelligence Ethics Policy
- Artificial Intelligence Assurance Framework
- Cyber Security NSW generative AI Guide.
These guides help the government balance innovation with safety, while keeping pace with a rapidly evolving technological landscape.
SmartNSW Case Study Library
Across NSW, technology and data solutions are helping make our cities and towns more liveable and resilient. Read about projects and pilots that use AI and machine learning to improve living in NSW.
Having a smart strategy and plans
To have the best chance of successfully implementing a smart place or smart solution, include a reference in the relevant strategy or plan.
This might mean including references to smart technologies, smart places or innovative solutions.
The relevant strategies or plans could include a:
- local council Community Strategic Plan
- local council Local Strategic Planning Statement
- standalone smart place strategy
- precinct plan, masterplan, strategy or blueprint.
Building capability and further learning
The SmartNSW Capability Uplift Program is building a confident and skilled public sector workforce, able to use technology and data as core business. Learning sessions are recorded and are available online.
You can gain microcredentials and microskills in Artificial Intelligence, Cyber Security, Data Analytics and more at the Institute of Applied Technology – Digital.