Redesigning Information, Communications, Technology + Cyber Security

Digital Systems Should Serve People — Not Watch Them

The question:
How can we redesign ICT systems that serve people everywhere without surveillance — while protecting cybersecurity?

The answer:
By treating digital infrastructure as a public trust, not a private extraction machine.

The solution is not anti-technology.

The solution is to move beyond systems designed to capture attention, harvest data, manipulate behavior, and centralize control — and toward digital systems designed for human dignity, privacy, security, transparency, access, and public benefit.


The big picture

ICT — information and communications technology — now shapes almost every part of modern life.

It connects schools, hospitals, governments, banks, businesses, transportation, media, emergency response, energy grids, food systems, and families.

But the same digital systems that connect us can also expose us.

They can track behavior.
Harvest personal data.
Manipulate attention.
Spread misinformation.
Enable cyberattacks.
Concentrate power.
Exclude people without access.
Turn public life into a marketplace for surveillance.

The challenge is clear:
We need digital systems strong enough to protect society — but ethical enough not to control it.


What is broken?

1. The internet became an extraction economy

Much of the digital world was built around a simple business model:

Collect data.
Predict behavior.
Sell attention.
Influence choices.
Maximize engagement.
Repeat.

This model rewards addiction, outrage, profiling, manipulation, and surveillance.

People are told they are “users.”

But too often, they are the product.

A people-serving ICT system would treat individuals not as data sources, but as human beings with rights, dignity, agency, and consent.


2. Cybersecurity is treated as a technical issue only

Cybersecurity is not just about passwords, firewalls, and software patches.

It is about trust.

When hospitals are attacked, patients suffer.
When schools are breached, children are exposed.
When cities are hacked, public services fail.
When small businesses are hit, livelihoods are threatened.
When elections are targeted, democracy is weakened.
When utilities are compromised, communities are at risk.

Cybersecurity is public safety.

It must be treated as civic infrastructure.


3. Surveillance is being normalized

Cameras, apps, platforms, sensors, location tools, biometric systems, smart devices, workplace monitoring, predictive algorithms, and data brokers now shape daily life.

Some technologies can improve safety and service delivery.

But without strong rules, surveillance expands quietly.

It becomes normal to be watched, scored, tracked, ranked, targeted, and profiled.

A society cannot be free if participation requires constant monitoring.


4. Digital access is still unequal

Millions of people lack reliable broadband, affordable devices, digital skills, language access, accessible design, or safe online support.

This creates a new form of exclusion.

People without digital access struggle to apply for jobs, benefits, health care, education, housing, banking, emergency information, and public participation.

Digital exclusion is civic exclusion.

A people-serving ICT system must make access universal, affordable, secure, and understandable.


5. Too much power is centralized

A small number of corporations, platforms, cloud providers, telecom companies, data brokers, and AI systems now control large parts of digital life.

This creates risk.

When power is centralized, failure spreads faster.
When data is centralized, breaches become more dangerous.
When platforms control attention, public discourse can be distorted.
When algorithms are hidden, accountability disappears.

Resilient systems distribute power.

Fragile systems concentrate it.


What would better design look like?

1. Privacy by design

Privacy should not be an afterthought, buried in unreadable terms of service.

It should be built into the system from the beginning.

A privacy-first system collects only what is necessary, stores only what is needed, protects what is kept, and gives people control over their information.

Design principle:
Do not collect data simply because you can.

Mobilized standard:
No public-service digital system should require unnecessary surveillance to function.


2. Security by design

Cybersecurity cannot be bolted on after systems are already built.

Every public-serving digital platform should be designed with security at the foundation.

That includes:

Strong authentication.
Encryption.
Regular updates.
Secure backups.
Incident response plans.
Vendor accountability.
Human training.
Independent audits.
Clear recovery procedures.

Design principle:
A system is not complete until it can be defended, repaired, and restored.


3. Public-interest digital infrastructure

Communities need digital tools that serve public life.

That includes platforms for civic participation, local news, emergency alerts, public health, education, community services, benefit access, local business, and mutual aid.

These systems should be transparent, accessible, multilingual, secure, and accountable.

Design principle:
Digital infrastructure should help people participate in society, not extract value from them.


4. Data dignity

People should have rights over their data.

They should know what is collected, why it is collected, who uses it, how long it is stored, and how it can be deleted or corrected.

Data dignity means people are not reduced to profiles, scores, risk categories, or advertising targets.

Design principle:
No person should lose opportunity because of hidden systems they cannot see, challenge, or understand.


5. Decentralized resilience

A healthy ICT system should not depend on a few giant points of failure.

Communities need local capacity, backup systems, open standards, interoperable tools, and emergency communication plans.

Digital resilience means:

Local networks can operate during crises.
Critical services have backups.
Public data is protected.
Small organizations are supported.
Systems can recover quickly.
No single failure takes everything down.

Design principle:
Build for disruption before disruption arrives.


How do we protect cybersecurity without building a surveillance state?

The answer: protect systems, not control people

Good cybersecurity does not require mass surveillance.

It requires smart design, strong safeguards, and clear limits.

Cybersecurity should focus on:

Protecting critical infrastructure.
Reducing attack surfaces.
Securing devices and networks.
Training users.
Detecting threats without violating rights.
Minimizing data collection.
Responding quickly to incidents.
Holding vendors accountable.
Building public trust.

The goal is not to watch everyone.

The goal is to make systems harder to attack, easier to restore, and safer to use.


