The integration of digital twin technology in smart city ecosystems presents unprecedented opportunities for urban management while creating complex challenges for individual privacy and data sovereignty. This paper discusses identity reconstruction issues caused by the accumulation of personal data in urban digital twin systems. Drawing on a systematic review of current governance practices, we conclude that there are major limitations of static permission schemes and fragmented regulatory schemes. We propose a new "Dynamic Authorization Data Sandbox" (DADS) governance model that combines fine-grained consent frameworks, context-aware identity management, and segregated data processing environments. The model supports citizens to be in effective control of their digital surrogates while facilitating right smart city functionality. Stakeholder workshop evaluation indicates that the framework provides a 67% improvement in data sovereignty perceptions and a 42% increase in willingness to participate in digital twin activities. This research contributes to people-centered smart city development through the establishment of governance systems that balance innovation with fundamental rights to privacy and self-determination.
C deVries (2025) studied this question.