Lesson 8.4Lesson 8.4 · People, Governance & Ethics
Who Controls the Twin?
Every choice in a twin - what it models, what it optimises, who it watches, who it serves - is made by someone, for some purpose, and a twin concentrates power over a city, so the defining question a designer must ask is who builds, owns, operates and decides with it, and whose interests it encodes
A twin does not decide anything by itself - people decide with it; so the real question is never what does the model say, but who built it, whose purposes it serves, and who is answerable for what is done in its name
This module has circled one question from every side - through participation, through data ownership, through privacy and equity - and this final lesson asks it directly, because it is the moral heart of the whole field. An urban digital twin is never just a tool. It is a concentration of data and, through that data, a concentration of power over a city: the power to frame what is seen and what is ignored, to define what counts as a problem, to make some futures look inevitable and others unthinkable, and to lend the authority of apparent objectivity to choices that are really about whose interests win. A twin that holds this much power is governed by whoever controls it - and so the defining question is simply: who is that?
It is tempting to treat the twin as neutral - it is just a model, just data, just maths - and that temptation is exactly the danger. Every choice embedded in a twin is made by someone, for some purpose: which data is collected and which is not, which neighbourhoods are sensed and which are dark, what the model optimises for, which scenarios it can and cannot run, who can see inside it and who cannot. None of those choices fall from the sky. They encode interests. A twin built by a developer optimises differently from one built by a community; a twin owned by a vendor answers to different masters than one owned by an accountable public body. The designer's deepest responsibility in this field is not technical skill but the discipline to keep asking, of any twin, who controls this, whose interests does it serve, and who is answerable - and to refuse the comfortable fiction that the model is neutral.
A twin looks like neutral maths. It is power wearing a mask. Follow the control, name the interests, keep a human answerable.
Four questions of control - and a fifth they all point to
To think clearly about power in a twin, separate four distinct forms of control, because they are often held by different parties and conflating them hides where the power actually sits. Who builds it? The vendors, consultants and technologists who design the model make countless consequential choices - what to include, what to simplify, what to optimise - and those choices, however technical they look, shape what the twin can and cannot say. Who owns it? As Lesson 8.2 showed, ownership of the data and the platform determines who can grant access, who can change it, and whether the city can even leave - and an owner accountable to shareholders is not the same as one accountable to citizens. Who operates it? The agency or contractor who runs the twin day to day controls what it watches, what it reports, and who gets to use it. Who decides with it? The officials, planners and politicians who act on the twin's outputs wield the power it amplifies - and they can hide behind it.
These four questions all point to a fifth, which is the one that matters most: whose interests does the twin encode? Because control, in all its forms, shapes the answer. A twin whose data, objectives and access are controlled by property developers will tend to see the city as an investment surface; one controlled by a transport department will see it as a network of flows; one shaped with communities will see the things communities care about. There is no view from nowhere. Every twin is a view from somewhere, built by someone, for some purpose - and the apparent neutrality of the interface hides the interests baked into what it shows and what it optimises. Making those interests visible, rather than letting them hide behind the authority of a dashboard, is the first act of critical competence.
This is why the answer who controls the twin cannot be left implicit or assumed. A twin can concentrate enormous influence over a city in very few hands - a vendor, a department, a political office - with little visibility and less accountability, precisely because its workings are opaque and its outputs look objective. The antidote is not to reject the twin but to insist that these questions of control are asked, answered openly, and revisited: to follow the power, not just the data, and to treat every claim the model makes as a claim made by someone, for some reason.
Builds / owns / operates / decides - all point to: whose interests does it encode? There is no view from nowhere.
The danger of technocracy and the black box
The specific political danger a twin poses has a name: technocracy - the quiet replacement of democratic, contestable, value-laden decisions with the apparently neutral authority of data and models. A twin makes this easy and seductive. When a decision is justified because the model shows it, several things happen at once, and all of them weaken democracy. The choice is depoliticised: a question about whose interests should win - whose neighbourhood bears the road, whose view is protected, where investment goes - is reframed as a technical matter of optimisation, as if it had a single correct answer the model simply computes. Accountability is diffused: the official can point to the model, the model's builders can point to the data, the data's owners can point to the contract, and no one is clearly answerable. And the decision is removed from contestation: it is hard to argue with a dashboard, especially one you cannot see inside.