What can communities do?

1. Create local digital trust standards

Cities, schools, libraries, hospitals, nonprofits, and agencies should adopt clear rules for any technology used with the public.

Ask:

What data is collected?
Is it necessary?
Who owns it?
Who can access it?
How is it protected?
Can people opt out?
Is the algorithm explainable?
What happens after a breach?
Who is accountable?

Mobilized Action:
Create a local “Digital Bill of Rights” for public technology.


2. Build community cybersecurity capacity

Small organizations are often the weakest links because they lack money, staff, and technical support.

Local governments, universities, libraries, chambers of commerce, and community colleges can help train and protect them.

Mobilized Action:
Launch a community cybersecurity clinic for nonprofits, small businesses, schools, houses of worship, and local service providers.


3. Make libraries digital resilience hubs

Libraries are trusted public spaces.

They can provide secure internet access, digital literacy training, privacy education, device support, benefits navigation, media literacy, and emergency communication resources.

Mobilized Action:
Equip libraries to teach privacy, cybersecurity, AI literacy, misinformation defense, and secure communication.


4. Require public transparency for public technology

When governments use digital systems, the public deserves to know how those systems work.

That includes surveillance tools, AI systems, automated decision-making, data platforms, cameras, sensors, and vendor contracts.

Mobilized Action:
Require public technology impact assessments before new systems are deployed.


5. Support open, interoperable tools

Communities should avoid being locked into closed systems they cannot inspect, repair, migrate from, or govern.

Open standards and interoperable tools give communities more control.

Mobilized Action:
Prioritize technology that allows public ownership of data, portability, transparency, and long-term accountability.


6. Protect critical infrastructure

Energy grids, water systems, hospitals, transportation networks, emergency services, schools, and local government systems need strong cybersecurity planning.

Mobilized Action:
Create a local critical-infrastructure cyber resilience plan with backups, drills, recovery protocols, and clear roles.


7. Teach digital self-defense

People need practical skills, not fear.

Digital literacy should include:

Password managers.
Multi-factor authentication.
Phishing awareness.
Device updates.
Privacy settings.
Secure messaging.
Data minimization.
Misinformation recognition.
AI awareness.
Safe online behavior.

Mobilized Action:
Offer free community workshops through schools, libraries, senior centers, workforce programs, and community groups.


Action Guide

For residents

Protect yourself and your community.

Use strong passwords.
Turn on multi-factor authentication.
Update devices.
Limit app permissions.
Think before clicking.
Use secure networks.
Check privacy settings.
Ask what data is being collected.
Support public-interest technology.

First step:
Set up a password manager and multi-factor authentication on your most important accounts.


For local governments

Treat digital systems as public infrastructure.

Adopt privacy-first technology policies.
Audit vendor contracts.
Protect public data.
Create incident response plans.
Train staff.
Require transparency.
Limit surveillance.
Invest in secure public platforms.
Support community broadband and digital access.

First step:
Conduct a public technology audit: what systems are used, what data is collected, and what risks exist?


For schools

Teach digital citizenship as life literacy.

Students need to understand cybersecurity, privacy, misinformation, AI, data rights, online safety, and ethical technology.

First step:
Create a student digital safety curriculum that includes privacy, cyber hygiene, media literacy, and responsible AI use.


For businesses

Security is responsibility.

Protect customer data.
Train employees.
Back up systems.
Use secure software.
Limit unnecessary data collection.
Prepare for cyber incidents.
Respect privacy as a competitive advantage.

First step:
Run a basic cybersecurity and data-minimization audit.


For health systems

Protect patients, not just records.

Health data is among the most sensitive information people have.

Hospitals, clinics, and public health agencies must prioritize cybersecurity, privacy, resilience, and ethical data use.

First step:
Create clear patient-facing explanations of what data is collected, why, and how it is protected.


For media

Cover technology as power.

Do not cover ICT only as gadgets, apps, hacks, or innovation hype.

Cover:

Who owns the system?
Who benefits?
Who is watched?
Who is excluded?
Who is protected?
Who is accountable?
What happens when it fails?
How can people participate safely?

First step:
Create a “Digital Public Interest” beat that tracks surveillance, cybersecurity, access, AI, data rights, and community technology.


The redesign

The old digital system asks:
How much data can we collect, control, monetize, and analyze?

A people-serving ICT system asks:
How do we connect people safely, protect rights, strengthen communities, and build trust?

That is the shift.

From surveillance to dignity.
From extraction to consent.
From manipulation to clarity.
From centralization to resilience.
From hidden algorithms to accountability.
From digital exclusion to universal access.
From cyber fear to cyber readiness.
From users to citizens.


The Mobilized View

Technology is not neutral.

It reflects the values of the people and institutions that design it.

If digital systems are designed for extraction, they will extract.
If they are designed for control, they will control.
If they are designed for addiction, they will addict.
If they are designed for public service, they can empower.

The future of ICT must be built around a simple principle:

Digital systems must serve life.

They must help people communicate, learn, organize, heal, participate, create, and protect one another — without turning every human action into data for sale or surveillance.


Bottom line

Cybersecurity and privacy are not opposites.

A healthy digital society needs both.

We can protect systems without watching everyone.
We can use data without exploiting people.
We can deploy technology without surrendering dignity.
We can build digital infrastructure that is secure, democratic, accessible, and humane.

The goal is not less technology.
The goal is better technology — designed for trust, protected by security, governed by the public, and built to serve people everywhere.