The lack of an exit is what separates public monitoring from personal devices

What it is

However intrusive a personal device's sensing is, the user holds an exit lever: revoke the permission, uninstall the app, switch device, switch brand. Public-space sensing has no counterpart — one cannot join social life without entering the covered stations, hospitals and streets; there is no "unmonitored entrance" option. For the monitored public, the exposure is structurally non-optional.

This difference settles the two legitimacy logics. The legitimacy of public monitoring cannot be defended as "the user consented", because genuine consent is unobtainable — a sign provides knowledge, not choice. Its legitimacy can only come from substitute mechanisms: legal authorization, proportionality, independent oversight, and an accountable operator. Personal devices run on "consent plus market exit"; public monitoring runs on "authorization plus accountability" — two entirely different structures.

Why it happens

• The conditions for consent fail: consent requires the ability to refuse without losing significant interests. Entering public space is a precondition of social participation, so the price of refusal is exclusion — "entering and reading the sign means agreeing" is structurally non-voluntary however clearly the notice is written. This is not a defect fixable by better notice design; it is a constitutive property of the setting.
• The legitimacy source shifts: with consent unavailable, constraint must come from outside the collector — authorization (who approved it, on what basis), proportionality (intrusiveness commensurate with purpose: retention for theft prevention and city-wide real-time face matching are different orders of magnitude), oversight (independent third-party review), accountability (a findable, chargeable party). Together these substitute for the market discipline of "voting with one's feet".
• The burden of non-option is unevenly distributed: for most people it is a privacy-preference matter; for people at heightened tracking risk (domestic-abuse survivors, activists, profiled groups) it is a safety matter — "participating in society equals being located and recorded" means an abuser can find them through public systems. Evaluating public monitoring through the "average user's" privacy outlook systematically underestimates the exposure of the most vulnerable.

Studying it

• Surveillance studies and privacy theory: qualitative analyses of public monitoring, and Nissenbaum's contextual integrity framework — assessing collection by whether information norms are changed relative to the context — supply the tools for evaluating "beyond consent".
• Acceptance comparisons: surveys of personal-device versus public-sensing acceptance; the acceptance gap for the same technology (face recognition) between phone unlock and public-space deployment is direct evidence that structure drives assessment.
• Perceived-choice measurement: subjective measurement of "did I have a choice" after notice — consistently finding perceived choice near zero in public settings even with complete notice.

Methodological caution: acceptance surveys often read "people say they accept it" as legitimacy evidence — in high-no-exit settings, acceptance reflects learned resignation rather than endorsement. Interpret acceptance data together with perceived-choice measures.

Where it stops holding

• "No choice" is a degree, not an absolute: design can change how much exit exists — a staffed lane beside face-recognition gates, short retention for event footage, a match-exemption application process, low-sensing zones within a space. The point is to treat exit neither as zero (design is pointless) nor as total (nothing needs doing): the alternative levers are design variables.
• Quasi-public premises sit in between: malls and stadiums set rules by property right, yet the public holds reasonable expectations of access — their standard falls between personal devices and pure public space, varying by jurisdiction. This entry does structural analysis, not jurisdictional detail.
• This is not an anti-monitoring argument: security cameras within proportionality are legitimate — both sides of the debate should argue from proportionality and accountability, not from consent (which does not travel there). Dragging the debate to "was there a sign" asks the wrong question.

Applying it

• Do not use "entry implies consent" as the legal basis for processing personal data — fulfil transparency duties with notice, ground legitimacy in authorization and balancing, and keep the two apart.
• Preserve choice for high-risk scenarios: manual verification lanes, an exemption process survivors can apply for, short retention with automatic expiry, and hard no-sensing boundaries in sensitive areas (washrooms, changing rooms).
• Run deployment decisions through a proportionality flow: purpose → least-intrusive alternative → coverage → retention, argued and documented item by item; "technically installable" is not a deployment reason.
• How to check: audit whether coverage and means are proportionate to the declared purpose (entrance cameras for theft prevention vs city-wide deployment); verify that a sensing-free path through core services and the exemption process actually exist and can be completed.

Related

• Same group: Z8.03.1 Sensing in public places requires noticeable and persistent notice · Z8.03.2 Notice must state the purpose of collection, not merely the fact · Z8.03.4 The duty to inform lies with the venue operator, not the individual
• Nearby: Z6.04 Presence of non-users (home-visitor side) · the privacy domain for general consent and threat-model mechanisms
• Search terms: public surveillance · contextual integrity · mandatory exposure · proportionality