Ten challenges for the internet
Repost 2018: In this blog, I introduce the ten key topics that form the basis for my vision for a more inclusive, democratic and resilient internet. [I am archiving some of my writing in the spirit of digital preservation - this is a repost of a blog that originally appeared on the Nesta website on October 22 2018]
Over the past couple of months, we’ve been laying the groundwork for building the research and funding agenda of the Next Generation Internet (NGI) initiative, the European Commission’s new flagship programme which seeks to build a more inclusive, resilient and democratic future internet by the end of the next decade.
Setting out a vision for a better, more human-centric future internet is no lofty task. The challenges the internet faces today are myriad and complex, increasingly impacting the very fabrics of our societies, economies and selves: from the rising threat of cyberwar to the monopolisation of the digital economy; from online harassment and hacked democracies to the Airbnbification of city centres, and so forth. Making sense of a space so rapidly evolving, involving so many different actors and moving parts and pieces, is becoming incredibly difficult to do, let alone designing the right kind of solutions that might address all of these challenges effectively.
Future visions will by their very nature always be limited: we are not in the business of crystal ball gazing, it’s impossible to predict the future or the exact impact (and unintended consequences!) of the interventions we propose. Building a comprehensive vision and accompanying action plan for the future internet is further complicated by dynamics intrinsic to the internet community that make sustained and well-targeted action difficult. As part of the NGI project, we'll soon be launching a collection of radical new visions for a future internet by leading voices and emerging thinkers from Europe and beyond.
Searching for a panacea: If we were too believe a lot of tech media coverage and Twitter evangelists, the single solution that will solve all the internet’s problems is upon us. Blockchain, breaking up Big Tech, (re)decentralisation, going back to the vision of the original internet pioneers: many of these prescriptions are regularly heralded as the single intervention that will solve all our woes. But it’s unfortunately not that simple. Most of the aforementioned indubitably have an important role to play in building a more human-centric internet, but no single solution is a panacea. This focus on funding the one “magic” -often technological, fix, is something we also see in the climate change debate, and distracts us from the real issues at hand, and the political and economic dynamics underpinning them. We instead believe that “repairing” the internet requires a far more comprehensive approach, addressing problems across the stack, starting at the core physical infrastructures up to the social interactions the internet facilitates. Our approach will require technological solutions, but also regulatory intervention, culture change and finding viable new business models among others, in other words: interventions across the value chain, requiring action by different stakeholder groups.
Isolated communities: Getting different stakeholder groups in the internet space to work together, or even to talk to each other, is difficult. Different communities tend to operate in siloes, and miss a shared language to talk about problems, preventing us from taking the multidisciplinary approach that we need. Lawyers who work in the data protection space don't necessarily talk to the grassroots initiatives trying to build practical alternatives, who in turn don't talk to the policymakers who can make a change on the legislative front. And that is still within one field: how often do cybersecurity experts talk to gig economy activists, software engineers to digital anthropologists? Building a more human-centric internet will require a sustained commitment by a wide variety of groups- developers, civil society groups, legal experts, policymakers, the private sector, ethicists, economists, hardware creators… But how will we get all of them together in the same room? One key objective of the Next Generation Internet initiative is to foster a real community of like-minded actors in the internet space (and beyond) who care deeply about making the internet fairer and more democratic for all.
Isolated issues: Too often do we treat important aspects of the internet in isolation, while the issues themselves are actually multi-faceted and interwoven. We need to think more about how individual issues connect to and impact other elements of the internet, and how the principles and values we champion need to be embedded across all layers of the internet, taking a full-stack approach. To illustrate, when we talk about developing ethical AI- probably the most hyped internet issue today- we tend to focus on a rather narrow slice of the whole AI development process, specifically decision-making, accountability and minimising bias. Though building fair decision-making mechanisms into AI systems is of crucial importance, developing truly responsible AI tools requires us to take a much wider scope, starting at the infrastructure level, up to the societal and economic impact the tool generates. If an AI system makes transparent and “fair” decisions, but is itself used for malicious purposes, can it still be considered ethical? What if the tool is well-designed and used for good, but the data it relies on was acquired without the consent of its users? The graphic below shows a very simplified version of such a value chain, and the cross-stack aspects we need to take into account. AI Now’s Kate Crawford incredible new “Anatomy of an AI system”-map illustrated this idea in much more depth.
