Comment by donohoe

So with MetroCards going away the privacy implications of this are pretty big.

Check out this thread on Twitter with more info:

https://twitter.com/Chronotope/status/1565734877957394434

Highlights:

  OMNY is not a project of the city. It is a system 
  operated by the private organization Cubic 
  Transportation Systems. Cubic has quietly taken over 
  the monetization process of the majority of 
  major US and western EU cities

  OMNY says they won't disclose your data except 
  for potential sharing to law, "safety", and 
  anti-fraud related entities, "affiliates and 
  subsidiaries". OMNY is owned by Cubic subsidiaries 
  include military service providers, & cos that 
  serve the international intelligence community

  Cubic is owned by Veritas Capital. Veritas Capital, 
  among other things, helps run the DHS's biometrics 
  database. Their CCPA statement says they collect 
  and share information collected from "portfolio 
  companies" that includes Identifiers.

Twitter thread has much more specific details.