Enhancing Transparency and Consent in the IoT

Claude Castelluccia (1) , Mathieu Cunche (2, 1) , Daniel Le Métayer (2, 1) , Victor Morel (2, 1)

1 PRIVATICS - Privacy Models, Architectures and Tools for the Information Society
2 CITI - CITI Centre of Innovation in Telecommunications and Integration of services

The development of the IoT raises specific questions in terms of privacy, especially with respect to information to users and consent. We argue that (1) all necessary information about collected data and the collecting devices should be communicated electronically to all data subjects in their range and (2) data subjects should be able to reply also electronically and express their own privacy choices. In this position paper, we take some examples of technologies and initiatives to illustrate our position (including direct and registry-based communications) and discuss them in the light of the GDPR and the WP29 recommendations.

Keywords: privacy; IoT; transparency; consent; GDPR; regulation

Domains: Computers and Society [cs.CY]

Claude Castelluccia, Mathieu Cunche, Daniel Le Métayer, Victor Morel. Enhancing Transparency and Consent in the IoT. International Workshop on Privacy Engineering IWPE 2018, Apr 2018, London, United Kingdom. ⟨hal-01709255v1⟩