Nearly six in ten (59%) Internet of Things (IoT) fail to adequately explain to customers how their personal information is collected, used and disclosed, according to an international study by 25 data protection regulators around the world. The report was coordinated by the Global Privacy Enforcement Network and looked at devices such as smart electricity meters, internet-connected thermostats and watches that monitor health, considering how well companies communicate privacy matters to their customers.
Other findings included the fact that 68 percent of devices failed to properly explain how information was stored and a further 72 percent failed to tell customers they could delete their information off the device. In addition, some 38 percent of the more than 300 devices studied didn’t include easily identifiable contact details if customers had privacy concerns. Concerns were also raised around medical devices that sent reports back to GPs via unencrypted email.
The action is being led by the Information Commissioner’s Office (ICO) in the UK, which said authorities will now work with the industry to improve data protection in IoT devices. The regulator it would even consider action against any devices or services thought to have been breaking data protection laws.