The black box makes all of this worse. If a twin's data, assumptions and models are proprietary and opaque - as Lesson 8.2 warned they often are - then the public cannot inspect the basis of decisions made in their name, cannot find the value choices hidden inside the optimisation, and cannot mount an informed challenge. A decision that cannot be inspected cannot be democratically contested, and a decision that cannot be contested is not really democratic, however many consultations surrounded it. The twin becomes a way for power to act while appearing only to compute.
The defence is democratic accountability and transparency, and it has to be deliberate. A twin must remain decision-support, not a decision-maker - the firm boundary this whole course insists on - so that a named, accountable human, not the model, owns every binding choice and can be held answerable for it. Its data, assumptions and the value choices inside its models must be transparent and inspectable by those accountable to citizens, so decisions can be understood and challenged. Its outputs must remain contestable - people must be able to argue with the model and win when the model is wrong or unjust. And the power it concentrates must be distributed and checked - through public ownership, open standards, oversight, and the inclusion of affected communities - rather than allowed to pool silently in a few hands. None of this is the twin's default; all of it is a choice about how the twin is governed, which is to say, a choice about who controls it.
The designer's responsibility: ask the question out loud
Where does a designer - an architect, an urban designer, an interior designer, a student - stand in all this? You will rarely be the one who owns a city twin or sets its governance; those decisions sit with authorities, vendors and politicians. It would be easy to conclude that the power questions are therefore not your concern. That conclusion is wrong, and resisting it is the ethical core of this lesson. Designers are among the people who build twins, feed them, present their outputs, and act on them - and more than that, designers are trained to think about who a place is for, which is exactly the question a twin can obscure. You are not a bystander to the twin's power; you are one of the hands it passes through.
Your responsibility, concretely, is to ask the question out loud - early, repeatedly, and on the record. When a twin is proposed or used in your work, ask who built it and with what assumptions, who owns it and whether the public can leave, who operates it and who it watches, who decides with it and who is accountable, and above all whose interests it encodes and who it might harm or erase. Ask what it optimises for and who that quietly favours. Ask who is not in the data. Ask whether the participation around it is genuine or theatre. These questions are not obstruction; they are professional diligence, and asking them is often the only thing that makes the hidden choices visible in time to change them. A designer who asks who does this serve? is doing the most important work in the room, even when - especially when - no one else is asking.
This connects to the deepest commitment of this course and of Studio Matrx. A twin is a powerful, double-edged instrument: it can help a city see itself and plan more wisely, or it can surveil, exclude and concentrate power while wearing the mask of neutral objectivity. Which one it becomes is not determined by the technology; it is determined by who controls it and the values they encode - and designers, by asking the right questions and refusing the fiction of neutrality, help decide that. Defer the binding decisions - planning approvals, lawful data handling, contracts - to the accountable authorities, engineers, data custodians and the governing law; that deferral is right and important. But never defer the *questions*. The duty to ask who controls this, whose interests it serves, and who is answerable is the one responsibility a designer can never hand off, because it is the responsibility to keep the human, the accountable and the just at the centre of a technology built to look as if it needs none of those things.
You can defer the decisions. You can never defer the questions. Ask who does this serve? - out loud, early, on the record.