We need to embed ethics across all layers of AI systems - visual by author.
Keeping all of these challenges in mind, we have spent the past few months thinking about a model for the internet that can capture these nuances and might help bring more cohesion to a fragmented landscape, and have come up with a set of key topics. When selecting these cross-stack issues, we have narrowed our scope to specifically those challenges we believe will most impact the health of the internet in years to come. Through a data-driven topic mapping exercise (credit to our partners DELab and Eurecat), expert input and our own analysis, we have picked ten key challenges that we believe should be addressed in parallel as part of our mission to build a more human-centric internet.
These ten topics can be divided in three categories: topics that cover the key aspects contributing to the resilience of the internet, three that are key to make the internet more inclusive, and lastly aspects central to creating a net that is more democratic. Each of the topics below cover a wide range of different sub-issues, relevant to different stakeholder communities, and are generally technology agnostic (with the exception of ethical AI, which we believe to be so potentially transformative as a technology, it merits individual attention). In order to make the internet more resilient we need to:
Ensure the internet is sustainable and limits harm to the planet, and input materials are sourced in a fair and ethical way.
Build an internet that is resilient and cyber secure.
Create the infrastructures necessary for secure online interactions and trustworthy online identities.
Sustain a healthy and pluriform information and media ecosystem.
In order to make the internet more democratic we need to:
Promote new business models and decentralise power, away from a handful of dominant players.
Give all internet users the right and ability to provide meaningful consent, opt out, and self-govern their interactions with internet services.
Give internet users back control over their own data, so regaining data sovereignty.
In order to make the internet more inclusive we need to:
Prevent technologies underpinning the internet, notably AI and Machine Learning tools, from perpetuating existing inequalities.
Ensure the internet is safe for all the use, and promotes diversity.
Create an internet that is accessible and open, providing everyone with the ability to shape and harness its power.
See the more detailed list below to learn more about our thinking about each of these ten. Over the coming months, we will also be publishing in-depth reports on each of these umbrella challenges with concrete suggestions on how we might address them. Our first report, on ethical AI and machine learning, will be released soon. Keep an eye out on the Nesta or NGI website, or sign up to our newsletter to stay informed about the progress of the project.
Ten Challenges for the Future Internet
Sustainable and Fair Infrastructure One key challenge for the internet moving forward is ensuring that the hardware and infrastructures underpinning it are sustainable and can meaningfully contribute to building a more circular and fair economy. The challenges around the internet’s environmental footprint are myriad: from the extraordinary amount of energy used by data centres and emerging technologies like blockchain, to the costly mining processes behind the materials making our tech devices function. Estimates suggest that by 2020 the global number of connected ‘things’ will reach 21 billion- usually hard to recycle and deliberately designed not to have a long lifespan. Can the planet sustain such explosive growth in connectivity? Our thirst for internet-enabled devices is not just harming the planet, but also supported by exploitative and dangerous production processes across the supply chain, from the mining of resources often reliant on child labour, to dangerous labour practices in the factories actually building our hardware. Some of the questions we’re asking:
How can we ensure the internet and its underlying infrastructures reduce humanity’s environmental footprint, rather than increase it?
How can we bring more transparency to the supply chains underlying our internet consumption and the devices supporting it?
How can we become less reliant on toxic and harmful mining processes, and move to a model where we can better reduce and recycle the resources we do use?
Can we reduce the geopolitical risks associated with our over-reliance on resources mined in often politically volatile countries, and increasingly the subject of a global arms race for minerals?
Cybersecurity and Resilience One key component of building a more democratic and inclusive Next Generation Internet is ensuring the infrastructures underpinning the internet itself are secure, safe and resilient. We live in a time of growing cyber threats for which we are ill-prepared: from rising cyber crime to ever more sophisticated cyber warfare capabilities, powered by such new technologies as autonomous weapons and quantum computing. Existing weaknesses and flaws in the internet’s physical infrastructure and protocols also require urgent mending. Governments, the private sector and citizens need access to the right tools and information to help them protect themselves against these kinds of threats, and larger systems changes are required to ensure our (critical) infrastructures are resilient in the face of emerging challenges.
