Internet of Things – start-ups may need to ‘smart up’ when it comes to privacy compliance
By Jack Evans• 27 September 2016 • 2 min read
The Office of the Australian Information Commissioner is encouraging businesses to adopt a ‘privacy-by-design’ approach
With the emergence of the ‘internet connected world’, increasing attention is now being paid to the potential privacy concerns associated with the Internet of Things (IoT).
On Friday, 23 September 2016, the Office of the Australian Information Commissioner released some of the results of its investigation into the IoT, which was undertaken in collaboration with 25 privacy enforcement authorities from around the world.
The OAIC is now encouraging all businesses, including start-ups, to adopt a ‘privacy-by-design’ approach. This goes to the need to consider potential privacy issues from the outset of the ideas/design process. Failing to do so may result in costly and/or inconvenient privacy compliance related issues later on in the development lifecycle.
The OAIC has also specifically drawn the attention of start-up business owners to the fact that ‘they may be subject to the Privacy Act if they trade in personal information or deal with health information, and will definitely be covered once they reach an annual turnover of more than $3 million, and will then be required to build in privacy procedures’.
In developing an IoT privacy framework, businesses should be aware of, and carefully consider, the unique characteristics of their IoT product offering. That is, there is no ‘one-size fits all’ approach, and whilst issues pertaining to privacy are by no means insurmountable, it pays to give such issues the attention they deserve from the outset.
The OAIC has also indicated that they will be developing a number of resources for start-up businesses to assist them to implement best privacy practice.
Given the results of the OAIC’s investigation, we also anticipate that further regulatory attention is likely to be paid to suppliers of IoT products and solutions in the near future.
The ACMA announces its compliance priorities for 2021–2022
We outline the ACMA's key compliance priorities for the coming 12 months
Economic Entitlement Rules – practical insights after 2 years
The Economic Entitlement Rules (EER) in Part 4B of Chapter 2 of the Duties Act 2000 (Vic)
Contract Law in 2021 – Supabarn Supermarkets Pty Ltd v Cotrell Pty Ltd 
Uncommercial contractual obligations must be very clearly worded to be enforceable...
Contract Law in 2021 – Hewlett Packard Australia Pty Ltd v Subasic 
Discretionary rights should be clearly worded and exercised in good faith...