Internet of Things – start-ups may need to ‘smart up’ when it comes to privacy compliance
By Jack Evans• 27 September 2016 • 2 min read
The Office of the Australian Information Commissioner is encouraging businesses to adopt a ‘privacy-by-design’ approach
With the emergence of the ‘internet connected world’, increasing attention is now being paid to the potential privacy concerns associated with the Internet of Things (IoT).
On Friday, 23 September 2016, the Office of the Australian Information Commissioner released some of the results of its investigation into the IoT, which was undertaken in collaboration with 25 privacy enforcement authorities from around the world.
The OAIC is now encouraging all businesses, including start-ups, to adopt a ‘privacy-by-design’ approach. This goes to the need to consider potential privacy issues from the outset of the ideas/design process. Failing to do so may result in costly and/or inconvenient privacy compliance related issues later on in the development lifecycle.
The OAIC has also specifically drawn the attention of start-up business owners to the fact that ‘they may be subject to the Privacy Act if they trade in personal information or deal with health information, and will definitely be covered once they reach an annual turnover of more than $3 million, and will then be required to build in privacy procedures’.
In developing an IoT privacy framework, businesses should be aware of, and carefully consider, the unique characteristics of their IoT product offering. That is, there is no ‘one-size fits all’ approach, and whilst issues pertaining to privacy are by no means insurmountable, it pays to give such issues the attention they deserve from the outset.
The OAIC has also indicated that they will be developing a number of resources for start-up businesses to assist them to implement best privacy practice.
Given the results of the OAIC’s investigation, we also anticipate that further regulatory attention is likely to be paid to suppliers of IoT products and solutions in the near future.
ACCC updates advertising and selling guide
By Laura Cantillon
The ACCC has updated its guidance to Australian businesses on what is required to ensure compliance with the ACL
Managing climate change-related risks in the financial system
By Patrick Ibbotson & Jessica Dorricott
Risks posed by climate change to the stability of the US financial system.
Franchisors, it’s time to update your disclosure documents
Key considerations when updating the franchising disclosure documents as per the Franchising Code of Conduct (Code).
GDPR decision slaps down Privacy Shield and imposes strict conditions on Standard Contractual Clauses – implications for Australian organisations
Impacts for Australian entities who are either directly subject to the GDPR or receiving personal data from the EEA.