Some of the questions we’re asking:
How can we increase awareness among the general public and in the private sector about the risks associated with cybercrime and attacks?
Similarly, can we promote more adoption of responsible practices in the development of tools and devices as well spark public demand for safer solutions?
What are the kind of (cyber)-physical infrastructures we need to ensure resilience not just in the short run, but also into the future?
As the international community, what can we do to reduce the risk of escalating cyber conflict and internet-enabled hybrid warfare methods? How can we put the necessary treaties and processes- still very much lacking!- in place?
Trustworthy online information infrastructures One of the biggest scalps of the unbridled growth of the internet is probably the health of our media ecosystems: profits for quality journalism have cratered, and the ad-driven business models supporting information provision online have empowered the sensational over nuance, clicks over truth. The proliferation of “fake news” and the weaponisation of information is a key challenge for the internet today, threatening the very building blocks of our democracies and societies. Ensuring access to trustworthy information, and preventing the deliberate manipulation of information flows without resorting to censorship and hampering of freedom of speech remains an unsolved challenge. We need to not just think more about specific, particularly media-friendly, topics such as fake news, deepfakes, filter bubbles and Twitter bots, but take a wider view in thinking about how we can create healthy (social) media ecosystems and create viable alternative business models for quality news and information sharing. Some of the questions we’re asking:
The million dollar question: how can we make online quality journalism profitable? Which business models actually work, and how can we support them?
We heralded the internet as the great democratiser, giving everyone a stage- also those who we might have preferred not to (extreme political views, trolls, harassment). How do we strike the right balance between freedom of expression and addressing threats to our the resilience of our societies and individual safety?
‘Fake news’ has already proven very hard to counter- certainly technological fixes such as AI-detection, appear to be only limited in their effectiveness. How will we deal with the next-generation of manipulation tools, such as deepfake technologies?
Online identities and trust We are currently seeing a big surge of interest in online identity systems, both driven by private sector and government initiatives. Building a trustworthy and secure system for managing online identities would be incredibly valuable: they might help empower refugees, often left stateless, and ease their access to support systems, they could help make transactions online safer and improve the efficiency of our interactions with government services (see Estonia).
Effective identity management wouldn’t only increase trust on the internet (who am I really talking to? Can I trust the online service?) and so bolster the European digital economy, but would also help us build more personal online relationships. The currently dominant rate-and-review system places a lot of power in the hands of the reviewer (a single low score on ride sharing app can seriously damage a driver’s ability to attract new customers), alternative e-identity and reputation management systems could make these interactions more positive and equal.
Discussions about online identity management systems are only one element in a larger discussion about how we can move to an internet that is build on principles of trust (rather than the “trustlessness” much touted by some in the Blockchain community).
Some of the questions we’re asking:
How can we promote more secure and trustworthy transactions and interactions online?
How can we reduce the security and privacy risks associated with centralised identity management systems?
Many emerging online identity systems (and associated reputation systems) are managed by the private sector and part of walled gardens. How can we democratise control and promote portability across applications?
Good e-ID systems would be very valuable, but could also easily be turned into a powerful weapon for oppression and surveillance. What role could and should governments play in restoring trust on the internet? Should a secure online identity be as much a citizen’s right as holding a passport, or are the risks too substantial?
Decentralising power Most of the issues the internet faces today are a direct consequence of the increased monopolisation of power over the internet, and the business models that sustain this dynamic. Even issues that are only seemingly tangentially related to Big Tech’s and certain governments’ disproportionate control become harder to address, because the small number of actors who do have the power to make a change are often unwilling to do so. We urgently require new business models that can provide an alternative to the reigning surveillance capitalist model, and can sustain a more pluralistic and healthy digital economy. Alternative models, such as platform cooperativism or commons-based approaches can help empower smaller initiatives, help level the playing field and offer better protections to consumers and digital workers. We need to support initiatives and SMEs that operate under these currently still less-sustainable models, through policy (protecting net neutrality, designing next generation competition and antitrust policy), funding, and procurement, as well as promoting adoption among the general public. Some of the questions we’re asking:
There is a lot of talk about Europe needing to create its own tech giants. But rather than trying to build the next Google, shouldn’t we focus on building the kinds of infrastructures that would prevent the next Google instead?
