Technology and digital policy

Consider the morning routine of Elena, a mid-level accountant in Toronto. For years, her role involved meticulous reconciliation of ledgers and tax filings. Recently, her firm introduced an AI-driven auditing platform. What once took Elena three days now takes three hours. While her workload has decreased, the nature of her anxiety has shifted. She is no longer worried about making a calculation error; she is worried about whether her employer will view her role as redundant in the coming fiscal year.

In a small rural municipality in Saskatchewan, a local water treatment plant manager receives an automated alert indicating unusual fluctuations in pressure sensors. For a moment, the operator wonders if this is a routine mechanical failure or the first sign of a sophisticated cyber intrusion targeting critical infrastructure. The stakes are immediate: a prolonged outage could compromise public health, while a false alarm might trigger unnecessary emergency protocols that strain limited municipal resources.

The morning light filters through the blinds of a small apartment in Winnipeg, where Sarah, a single mother of two, stares at a smartphone screen that has long since run out of battery. She needs to apply for a new job, but the online application portal requires a desktop interface and a stable connection to upload a resume. Her phone cannot handle the task, and the local library is closed on Sundays.

The morning routine of Elena, a retired teacher in Saskatoon, begins with a cup of coffee and a check of her banking app. Recently, she received a text message appearing to be from her financial institution, requesting a verification code. Skeptical but cautious, she deleted it, unaware that the link had already triggered a background script attempting to harvest her login credentials. For Elena, the protection of personal information is a daily exercise in vigilance, a necessary friction in an otherwise convenient digital life.

In the quiet hallway of a suburban high school in Ontario, a student named Elias waits outside a classroom marked “Advanced Mathematics.” Inside, his peers are tackling calculus concepts he has already mastered through independent study. However, Elias’s file recommends placement in a standard track, citing his inconsistent attendance and a mild, undiagnosed attention deficit. For Elias, the placement feels less like an academic assessment and more like a label that predicts his future, creating a self-fulfilling prophecy of mediocrity.

A citizens' assembly on artificial intelligence convenes in a European capital, randomly selected participants receiving intensive education on technical concepts they had never encountered, deliberating for weeks over questions that experts have debated for years, and producing recommendations that reflect genuine citizen judgment, only for those recommendations to enter policy processes where organized interests with permanent presence can outmaneuver episodic citizen input and where the complexity that participants briefly mastered continues evolving in directions their recommendations d

Consider the quiet anxiety of Elena, a 68-year-old retired teacher living in rural Saskatchewan. When her bank recently mandated the use of a mobile app for identity verification, she found herself staring at a screen that demanded biometric data she did not understand. Despite having used a computer for decades to write letters, the shift to a smartphone interface felt like learning a new language.

A European trade negotiator sits across from her American counterpart, each holding draft text on digital platform governance, the European seeking provisions that would enable regulation of dominant platforms, the American seeking provisions that would prevent such regulation, both knowing that whatever they agree will shape how billions of people interact with technology, neither certain that any agreement is achievable when their governments hold fundamentally different views about whether platforms are infrastructure requiring regulation or services requiring protection from regulation.

A hospital's IT department posts a cybersecurity analyst position that remains unfilled for eight months while the organization's networks face daily attacks, its single security specialist overwhelmed by alerts, incidents, and compliance requirements that would challenge a team of ten. A financial services firm offers salaries 40 percent above market rate and still cannot recruit experienced security architects, losing candidates to technology companies that offer equity compensation, flexible work, and technical challenges that traditional industries cannot match.

A mid-sized manufacturer suffers a ransomware attack that encrypts production systems and demands payment in cryptocurrency. The company's cyber insurance policy covers the ransom, the incident response costs, the business interruption losses, and the forensic investigation. Without insurance, the attack might have bankrupted the company. With insurance, it survives to operate another day, though questions linger about whether the easy availability of ransom payment encouraged the attack in the first place.