Smart City infrastructure is surveillance infrastructure because data collection is part of making cities smart. A central privacy challenge is communicating what data is collected, by whom, and for what purpose. This talk explores the UX of Smart Cities from a privacy and consent perspective, using GDPR as a chance to rethink consent and critiquing existing Smart City apps for better communication of personal data use.