What kind of alternative, more inclusive business models will actually work? Can these models realistically compete, and under which circumstances?
Power over the internet today mostly comes in the form of access to data, and will only become more important in the age of AI. How can we democratise access (while protecting data subjects’ sovereignty and privacy) and ensure existing power structures don’t get further calcified?
There is a lot of talk about regulating Big Tech: breaking them up, turning them into public utilities, making them pay for our data… But not enough concrete, realistic proposals for what exactly this regulation should entail, and assessments of their effectiveness. How can we best use policy levers to curtail monopoly power?
The Right to Opt out & Self-govern With the internet becoming ever more pervasive in our lives and societies, shaping our jobs, our cities, our interactions with the government and so forth, it has become harder and harder for individuals to shape our relationships with, or opt out of, “the internet” altogether. With the rise of the smart city, and the millions of connected IoT-devices that will underpin it tracking our every move, how do we ensure citizens can meaningfully consent to what happens with the data they generate, and retain their privacy? With everything from our smart vacuums to credit card companies collecting and selling our data to the highest bidder (through very opaque processes), we need new solutions that help citizens give informed consent, as well as the ability to completely opt out of being part of, for example, data sharing systems, while still being able to use key services.
These questions about ownership and consent should not only pertain to our own personal data, but also to, for example, our relationship with our devices and digital ownership rights. The design of newer devices tend to restrict our ability to “tinker” with them (it is a lot harder to build your own smartphone than it used to be to build your own computer), and the growing popularity subscription services like Netflix and Spotify have turned us into content renters rather than owners.
Some of the questions we’re asking:
Realistically, there is currently no such thing as informed consent when it comes to the tracking of our personal data off- and online. Can we move beyond the meaningless checkboxes and endless user agreements and rethink how users can give actual permission?
We are usually given a binary choice when asked to give consent: either we agree with Facebook’s terms and conditions, or we do not get to use the service altogether. Can we design pathways to reduced consent that do not lead to complete exclusion from a service?
Vulnerable groups are more likely to be wary of or unable to share their data. If more and more services have data-driven analysis underpinning them, from where we place streetlights to mental health services provisions, how can we ensure the needs of those who aren’t part of the data set are still represented?
Can we invent new models for community consent- not just consent on the level of the individual? How can we let communities decide their own “rules of engagement” with, for example, smart city systems or sharing economy platforms?
Data sovereignty One of the biggest problems the internet faces today, and the main cause of the unequal distribution of power in the digital economy, is the concentration of data in the hands of just a few key players. As the use of data-driven solutions is starting to permeate more and more aspects of our societies, this rat race to get access to our personal data is no longer just a threat to our privacy, but our sovereignty as individuals.
We need to experiment with and build on new models such as personal data stores and data commons models, as well as think about how regulation can be effectively used to help democratise data ownership. Breaking the dominant surveillance capitalist business models will however not be easy, which is why we believe we should be looking at larger systems changes as well- redesigning the internet’s underlying infrastructure to be more decentralised by nature, as well as rethinking the dominant economic frameworks driving the internet today.
Whichever sets of interventions we ultimately go for, re-establishing data sovereignty will also require reclaiming technological sovereignty. Today, too few of the technologies and applications we rely on are designed in Europe. Regulation is ultimately rather reactive- to truly embed European values into the process, we also need to move production of both hardware and software back into Europe.
Some of the questions we’re asking:
How can we give citizens back control over what happens to their personal data?
We want to protect our sovereignty and privacy when it comes to our personal data, but at the same time need to recognise that having access to substantial amounts of data is also critical in the global AI arms race, and thus retaining our technological sovereignty more broadly. How do we strike the right balance?
Personal data stores, data commons, data trusts… We see a lot of alternative models mushrooming up that could help make the relationships between those data owners and data subjects more equal. Which (combination) of these do we need?
Ethical AI and Machine Learning As discussions about the potential transformative impact of AI and Machine Learning have come to dominate public debate in recent years, so have concerns about the potential negative side-effects of allowing these kinds of technologies to play an ever-larger role in decision-making and the governing of our societies.