Democratic control in practice - and the Indian stakes
What does keeping a twin under democratic control actually look like? It is the sum of the commitments this module has built, now read as a single discipline of power. Public ownership and governance of the data and the model, so the twin answers to citizens rather than to shareholders or a vendor (Lesson 8.2). Open standards and transparency, so the model can be inspected, audited and left, and so decisions made with it can be understood and challenged rather than hidden in a black box. Genuine participation, so the public shapes what the twin is for and what it does, not just admires it after the fact (Lesson 8.1). Privacy, anti-surveillance limits and equity safeguards, so the twin's watching is minimised and accountable and its benefits and burdens are justly shared (Lesson 8.3). A firm boundary that the twin is decision-support, never a decision-maker, so a named, accountable human always owns the binding choice. And oversight - independent scrutiny, the ability to contest, the power to change or switch off the twin - so that the concentration of power it represents is checked rather than absolute. A twin governed this way is a democratic instrument. A twin lacking these is a concentration of unaccountable power, no matter how beneficial its stated purpose.
The through-line of the whole module is this: the ethics of a twin live in its governance, not its graphics. The most beautiful, technically dazzling twin in the world is dangerous if no one can say who controls it, whose interests it serves, or who is answerable for what is done in its name - and a modest, honest twin under genuine democratic control is a public good. Power, not polish, is the measure.
In the Indian context these stakes are especially high, and especially worth getting right. India is building urban-data capacity and smart-city infrastructure at enormous scale and speed, often through vendors and often faster than governance and accountability frameworks mature - which creates real risk of power over cities pooling, with little transparency, in the hands of those who build and own the platforms. The data-protection regime centred on the Digital Personal Data Protection Act, 2023 is still developing; the informal city is under-represented, so the question of whose interests a twin encodes is acute; and the democratic traditions of participation and accountability must be deliberately extended into this new technological terrain rather than bypassed by it. For designers working in India, the responsibility to ask who controls the twin, whose city it serves, and who is answerable is not abstract ethics - it is the practical difference between a technology that helps Indian cities and their most vulnerable residents, and one that quietly entrenches existing power. Studio Matrx is free and not-for-profit, and this module exists to insist, without hype or fear, that an urban digital twin must serve the public and remain under accountable, democratic human control - and that asking who controls it is the first and last duty of anyone who works with one.
Decision-support, not decision-maker
Keeping a named human accountable for binding choices
The course's firm boundary: a twin informs, but a named, accountable human owns every binding decision and can be held answerable. The model never decides; it never hides the decider. Modules 0, 6, 9.
Democratic accountability & transparency
Making decisions inspectable and contestable
A twin's data, assumptions and value choices must be inspectable by those accountable to citizens, and its outputs contestable - otherwise decisions made with it cannot be democratically challenged. Governance principle, context-dependent.
Planning authority, engineers, custodians & the governing law
Who holds the binding decisions
Binding planning approvals, infrastructure engineering, official data and lawful data handling stay with the accountable authorities, qualified engineers, official custodians and the law (incl. India's DPDP Act). Defer the decisions - never the questions.
Workshop - follow the power in a real twin
The capstone skill of this module is following the power, not just the data. In this workshop you take a real or proposed city twin and answer the five control questions, then judge whether it is under accountable democratic control or a quiet concentration of power.
A city-twin or smart-city case you can read about, this lesson, and the two figures. No software - this is critical, ethical reasoning about power, the heart of the module.
Goal: a power map of a twin that exposes who controls it and whose interests it encodes Inputs: a real or proposed city twin / smart-city programme you can read about (ideally the same one you used earlier in Module 8) + this lesson + the two figures Time: ~50 minutes
- 1Answer the four control questions: for your chosen twin, who builds it, who owns it, who operates it, and who decides with it? Name the actual parties where you can, and note where you cannot find out - opacity is itself a finding.
- 2Name whose interests it encodes: from what it models, optimises and ignores, whose view of the city does the twin embody? Who benefits from that framing, and who is disadvantaged or erased by it?
- 3Test for technocracy: where are value-laden choices being reframed as technical optimisation? Could an official hide behind this model? Is accountability clear, or diffused across builders, owners and operators?
- 4Check the democratic defences: is the twin decision-support with a named accountable human, or is it deciding? Can the public inspect its data and assumptions, and contest its outputs? Is there independent oversight, or is it a black box?
