zlacker

[parent] [thread] 16 comments
1. primit+(OP)[view] [source] 2020-06-02 00:03:40
I submitted a FOIA request last year for all parking citations issued in San Francisco. The data was truly extraordinary and showed clearly how simple street sweeping citations could lead to a car being towed, auctioned, and the owner (whose name/license plate is publicly listed if they overpaid or paid a citation twice [1]) losing their business and eventually moving elsewhere. I decided against publishing my research out of fear of encroaching on the privacy of those involved.

One story that comes to mind is the license plate HPPYPPS, a plumber whose company Happy Pipes provided service around SF. He was subject to numerous citations on the order of $1k a month. When his van was towed, he likely did not have the funds to retrieve it, and it was subsequently auctioned. He now does business under the same name, but in Utah. It is interesting to think of how much tax revenue the city actually lost by fining a small business out of existence, which was likely much greater than the total punitive fines levied against him.

In the process of looking up companies that owned vehicles, S1 filings, and high-end cars that seem to accrue tens of thousands of dollars of fines every year, I grew exhausted and demoralized by the project and it has sat on my back burner for a year now. If anyone is interested in taking this up while respecting the privacy of those involved, let me know how to contact you and I'll share my data.

1. https://www.sfmta.com/sites/default/files/reports-and-docume...

replies(5): >>swrj+B >>nradov+52 >>runawa+k3 >>philmc+P5 >>tzs+aw
2. swrj+B[view] [source] 2020-06-02 00:08:56
>>primit+(OP)
That sounds very interesting and is not something I had ever considered. Is there a reason you did not publish your findings anonymously?
replies(2): >>_1100+T >>primit+W3
◧◩
3. _1100+T[view] [source] [discussion] 2020-06-02 00:12:38
>>swrj+B
His concern was encroaching on individuals’ privacy. The author of such encroachment wasn’t their concern.
replies(1): >>IAmGra+e1
◧◩◪
4. IAmGra+e1[view] [source] [discussion] 2020-06-02 00:17:28
>>_1100+T
I’m pretty sure he’s talking about anonymizing the data.
replies(1): >>Reacti+M2
5. nradov+52[view] [source] 2020-06-02 00:23:34
>>primit+(OP)
The unfortunate reality is that parking tickets are just a cost of doing business in any dense city. When you have appointments to keep you simply can't circle the block until a parking space opens up. But that means businesses have to charge customers enough to cover the ticket cost, and then actually pay the tickets rather than letting them accumulate.
replies(2): >>dvtrn+j4 >>primit+m5
◧◩◪◨
6. Reacti+M2[view] [source] [discussion] 2020-06-02 00:29:00
>>IAmGra+e1
It's difficult to anonymize anything involving locations and times
replies(1): >>primit+B3
7. runawa+k3[view] [source] 2020-06-02 00:33:25
>>primit+(OP)
Is there any protocol to have masked data similar to healthcare data?
replies(1): >>primit+Q4
◧◩◪◨⬒
8. primit+B3[view] [source] [discussion] 2020-06-02 00:36:01
>>Reacti+M2
My concern was primarily that license plate numbers are included in the data, which I used to track vehicles across multiple citations. The license plate is also included in the towing dataset as well as the escheatment data published by SFMTA which links license plates to the name of the owner.
replies(1): >>jacobu+re1
◧◩
9. primit+W3[view] [source] [discussion] 2020-06-02 00:38:59
>>swrj+B
I have been in contact with a journalist who offered to publish the findings in an appropriate manner, however the more I started digging the more I grew concerned over the ramifications of publishing the data. This thread, as well as recent events, motivated me to send a follow up email. My area of expertise is data science and I am looking for advice/mentorship from people experienced in responsible disclosure.
◧◩
10. dvtrn+j4[view] [source] [discussion] 2020-06-02 00:41:46
>>nradov+52
The unfortunate reality is that parking tickets are just a cost of doing business in any dense city.

Cost of doing business yes, but things tend to get a bit tricky when cities wholesale outsource their parking systems to private agencies that are harder to keep accountable than city departments[0]

[0] https://www.governing.com/columns/mgmt-insights/Chicago-Park...

◧◩
11. primit+Q4[view] [source] [discussion] 2020-06-02 00:45:08
>>runawa+k3
I am actually the cofounder of a healthcare company that works with sensitive patient data (vitals, symptom reports, messaging between patients and doctors, lab results, etc). In the process I have found that even HIPAA is not a protocol, it is a largely unspecific set of guidelines for how patient data should be stored and transmitted. If we were to publish a dataset with anonymized patient information (e.g. the Framingham Heart Study) we could probably do so without any legal ramifications - there isn't much in HIPAA that explicitly prohibits or denies using data that has been stripped of PII. However we would never do such a thing since pretty much everyone in our industry is extremely risk-averse.

