Cities want to be ‘smart,’ connected, and data-driven, but in doing this many are unwittingly engaging in large-scale surveillance of citizens. Without greater transparency or accountability around these operations, cities risk a collapse in public trust. Privacy and Data Protection should be at the heart of Smart Cities.