Skip to main content
Image

former FTC Conference Center
601 New Jersey Avenue, NW Washington DC 20001

Directions & Nearby

Tags:

Event Description

The Federal Trade Commission held a public workshop to explore consumer privacy and security issues posed by the growing connectivity of devices. The ability of everyday devices to communicate with each other and with people is becoming more prevalent and often is referred to as “The Internet of Things.” Connected devices can communicate with consumers, transmit data back to companies, and compile data for third parties such as researchers, health care providers, or even other consumers, who can measure how their product usage compares with that of their neighbors. The workshop brought together academics, business and industry representatives, and consumer advocacy groups to explore the security and privacy issues in this changing world. The workshop served to inform the Commission about the developments in this area.

The workshop focused on privacy and security issues related to increased connectivity for consumers, both in the home (including home automation, smart home appliances and connected devices), and when consumers are on the move (including health and fitness devices, personal devices, and cars).

The workshop was held at the FTC’s satellite building conference center, located at 601 New Jersey Avenue, N.W., Washington, DC, and was free and open to the public.

The Commission accepted comments on privacy and security topics until January 10, 2014. 

 

  • Request for Comments

    Request for Comments

    To further its understanding of the issues, the Federal Trade Commission staff sought public comments on issues raised at the workshop, including but not limited to:

    • How can consumers benefit from the Internet of Things?
    • What are the unique privacy and security concerns and solutions associated with the Internet of Things?  
    • What existing security technologies and practices could businesses and consumers use to enhance privacy and security in the Internet of Things?
    • What is the role of the Fair Information Practice Principles in the Internet of Things?
    • What steps can companies take (before putting a product or service on the market) to prevent connected devices from becoming targets of, or vectors for, malware or adware?
    • How can companies provide effective notice and choice?  If there are circumstances where effective notice and choice aren’t possible, what solutions are available to protect consumers?
    • What new challenges does constant, passive data-collection pose?
    • What effect does the Internet of Things have on data de-identification or anonymization?
    • How can privacy and security risks be weighed against potential societal benefits (such as improved health-care decision-making or energy efficiency) for consumers and businesses?  
    • How can companies update device software for security purposes or patch security vulnerabilities in connected devices, particularly if they do not have an ongoing relationship with the consumer?  Do companies have adequate incentives to provide updates or patches over products’ lifecycles?        
    • How should the FTC encourage innovation in this area while protecting consumers’ privacy and the security of their data? 
    • Are new use-restrictions necessary to protect consumers’ privacy? 
    • How could shifting social norms be taken into account?
    • How can consumers learn more about the security and privacy of specific products or services?
    • How can consumers or researchers with insight into vulnerabilities best reach companies?

    The deadline for filing comments was Jan. 10, 2014

     

    Comments Submitted in Response to the Above Request: 
     
    #510: FTC Seeks Comment on Issues Raised at Internet of Things Workshop Project No. P135405

     
    Previously Submitted Comments:
     
    #484: FTC Seeks Input on Privacy and Security Implications of the Internet of Things; Commission Staff to Conduct Workshop on November 21, 2013 in Washington, DC

     

FTC Privacy Policy

Under the Freedom of Information Act (“FOIA”) or other laws, we may be required to disclose to outside organizations the information you provide when you pre-register for events that require registration. The Commission will consider all timely and responsive public comments, whether filed in paper or electronic form, and as a matter of discretion, we make every effort to remove home contact information for individuals from the public comments before posting them on the FTC website.

The FTC Act and other laws we administer permit the collection of your pre-registration contact information and the comments you file to consider and use in this proceeding as appropriate. For additional information, including routine uses permitted by the Privacy Act, see the Commission’s Privacy Act system for public records and comprehensive privacy policy.

This event will be open to the public and may be photographed, videotaped, webcast, or otherwise recorded.  By participating in this event, you are agreeing that your image — and anything you say or submit — may be posted indefinitely at ftc.gov or on one of the Commission's publicly available social media sites.

Return to top