Privacy by Design for the Internet of Things

Privacy by design is a proactive approach that promotes privacy and data protection compliance throughout project lifecycles when storing or accessing personal data. Privacy by design is essential for the Internet of Things (IoT) as privacy concerns and accountability are being raised in an increasingly connected world. What becomes of data generated, collected or processed by the IoT is clearly an important question for all involved in the development, manufacturing, applications and use of related technologies. But this IoT concept does not work well with the 'big data' trend of aggregating pools of data for new applications. Developers need to address privacy and security issues and legislative requirements at the design stage, and not as an afterthought.

In this edited book, the authors draw on a wealth of interdisciplinary research to delineate the challenges of building accountability into the Internet of Things and solutions for delivering on this critical societal challenge. This advanced book brings together legal-tech scholars, computer scientists, human computer interaction researchers and designers and socials scientists to address these challenges and elaborate solutions. It articulates the accountability principle in law and how it impacts IoT development, presents empirical studies of accountability in action and its implications for IoT development, brings technological responses to the requirements of GDPR and ways of building accountability into the IoT, and covers compliant IoT application development, privacy-preserving data analytics, human-centred IoT security, human-data interaction, and the methodological challenge of understanding and responding to the adoption of future technologies in everyday life.

Andrew Crabtree is a professor in the School of Computer Science at the University of Nottingham, UK. A sociologist by background, he started working with computer scientists and software engineers when he did his PhD with John Hughes at Lancaster University, UK. He has championed the use of ethnography in systems design and has been working on shaping computing around the social world for the last 25 years. He has written three textbooks on ethnography for design. In 2014, he became the first ethnographer to be awarded a senior EPSRC Fellowship to respond to the privacy and accountability challenge created by the IoT and the technological transformation of the home into a key site of personal data production.

Hamed Haddadi is a reader in human-centred systems at the Dyson School of Design Engineering at The Faculty of Engineering, Imperial College London. He leads the Systems and Algorithms Laboratory, is a Security Science Fellow of the Institute for Security Science and Technology, and an Academic Fellow of the Data Science Institute. He is also a Visiting Professor at Brave Software where he works on developing privacy-preserving analytics protocols. He is interested in User-Centred Systems, IoT, Applied Machine Learning, and Data Security & Privacy. He enjoys designing and building systems that enable better use of our digital footprint, while respecting users' privacy. He has spent time working and collaborating with Brave Software, Intel Research, Microsoft Research, AT&T Research, Telefonica, NEC, and Sony Europe. When not in the lab, he prefers to be on a ski slope or in a kayak.

Richard Mortier is Professor of Computing & Human-Data Interaction in the Department of Computer Science & Technology (a.k.a. the Computer Laboratory), Cambridge University, UK, and Fellow and President of Christ's College, Cambridge. Past research has included distributed system performance monitoring and debugging, incentives in Internet routing protocols, and real-time media platform design and implementation. Current work includes platforms for privacy preserving personal data processing, IoT security, smart cities, and machine learning for knowledge management platforms. Alongside his academic career, roles have included platform architect, founder, and CTO while consulting and working for startups and corporates in both the US and the UK.