No abstract

Smart buildings are socio-technical systems that bring together building systems, IoT technology and occupants. A multitude of embedded sensors continually collect and share building data on a large scale which is used to understand and streamline daily operations. Much of this data is highly influenced by the presence of building occupants and could be used to monitor and track their location and activities. The combination of open accessibility to smart building data and the rapid development and enforcement of data protection legislation such as the GDPR and CCPA make the privacy of smart building occupants a concern. Until now, little if any research exists on occupant privacy in work-based or commercial smart buildings. This paper addresses this gap by conducting two user studies ( N = 81 and N = 40) on privacy concerns and preferences about smart buildings. The first study explores the perception of the occupants of a state-of-the-art commercial smart building, and the latter reflects on the concerns and preferences of a more general user group who do not use this building. Our results show that the majority of the participants are not familiar with the types of data being collected, that it is subtly related to them (only 19.75% of smart building residents (occupants) and 7.5% non-residents), nor the privacy risks associated with it. After being informed more about smart buildings and the data they collect, over half of our participants said that they would be concerned with how occupancy data is used. These findings show that despite the more public environment, there are similar levels of privacy concerns for some sensors to those living in smart homes. The participants called for more transparency in the data collection process and beyond, which means that better policies and regulations should be in place for smart building data.

Novel technologies are increasingly being applied to farm and companion animals, and are proving popular with those who keep animals. Although this rapidly growing industry is introducing cybersecurity risks to both animals and their owners, it remains an under-researched field. In this study, we have identified multiple security and privacy vulnerabilities by evaluating 40 popular Android apps for farm and companion animals. We demonstrated that several of these applications are putting their users at risk by exposing their login details. The apps also perform poorly in terms of protecting the users' privacy with over half of the apps communicating with a tracker before the user can consent, violating the General Data Protection Regulation (GDPR). Accordingly, only 4 of the apps explicitly informed the user of their privacy policy and obtain consent. Our findings are important since they highlight the poor privacy practices present in animal-based applications, as well as the easily preventable security vulnerabilities that were reported to the companies responsible.

No abstract