<abstract xmlns="http://www.w3.org/1999/xhtml">

<sec><h3>Background</h3><p>IoT and smart devices have become extremely popular in the last few years. With their capabilities to collect data, it is reasonable to have concerns about the protection of users’ personal information and privacy in general.</p></sec>
<sec><h3>Objectives</h3><p>Comparing existing regulations on data protection and information security rules with the new capabilities provided by IoT and smart devices.</p></sec>
<sec><h3>Methods/approach</h3><p>This paper will analyse information on data collected by IoT and smart devices and the corresponding legal framework to explore whether the legal framework also covers these new devices and their functionalities.</p></sec>
<sec><h3>Results</h3><p>Various IoT and smart devices pose a high risk to an individual's privacy. The General Data Protection Regulation, although a relatively recent law, may not adequately regulate all instances and uses of this technology. Also, due to inadequate technological protection, abuse of such devices by unauthorized persons is possible and even likely.</p></sec>
<sec><h3>Conclusions</h3><p>The number of IoT and smart devices is rapidly increasing. The number of IoT and smart home device security incidents is on the rise. The regulatory framework to ensure data controller and processor compliance needs to be improved in order to create a safer environment for new innovative IoT services and products without jeopardizing the rights and freedoms of data subjects. Also, it is important to increase awareness of homeowners about potential security threats when using IoT and smart devices and services.</p></sec>
</abstract>

BackgroundIoT and smart devices have become extremely popular in the last few years. With their capabilities to collect data, it is reasonable to have concerns about the protection of users’ personal information and privacy in general.
ObjectivesComparing existing regulations on data protection and information security rules with the new capabilities provided by IoT and smart devices.
Methods/approachThis paper will analyse information on data collected by IoT and smart devices and the corresponding legal framework to explore whether the legal framework also covers these new devices and their functionalities.
ResultsVarious IoT and smart devices pose a high risk to an individual's privacy. The General Data Protection Regulation, although a relatively recent law, may not adequately regulate all instances and uses of this technology. Also, due to inadequate technological protection, abuse of such devices by unauthorized persons is possible and even likely.
ConclusionsThe number of IoT and smart devices is rapidly increasing. The number of IoT and smart home device security incidents is on the rise. The regulatory framework to ensure data controller and processor compliance needs to be improved in order to create a safer environment for new innovative IoT services and products without jeopardizing the rights and freedoms of data subjects. Also, it is important to increase awareness of homeowners about potential security threats when using IoT and smart devices and services.

IoT and Smart Home Data Breach Risks from the Perspective of Data Protection and Information Security Law

Faculty of Transport and Traffic Sciences

Business Systems Research Journal

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

BackgroundIoT and smart devices have become extremely popular in the last few years. With their capabilities to collect data, it is reasonable to have concerns...

IoT and Smart Home Data Breach Risks from the Perspective of Data Protection and Information Security Law

Article Category: Research paper

Publicado en línea: 03 dic 2020

Páginas: 167 - 185

Recibido: 17 dic 2019

Aceptado: 16 jul 2020

DOI: https://doi.org/10.2478/bsrj-2020-0033

Palabras clave
IoT, smart homes, security, data protection, personal data protection

© 2020 Goran Vojković et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

IoT and Smart Home Data Breach Risks from the Perspective of Data Protection and Information Security Law

Article Category: Research paper

Publicado en línea: 03 dic 2020

Páginas: 167 - 185

Recibido: 17 dic 2019

Aceptado: 16 jul 2020

DOI: https://doi.org/10.2478/bsrj-2020-0033

Palabras claveIoT, smart homes, security, data protection, personal data protection

© 2020 Goran Vojković et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Palabras clave
IoT, smart homes, security, data protection, personal data protection