‘IoT' Devices Under The Regulatory Microscope

Earlier this year, the Global Privacy Enforcement Network ("GPEN") published the results of its global privacy review of 'Internet of Things' ("IoT") devices. This annual review, dubbed the 'Privacy Sweep', found that many companies failed to explain to users how their personal data is collected, stored and safeguarded via devices that boast internet connectivity. GPEN found that companies demonstrating good privacy communication practices were in the minority.

With IoT devices becoming increasingly prevalent in everyday life, we examine the results of this Privacy Sweep and what they mean for IoT stakeholders.

What is GPEN?

GPEN connects data protection authorities ("DPAs") from around the world and aims to promote cross-border cooperation and the strengthening of privacy practices. GPEN is comprised of over 60 DPAs based in 39 jurisdictions and was established in 2010 as the result of a recommendation by the OECD.