The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.



Increasingly, we are seeing Internet of Things (IoT) devices aimed at consumers. Network capabilities are being embedded in a host of household items, including televisions, cameras, speakers, kitchen appliances, toys and doorbells. These devices often passively collect data, including user behaviour, interactions with a device or through sensors producing information on the world around them.

However, there is often little visibility over the nature of the data being captured by these devices. Organisations aren’t clear on where that data goes or how it is used. This has privacy and data protection implications, particularly as IoT devices become increasingly part of everyday life.

The Compliant & Accountable Systems Group, at Department of Computer Science and Technology, University of Cambridge, in collaboration with the Dyson School of Design Engineering, Imperial College London are running a grants programme-funded project to analyse the data flows of these IoT devices. Their project will look at IoT devices and their compliance with data protection law, particularly around rights of access and data portability. The project outputs include communicating their findings to the public and having a forum where customers can raise further issues.

If you'd like more information, please contact the ICO's grants programme.