Smart City Gnosys

Smart city article details

Title Iot And Data Protection
ID_Doc 33601
Authors Christofi A.; Verdoodt V.; Bertels N.; Ziegler S.; Quesada Rodriguez A.; Radócz R.
Year 2024
Published Springer Handbooks, Part F3575
DOI http://dx.doi.org/10.1007/978-3-031-39650-2_15
Abstract The Internet of Things entails the collection, processing and generation of various types of data. Among these, many fall under the definition of personal data, triggering the applicability of a comprehensive legal framework regulating personal data processing, devised to protect individuals against the risks it poses to their rights and freedoms. This chapter provides an overview of how European Union data protection law applies in the IoT context. It discusses the importance of the existence of the fundamental rights to privacy and to the protection of personal data and then delves into the two main instruments of secondary legislation regulating personal data processing: the General Data Protection Regulation and the Directive on Privacy and Electronic Communications. Keeping in mind the IoT context, it presents key obligations of developers, data controllers and processors and the rights granted to users with regards to their personal data. While the legal framework has the characteristics of an omnibus law that applies regardless of the sector and context of processing, the heterogeneity of IoT applications, architectures and contexts entails that different risks, protection and compliance concerns may be raised in different contexts. Thus, the chapter also discusses wearable devices, connected toys, smart cities and connected cars as examples of key IoT application domains presenting privacy and data protection challenges. © The Author(s), under exclusive license to Springer Nature Switzerland AG 2024.
Author Keywords AI act; Compliance concerns; Connected cars; Connected toys; Data act; Data controllers; Data governance act; Data processing; Data processors; Data protection certification; Data protection impact assesments; ePrivacy directive; Fundamental rights to privacy; General data protection regulation (GDPR); Internet of things (IoT); Legal framework; NIS2; Personal data; Privacy risks; Protection of personal data; Smart cities; User rights; Wearable devices


Similar Articles


Id Similarity Authors Title Published
43562 View0.871Naili Y.T.; Afrilies M.H.; Garunja E.; PurwonoProtection Of Patient Data Privacy On Iot Devices For Healthcare In The Era Of Smart Cities: A Health Law PerspectiveJurnal Hukum Novelty, 15, 1 (2024)
31226 View0.856Karim R.Individuals’ Privacy And Data Collection In The Context Of Smart Cities: Law And Policy ReviewSmart Cities to Smart Societies: Moving beyond Technology (2025)
10003 View0.852Gütekin-Várkonyi G.; Kertész A.; Váradi S.Application Of The General Data Protection Regulation For Social Robots In Smart CitiesHandbook of Smart Cities (2021)
10190 View0.851Faisal K.Applying The Purpose Limitation Principle In Smart-City Data-Processing Practices: A European Data Protection Law PerspectiveCommunication Law and Policy, 28, 1 (2023)