Policy Brief: IoT Privacy for Policymakers

#Discussion(Security) [ via IoTGroup ]

Headings…
Policy Brief: IoT Privacy for Policymakers
Introduction
Key Considerations
Challenges
Guiding Principles and Recommendations
Appendix: Further Reading
Related articles
Internet of Things
The Internet Society Survey on Policy Issues in Asia-Pacific 2018
The Role of Connected Devices in Recent Cyber Attacks

Auto extracted Text……

This policy brief identifies the key privacy challenges and risks arising from IoT devices in our homes, workplaces, public spaces, and on our person.
In the context of IoT, privacy boils down to two things: either we trust third parties not to abuse the data generated by our use of connected objects, or we rely on the ability to control the collection and use of that data.
The ability for individuals to control how the information collected by their IoT devices is shared, and determine who has access to the data from devices in your home, in your car, and on your person.
IoT devices will collect a range of new personal data and behaviors – consumers must trust that the custodians of this data will treat it, and them, respectfully.
It’s a challenge to make people aware of the presence of IoT devices, particularly when they are in spaces controlled by others, and especially hard to give people the ability to opt out of passive data collection.
To make matters worse, emerging research shows that some IoT service providers’ privacy policy statements are hard to find, vague about device capabilities, and opaque about data collection.[16]
Because of the pervasive nature of IoT, governments have a role to play in ensuring that devices and services do not expose citizens to individual or collective risk, harm privacy, or exacerbate vulnerability or discrimination.
Principle: Enhance Meaningful User Control of IoT Devices and Services, and the Management of the Data They Collect
IoT device interactions and management consoles should be designed to make it easy for the user to understand and control the sharing, e.g. allowing the data to be shared with this person but not that person, and for a particular period of time.
Even where over-arching and/or sectoral laws are already in place, additional sectoral privacy laws for specific industries may be needed for greater legal certainty, or to address new risks specific to the emerging IoT market (e.g

Read More..
AutoTextExtraction by Working BoT using SmartNews 1.0299999999 Build 26 Aug 2019