The UK and Canadian data protection regulators have written to webcam manufacturers to highlight concerns about the safety of internet-connected devices and to enlist their assistance in reducing the risks posed by their products. In particular, the regulators call for manufacturers to roll out privacy-friendly default settings, implement “privacy by design” – whereby data protection and privacy considerations are built into the design and manufacturing process – and provide increased guidance to consumers about ensuring the security of devices.
This invitation for action is perhaps unsurprising as data protection and consumer-focused regulators have been saying for some time now that product manufacturers have a crucial role to play in maintaining consumer privacy rights and ensuring compliance with data privacy laws. The letter should therefore be read with interest by the manufacturers of all connected technologies (not just webcams) as it is another clear indication that businesses that do not consider privacy and security issues as part of the product design phase and on an on-going basis run the risk of regulatory scrutiny.
Why have manufacturers been contacted?
The recent letter to webcam manufacturers focuses on the privacy risks posed by the Insecam website which, until recently, was streaming live video footage from over 73,000 camera feeds in residential and commercial properties worldwide. The website was able to access unsecured footage because camera owners failed to change the manufacturer’s default password settings. In the words of the regulators, this caused a “major breach of privacy and data protection rights and was extremely concerning for us and many other global Data Protection Authorities (“DPAs”) around the world”. The regulators’ investigations into the Insecam website established that camera users were not aware of the risks posed by not changing the default settings of their devices which is why the regulators now seek the assistance of manufacturers to help protect the privacy rights of their customers.