IoT and Smart Home Data Breach Risks from the Perspective of Data Protection and Information Security Law

Vojković Goran, Milenković Melita and Katulić Tihomir
Additional contact information
Vojković Goran: University of Zagreb, Faculty of Transport and Traffic Sciences
Milenković Melita: University of Zagreb, Faculty of Transport and Traffic Sciences
Katulić Tihomir: University of Zagreb, Faculty of Law, Croatia

Business Systems Research, 2020, vol. 11, issue 3, 167-185

Abstract: BackgroundIoT and smart devices have become extremely popular in the last few years. With their capabilities to collect data, it is reasonable to have concerns about the protection of users’ personal information and privacy in general. ObjectivesComparing existing regulations on data protection and information security rules with the new capabilities provided by IoT and smart devices. Methods/approachThis paper will analyse information on data collected by IoT and smart devices and the corresponding legal framework to explore whether the legal framework also covers these new devices and their functionalities. ResultsVarious IoT and smart devices pose a high risk to an individual's privacy. The General Data Protection Regulation, although a relatively recent law, may not adequately regulate all instances and uses of this technology. Also, due to inadequate technological protection, abuse of such devices by unauthorized persons is possible and even likely. ConclusionsThe number of IoT and smart devices is rapidly increasing. The number of IoT and smart home device security incidents is on the rise. The regulatory framework to ensure data controller and processor compliance needs to be improved in order to create a safer environment for new innovative IoT services and products without jeopardizing the rights and freedoms of data subjects. Also, it is important to increase awareness of homeowners about potential security threats when using IoT and smart devices and services.

Keywords: IoT; smart homes; security; data protection; personal data protection (search for similar items in EconPapers)
JEL-codes: K22 (search for similar items in EconPapers)
Date: 2020
References: Add references at CitEc
Citations:

Downloads: (external link)
https://doi.org/10.2478/bsrj-2020-0033 (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:bit:bsrysr:v:11:y:2020:i:3:p:167-185:n:6

DOI: 10.2478/bsrj-2020-0033

Access Statistics for this article

Business Systems Research is currently edited by Mirjana Pejić Bach

More articles in Business Systems Research from Sciendo
Bibliographic data for series maintained by Peter Golla ().