Practical Internet of Things Security - Second Edition

Understanding the privacy landscape

There are a number of privacy regulations that consumers and businesses have an interest in knowing their devices comply with. A key example is the Children's Online Privacy Protection Act (COPPA). Although COPPA was not originally intended for the IoT, in June 2017 the Federal Trade Commission (FTC) issued guidance that IoT companies selling devices used by children would be subject to COPPA. Other potentially applicable regulations include:

Regulation/guidance	Description
GDPR	European General Data Protection Regulation. GDPR outlines a set of data subject rights. These include breach notification, right to access, right to be forgotten, data portability, and privacy by design.
European ...