- 5Write the capstone verdict: in one paragraph, judge whether this twin is under accountable democratic control or a concentration of unaccountable power, name the single change that would most improve it, and state the one question you would insist be answered before trusting it - as principled reasoning, with binding decisions left to the authorities and the law.
You’ll walk away with
A one-page power map: the four control answers, whose interests the twin encodes, the technocracy and black-box risks, the state of the democratic defences, and your capstone verdict with one decisive change. This is the culminating artefact of Module 8 - keep it.
Three altitudes on the same idea
Read the band that fits you — or all three.
You work inside the city's living model and act on its outputs, so you are one of the hands the twin's power passes through - and your trained instinct to ask who a place is for is exactly what the field needs. When a twin shapes a project or a planning decision, ask out loud who built it and with what assumptions, who owns it, who it watches, who decides with it, and whose interests it encodes - and make those questions part of your professional diligence, on the record, early enough to matter. Refuse the fiction that the model is neutral; every optimisation favours someone. Insist the twin stays decision-support with a named accountable human owning the binding choice, and champion transparency and genuine participation over dazzling but unaccountable models. Defer the binding planning, engineering and lawful-data decisions to the authorities, engineers, custodians and the law; never defer the questions of power - those are yours to keep asking.
Building twins nest inside the city twin, and the same power questions scale down to the rooms and buildings you shape. Ask who controls the building twin that watches your interiors - who built it, who owns the occupancy and use data, who operates it, and who decides with it - because the answers determine whether it serves the occupants or surveils them and concentrates power in an owner or facilities-management vendor. Keep the human accountable: a building twin should support decisions about comfort, energy and use, not quietly make them in ways occupants cannot see or contest. Champion transparency with occupants about what the twin watches and why, and portability so the owner is not locked in. Coordinate the binding data and contractual decisions with engineers, owners and counsel; your enduring duty is to ask whose interests the building twin serves and to keep it answerable to the people who use the space.
Carry one question out of this whole course: who controls the twin, and whose interests does it encode? Learn to separate the four forms of control - who builds, owns, operates and decides with the twin - and see that they all point to a fifth: whose interests it serves, because there is no view from nowhere. Understand the danger of technocracy and the black box: how who controls a twin can depoliticise value-laden choices, diffuse accountability, and remove decisions from contestation by hiding them behind an interface that looks objective. Hold the course's firm boundary - a twin is decision-support, never a decision-maker - and the defences of democratic accountability: transparency, inspectability, contestability, public ownership and oversight. You are not expected to govern a city twin; you are expected to refuse the fiction of neutrality and to ask, of any twin you meet, who controls this and who does it serve - the most important question in the field.
“A digital twin is a neutral tool - it just models the city objectively and supports better decisions, so questions about who controls it and whose interests it serves are political distractions from the real work of building good models. If the model is accurate, it serves everyone equally.”
Do it yourself
No tools needed - reason it through.
- 1Name the four forms of control over a twin (build, own, operate, decide) and the fifth question they all point to.
- 2Why is there 'no view from nowhere' - why can no twin be genuinely neutral?
- 3What is technocracy, and how does a twin make depoliticising decisions and diffusing accountability easier?
- 4Why does a black-box twin undermine democratic contestability of decisions made with it?
- 5What is the one responsibility a designer can never defer, and why?
The one line to carry out
Peer-reviewed journals & authoritative standards
- 01Data governance — Wikipedia - Data governance, 2026.
- 02Surveillance — Wikipedia - Surveillance, 2026.
- 03Urban informatics — Wikipedia - Urban informatics, 2026.
- 04Smart city — Wikipedia - Smart city, 2026.
With governance, people and ethics confronted head-on, the course turns to reality and limits - twin-washing, data quality and bias, the true cost and maintenance burden, and when a twin is simply the wrong tool - because a clear-eyed view of a twin's power must be matched by an equally honest view of how often twins fall short.
The author
Amogh N P
Architect, interior designer, and creative polymath. Studio Matrx began in his notebooks — his vision of design made honest, useful, and open to everyone. Its Academy is written and taught in his memory, and free, forever.
More about Amogh →