The only relevant guideline I found on parking citation data was that it is unlawful to look someone else up by their license plate. However, it is entirely possible for someone to do so without detection. My primary concerns, however, were ethical concerns - there were many people for whom you could determine their place of residence, place of work, and financial situation by their license plate's inclusion in these data sets.

replies(1): >>junon+zi1
◧◩
12. primit+m5[view] [source] [discussion] 2020-06-02 00:49:37
>>nradov+52
As someone who has probably lost a day of each year roaming San Francisco looking for parking, I wholeheartedly agree with you that punitive measures are the only way to keep people from occupying limited parking spaces beyond certain limits. However, my qualm is with arbitrary citations like street sweeping, missing front license plates (some cars only have one on the back), and numerous other petty citations that the average tech worker has no problem paying off, while leaving the hospitality worker or small business owner in a state of bankruptcy after a single unlucky sequence of events.
replies(1): >>jacobu+UO
13. philmc+P5[view] [source] 2020-06-02 00:53:57
>>primit+(OP)
Lately I've been looking for data sets like this. I was hoping to do an analysis of citations, related to race, related to race of arresting officer, all against the backdrop of the racial profile of the county/city.

I have my preconceived notions of what I'd find, but I think it'd be better to let the data speak for itself.

My email address is just philip at mccarty at gmail, and I would be happy to talk to you on phone/skype/zoom so you can see if you feel comfortable with me using the data for that purpose.

Or we could find a way to anonymize the data, as the personally identifying information isn't necessary for my analysis at all.

14. tzs+aw[view] [source] 2020-06-02 04:54:38
>>primit+(OP)
> He now does business under the same name, but in Utah. It is interesting to think of how much tax revenue the city actually lost by fining a small business out of existence, which was likely much greater than the total punitive fines levied against him.

I'm not so sure about that, due to the nature of his business (plumbing).

There will be two broad categories of taxes that will be lost when a business moves away from San Francisco.

1. Taxes that are paid by the business itself, and

2. Taxes paid by individual employees of that business, such as income taxes and sales taxes, if those employees move with the business.

I'm not too familiar with San Francisco business taxes, but a brief bit of searching suggests that the bulk of it is a gross receipts tax and business personal property tax.

A plumbing business leaving San Francisco doesn't change the amount of plumbing that needs to be done in San Francisco, so presumably money that would have went to his gross receipts had he stayed just ends up in the gross receipts of some other plumber. I don't know if the gross receipts tax is flat or progressive, but if it is then the city might actually collect more on gross receipts with him gone.

The city will lose out on business personal property tax because presumably much of that goes with the business when it moves to Utah. Whatever plumbers in San Francisco get the work that would have went to him might need to increase their business personal property some, but it probably won't be enough to offset what is lost. A smaller number of bigger plumbers are going to be more efficient in this regards than a larger number of smaller plumbers, so any consolidation should lower the total amount of business personal property.

For the individual taxes, there are two groups to consider. First, employees who leave rather than move with the business. These probably have little impact. They still pay sales and income taxes--they just get the money for that from their new employers.

Second, there are the employees who move with the business. Their income tax and sale tax is lost.

If the city was hitting them with $1k/month in fines, that's $12k/year. Googling tells me the city income tax is a flat 1.5%, and the sales tax is 0.25%.

Let's assume that these employees spend half their taxable income on things subject to sales tax. Then they need to be making about $740k aggregate taxable income for their income plus sale taxes to be more than the parking fines. By "taxable income" I mean whatever it is that San Francisco charges 1.5% on.

◧◩◪
15. jacobu+UO[view] [source] [discussion] 2020-06-02 07:59:40
>>primit+m5
Just another way the poor pay a higher "tax" percentage wise compared to more affluent.
◧◩◪◨⬒⬓
16. jacobu+re1[view] [source] [discussion] 2020-06-02 12:40:54
>>primit+B3
Can you bucket the data? Anyway, someone knowledgeable should contact you
◧◩◪
17. junon+zi1[view] [source] [discussion] 2020-06-02 13:12:12
>>primit+Q4
> In the process I have found that even HIPAA is not a protocol, it is a largely unspecific set of guidelines for how patient data should be stored and transmitted.

Former HIPAA security officer here; to be abundandly clear, there _are_ very specific guidelines for which information must be anonymized.

I don't think you were saying the alternative, just sounded a little like "anything goes" which is definitely not the case.

As for your point about guidelines, that's entirely true - last time I read the section about encryption, it just specified "state of the art encryption" which is... a poor way to specify that.

[go to top]