The eleventh CREATe Working Paper of 2015 is now available to download. Privacy, Security and Data Protection in Smart Cities: a Critical EU Law Perspective by Lilian Edwards argues that smart cities combine the three greatest current threats to personal privacy, with which regulation has so far failed to deal effectively; the Internet of Things(IoT) or “ubiquitous computing”; “Big Data” ; and the Cloud. Edwards discusses how and if EU DP law controls possible threats to personal privacy from smart cities and suggests further research on two possible solutions: one, a mandatory holistic privacy impact assessment (PIA) exercise for smart cities: two, code solutions for flagging the need for, and consequences of, giving consent to collection of data in ambient environments.