US FTC calls on IoT vendors to protect privacy

The agency recommends a set of best practices, but critics fear the FTC will enforce them as regulations

Companies developing Internet of Things (IoT) products should adopt best practices to protect the privacy and security of consumers, the U.S. Federal Trade Commission has recommended.

IoT companies should embrace best practices related to cybersecurity defense and take steps to keep unauthorized users from accessing a consumer's device or personal information, the FTC said in a 71-page report released Tuesday. IoT companies should also monitor connected devices throughout their life cycles, patch security holes, and consider ways to minimize the data the devices collect, the FTC report recommended.

The FTC report generated controversy as soon as it was released, with critics saying it could scare consumers and businesses away from the hot IT field. The report also sets up the FTC to enforce security and privacy standards on IoT companies in much the same way as it brings complaints against companies that suffer data breaches, critics said.

The FTC has brought dozens of complaints against companies for data breaches after the agency determines they didn't follow cybersecurity best practices. "The FTC already does this stuff across the board," Berin Szoka, president of free market tech think tank TechFreedom, said by email. "The FTC has increasingly tried to convert its 'recommendations' into regulations."

Republican Representatives Fred Upton of Michigan and Michael Burgess of Texas, two senior members of the House Energy and Commerce Committee, raised similar concerns.

IoT companies must protect personal information, but "we also must be certain that throughout this process we don't smother innovation that can improve the quality of life for consumers and create jobs," they said in a joint statement. "We must exercise great caution to avoid the slippery slope of the Internet of Things evolving into the Internet of Regulation."

But the FTC report called on IoT companies to take new privacy and security measures because the technology "presents a variety of potential security risks that could be exploited to harm consumers." Those risks include the compromise of personal information and the use of IoT devices to attack other systems, said the report, drawing from a November 2013 FTC workshop on IoT.

"The only way for the Internet of Things to reach its full potential for innovation is with the trust of American consumers," FTC Chairwoman Edith Ramirez said in a statement. "We believe that by adopting the best practices we've laid out, businesses will be better able to provide consumers the protections they want and allow the benefits of the Internet of Things to be fully realized."

The FTC report also called for Congress to pass new legislation, including a national data breach notification law and broad privacy protections for consumers. The agency called on IoT companies to build security into their devices up front, instead of as an afterthought, and to train employees about the importance of security.

But the agency's call for broad-based privacy legislation is an attempt to "shoehorn old ideas" onto a new technology, said Daniel Castro, director of the Center for Data Innovation at the Information Technology and Innovation Foundation, another tech-focused think tank.

"It is disheartening that the FTC staff has failed to propose a forward-looking regulatory approach to technology that narrowly targets actual harms while leaving companies free to innovate," Castro said post on the ITIF's site. "In particular, in calling for companies to reduce their use of data, the FTC misses the point that data is the driving force behind innovation in today's information economy."

The FTC report could also slow the growth of IoT, added Steve DelBianco, executive director of e-commerce think tank NetChoice. The report "risks scaring consumers and businesses away from a technology the report calls a new area of growth," DelBianco said by email.

The Software and Information Industry Association trade group, however, applauded the report, saying it "strikes the right balance" between security and innovation. Instead of major new legislation, the FTC report "is promoting a set of best practices that guide companies to be responsible stewards of data," SIIA said in a statement.

Grant Gross covers technology and telecom policy in the U.S. government for The IDG News Service. Follow Grant on Twitter at GrantGross. Grant's email address is grant_gross@idg.com.

Join the Good Gear Guide newsletter!

Error: Please check your email address.

Tags Fred UptonInformation Technology and Innovation FoundationU.S. Federal Trade CommissionSteve DelBiancoregulationNetChoiceBerin SzokaEdith RamirezMichael BurgessinternetDaniel CastroprivacySoftware and Information Industry AssociationsecurityInternet of ThingsTechFreedomgovernment

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Grant Gross

IDG News Service
Show Comments

Essentials

Lexar® JumpDrive® S57 USB 3.0 flash drive

Learn more >

Microsoft L5V-00027 Sculpt Ergonomic Keyboard Desktop

Learn more >

Mobile

Lexar® JumpDrive® S45 USB 3.0 flash drive 

Learn more >

Exec

Audio-Technica ATH-ANC70 Noise Cancelling Headphones

Learn more >

HD Pan/Tilt Wi-Fi Camera with Night Vision NC450

Learn more >

Lexar® JumpDrive® C20c USB Type-C flash drive 

Learn more >

Lexar® Professional 1800x microSDHC™/microSDXC™ UHS-II cards 

Learn more >

Budget

Back To Business Guide

Click for more ›

Most Popular Reviews

Latest News Articles

Resources

PCW Evaluation Team

Michael Hargreaves

Windows 10 for Business / Dell XPS

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?