A South African perspective on data privacy in consumer Internet of Things

Abstract

The rise of the Internet of Things (IoT) raises concerns about data privacy. This qualitative study explored data privacy issues in consumer IoT using a combination of the narrative inquiry method and the Delphi technique through three rounds of interviews with experts. The study identified three levels at which personal data privacy is a concern: data collection, data transfer and data storage. Consumer data may be vulnerable at any of these stages of processing. The risks identified by the study include identity theft, financial difficulties and the unauthorised sale of personal information, location-based tracking, medical privacy and unfair discrimination due to profiling. Personally identifiable information goes beyond the consumer's known information, such as age, gender, race and other attributes. Smart devices can help consumers extend their identities. The study identified the need for legal instruments that can be used to deal with data privacy in consumer IoT in South Africa, particularly. It is concluded that IoT companies and manufacturers must be much more transparent about the data they collect and how it is processed, stored and used. It also is necessary to educate all IoT users about the dangers of using devices, which are the same as connecting to the internet.