Privacy Management in the Internet of Things (IoT)

Abstract

When thinking about privacy management in Internet of Things (IoT) devices, these questions must be considered: What Personal Identifiable Information (PII) is being collected, used, transmitted, and stored? Do the IoT devices collect only the minimum data needed for the intended service(s) they claim to provide? Who has access to the data, and who ultimately owns the data? Are there security requirements that protect and govern the data, and do regulatory mandates ensure the privacy of the data? The security challenges of IoT are as varied as the heterogenous swath of IoT devices; however, the manufacturers and the customers of these IoT devices are the data stewards, and ultimately the keepers of the privacy of the data. Some governments have passed regulations to protect the privacy of its’ citizens’ data, but only a handful of countries have employed that measure as a solution to privacy management.