The increasing prevalence of smart devices has raised significant concerns over data privacy. People worry about how their personal data is used by these devices. To address these concerns, Impact, on behalf of the Information Commissioner’s Office (ICO), recently conducted a Citizen Jury on Consumer Internet of Things (IoT) to understand public sentiment and develop solutions.
In 2022, as part of its Tech Horizons Report, the ICO committed to providing guidance on the IoT and regulating the processing of personal information through these technologies. This guidance aims to encourage responsible innovation in IoT and safeguard the public. The ICO wanted to understand how the public perceives IoT products, what they know about data processing, their conditions and ‘red lines’ for incorporating IoT into their lives, their expectations from the ICO and product manufacturers, and any related concerns not currently in the ICO’s plans.
The Citizen Jury Process
The Citizen Jury was an intensive process involving reconvened groups to ensure consistency and depth of discussion. Impact organised the workshops into several sessions, including break-out discussions and presentations by industry experts. This approach allowed participants to receive detailed information and ask questions, fostering an environment for informed deliberation.
Participants shared their experiences with IoT devices, which include smart thermostats, fitness trackers, doorbell cameras, and smart speakers. These devices often collect large amounts of personal data, sometimes without explicit consent. For instance, doorbell cameras can capture significant personal information from passersby without their awareness or permission.
Key Findings and Recommendations
The ICO will use these insights to develop clearer guidelines for data collection and usage, ensure consent mechanisms are user-friendly and transparent, establish standards for user control features, make privacy policies more accessible and understandable, and develop standards and certifications for secure IoT products.
Privacy and Security Concerns: Participants were worried about the extensive personal information collected by IoT devices. They called for manufacturers to be transparent about what data is collected, how it is used, and how it is protected.
Consent Mechanisms: Simplified and ongoing consent processes were a major request. Participants suggested that consent should not be a one-time event but revisited regularly, such as during updates or new feature introductions.
User Control and Access: There was a strong need for easy-to-use controls that allow users to access, move, and delete their personal information. A ‘guest mode’ was also suggested to protect the privacy of non-registered users, like visitors.
Transparency and Education: Participants called for clear and straightforward privacy policies. They recommended using simple language and visual aids to keep users informed about their privacy options.
Accountability and Standards: Participants wanted regulatory bodies to create standards and certifications for secure IoT products. This would help build consumer trust and ensure manufacturers follow best practices in data protection.
The Impact of Workshops
The workshops were highly effective in deliberating and educating participants, leading to informed views. By using break-out sessions and engaging industry experts, participants were able to explore the complexities of IoT and data privacy in detail. This comprehensive approach ensured that the feedback collected was thorough and reflective of diverse public opinions.
Impact played a crucial role in gathering and analysing these insights. The recommendations from the Citizen Jury provide a clear guide for manufacturers and regulatory bodies to improve data protection in IoT devices.
The Citizen Jury on Consumer IoT highlights the need for transparency, user control, and ongoing engagement to address data privacy concerns. Impact and ICO’s work will help shape future guidelines to ensure that IoT products are safe and trustworthy.
For more detailed findings and recommendations from the Citizen Jury, you can refer to the full report by Impact on the ICO website. For more information on how Impact can help you with citizens’ juries, deliberative events, and other research, please get in touch!