We need to embed ethics across the system’s value chain: the development of ethical AI and ML tools should only use responsibly sources and managed data (make sure we have a representative sample, subjects were able to give informed consent, privacy is protected) and algorithms that don’t further existing societal biases (around gender and race, for example) and are accountable. The tools themselves should furthermore only used for purposes we consider ethically just, or at least not malicious. Ensuring we have solutions that are fair and inclusive along the value chain (from the infrastructural level up to the impact of the decisions being made or tasks replaced) is the only way to build truly responsible AI. Some of the questions we’re asking:
How can we ensure AI systems are ethical, fair and accountable across all layers of the decision-making process?
How can we democratise who gets to build AI systems? AI development is now dominated by the private sector and often not particularly benevolent governments. How can we support the creation of AI-for-good?
When we talk about ethical AI, what “ethics” are we talking about? Which values should these systems embody, and how can we embed them in systems?
How can we ensure AI systems are resilient to malicious attacks (such as gaming of deep learning algorithms) and conversely aren’t used for malicious purposes (think of emerging applications, such as deepfake technology and cyber- and autonomous weapons).
A Diverse and Safe Internet The next billion internet users who will move online will look very different from the first billion internet users. Yet, it is still mostly the latter group’s needs who get taken into account in the design of technological solutions and applications. Increasing diversity in who gets to build and use the internet is important if we want to ensure we don’t perpetuate existing inequalities also in the digital economy, but also helps stimulate innovation, as diverse teams tend to be more creative. Addressing the current lack of diversity in the technology industry will require a combination of ambitious education initiatives helping making training in, for example, computer science more accessible to members of underrepresented groups, but also try to effect culture change within the sector, for example by targeting bias in the hiring process. Making the internet itself more diverse- whose voices do we allow to get heard and amplified?- not only relies on creating opportunities for those generally marginalised in online discourse, but also making sure the internet provides a space for all. The rise of twitter mobs, doxing campaigns and troll armies has driven many sharing different opinions or from different backgrounds of the internet. To truly foster a diverse internet, we also need to ensure it is safe and free from targeted harassment. Some of the questions we’re asking:
Technology is not neutral, but reflects the needs and context of its creators. How can we make the teams leading on developing the next wave of technologies more diverse?
The internet, in particular social media, has unfortunately made it much easier to target and harass people with different views and ideas than our own. How can we keep the internet a safe space for all?
We also need to put thought in children's experiences on the internet. Children are particularly vulnerable when it comes to harmful content, cyber bullying, targeted advertising and even more nefarious ends. How do we provide them with a safe internet without imposing too much control?
Openness and diversity go hand in hand: how can we make sure the internet remains a place where fringe communities and different ideas can continue to prosper?
An Accessible and Open Internet Before we can begin to talk about building a Next Generation Internet, we need to ensure that everyone, in Europe and beyond, can have access to the internet to begin with. This means addressing structural barriers to access, through for example investing in infrastructure and broadband access, and promoting multilinguality and accessibility (many websites are still too hard to use for disabled users) online, but also thinking about the more social barriers that prevent people from moving online. Think here about improving digital skills, as well as ensuring that the internet provides a safe environment for all (particularly as online harassment and hostility disproportionately affect more vulnerable groups).
Access is also only truly access, if new users can actually enter the open internet- think for example of the Facebook-sponsored Free Basics programme, which gives people in developing countries free access to a small set of Facebook-approved websites. Is that truly the internet? We see the emergence of walled gardens and other types of internet fragmentation all over the world- from the curtailing of net neutrality, to censorship, link taxes and ultimately splinternets. It is of fundamental importance we protect and champion the open internet, particularly at a time when it is increasingly under siege. Some of the questions we’re asking:
How can we move discussions about internet access beyond conversations about broadband deployment, and do more about the also important social and economic dynamics preventing people from using the internet?
How can we make the internet more accessible to users who are less tech-savvy, have disabilities, or don’t speak major languages like English?
We see more and more governments and companies cordoning off bits of the internet. How can we counter the trend of the internet getting less open? What role should Europe play as one of the last “safeguards” of the open internet?
Of course, we will not attempt to find perfect answers to all of the above and solve all of the issues described. This set of ten is an attempt to summarise key issues, and highlight the strong interconnections between them. Our next steps should be to bring together a strong coalition of people who might help bring us closer to the right solutions. You want to be part of this mission? Do get in touch.