A number of data protection authorities (DPAs) around the globe have issued press releases confirming their involvement in the 2016 global privacy “sweep”, which kicked off on April 11th. This year’s initiative involves a coordinated investigation by 29 DPAs into the practices of internet-connected (Internet of Things or IoT) devices, such as fitness and health trackers, thermostats, smart meters and TVs and connected cars. The work is being coordinated by the Global Privacy Enforcement Network under the leadership of the UK Information Commissioner’s Office.
According to a press release issued by the Office of the Privacy Commissioner of Canada, each of the DPAs will focus on accountability but will have the flexibility to choose a category of products and a preferred approach. For example, some DPAs will purchase products and conduct a first-hand, out of the box, assessment of privacy communications in practice against what companies’ communications say is being collected. Others will examine the privacy information that is available on manufacturers’ websites and may contact manufacturers, retailers and / or data controllers directly with specific privacy questions or concerns.
The DPAs identified below have announced the following areas of focus: