Information Commissioner's Office
‘Be smarter than your smart tech’ – ICO issues top tips for consumers buying smart devices on Black Friday
The Information Commissioner’s Office (ICO) has shared its top tips to support consumers shopping smart tech this Black Friday.
Smart tech is expected to be a popular category again this year, with Brits primed to bag themselves a bargain in the annual sales event.
From speakers answering your every question to doorbells that let you know about (un)welcome visitors in real time, the benefits of these devices are obvious. However, the risks to your personal data are often less clear.
Research shows that over half of Brits (52%) feel like they do not know how their personal data is being collected and used 1. This is particularly concerning when it comes to smart devices, which slide seamlessly into our everyday lives and continuously collect information in the background.
John Edwards, UK Information Commissioner said:
“We know that consumers want to enjoy the benefits of smart devices but that they also value their privacy in an increasingly connected world. They shouldn’t have to choose between the two. These tips from our tech experts will help consumers to make informed purchases and have more control over how their personal data is being used.”
The ICO is currently researching smart tech to identify any privacy-unfriendly practices, which will be addressed in its upcoming guidance next year.
Rocio Concha, Which? Director of Policy and Advocacy said:
“Which? is warning consumers to be wary when shopping for connected tech products this Black Friday. Make sure you have researched the product you’re thinking of buying, steer clear of any that have concerning security flaws and check to see how you can control the data the device is able to access or collect.
“Our recent investigation found smart tech firms are collecting more data than they need and burying this important information in lengthy terms and conditions 2. It's positive that the ICO is looking at updating its guidelines on smart tech privacy and vital that this leads to better protection for consumers against accidentally giving up huge swathes of their own data without realising.”
Top tips from the ICO
Before you buy:
- Think before you click: Buying a smart device should be a considered decision and we recommend taking the time to do your research. Read some reviews and familiarise yourself with the privacy options on offer. You might discover a feature that makes a certain device more appealing, such as a physical switch to stop your smart speaker gathering voice data when you don’t want it to.
- Preparation is key. As seasoned shoppers will know, the key to a successful Black Friday is in the preparation. Before adding your chosen device to your basket, you should look at how it plans to use your data. Privacy policies can be daunting, but skimming the section on data collection should give you all the information you need. You can also review permissions in the app store to check if you’re comfortable with the data that your device will want to access.
Once it’s arrived:
- Don’t switch off during setup. Make sure to pay attention during the setup of your new device and consider requests for data sharing carefully – did you know that some of the data sharing is not necessary for your product to work? Use the privacy controls and app permissions to manage access to your personal information, such as your location.
- Keep the updates rolling. You can usually enable regular updates of your device during setup. When downloading an app, check when the developer last updated it in the app store. If it was a while ago, this could be a sign that the company hasn’t kept on top of their security.
- ‘Password123’ is not a password. Sticking with a default or easily guessable password is like leaving your front door open. To reduce the risk of your device being hacked, use three random, memorable words.
- Be picky about who gets your data. Some smart devices offer data sharing with other services as a gateway to unlocking more features. For example, some fitness trackers can ask to share your health data with other apps. You should only consent to companies you know and trust.
- Intrusive ads can be avoided. You may want to keep some interactions with your smart device to yourself. For example, you may not want to be targeted with ads after asking your smart assistant to add a pregnancy test to your cart. Many Brits (57%) are concerned that smart speakers will gather personal information that could be shared with third parties 3. Luckily, you can choose to limit your data being shared for advertising purposes in the privacy settings on your phone.
When it’s time to move on, break up properly:
- Many consumers see Black Friday as an opportunity to upgrade their tech. Before saying goodbye to your previous device, you can request for your data to be deleted via the settings, or by contacting the company. Remember that simply deleting an app will not usually erase your data.
The regulator has already tested various smart devices to better understand how they interact with their users when it comes to sharing data. In the upcoming months, the ICO will also be speaking to some of the biggest tech brands to understand the protections they are putting in place for consumers.
To make sure that the guidance focuses on the most pressing privacy concerns, the ICO will be conducting a citizen jury next year, asking a group of people for their views on smart tech and how they think their data is being used.
If you have bought a smart product and still have concerns about how your data is being used, you can complain to the ICO.
Notes to editors
Latest News from
Information Commissioner's Office
UK Information Commissioner warns against 2024 becoming the year people lose trust in AI06/12/2023 16:25:00
UK Information Commissioner, John Edwards, will today warn that 2024 could be the year people lose trust in AI – and call on tech developers to embed privacy into their products from the very start.
John Edwards speaks at TechUK Digital Ethics Summit 202306/12/2023 15:20:00
Information Commissioner John Edwards’ keynote speech at TechUK’s Digital Ethics Summit 2023, delivered on 6 December 2023.
How data protection law can prevent harm in the housing sector06/12/2023 09:10:00
Blog posted by: Helen Raftery, Head of Data Protection Complaints, 05 December 2023.
We looked into text pests and here's what we found01/12/2023 12:25:00
Blog posted by: Emily Keaney, 29 November 2023.
ICO reprimands council for disclosing domestic abuse victim’s details to ex-partner29/11/2023 16:15:00
The Information Commissioner’s Office (ICO) has issued a reprimand to Charnwood Borough Council after it disclosed the new address of a domestic abuse victim to her ex-partner.
Hospitals urged to improve data protection standards following incident at NHS Fife29/11/2023 09:10:00
The Information Commissioner’s Office (ICO) has issued a reprimand to NHS Fife, after an unauthorised person was able to enter a ward and access the personal information of 14 patients.
Statement on Court of Appeal judgment on Freedom of Information Act appeal24/11/2023 09:20:00
The Court of Appeal has ruled against the Information Commissioner’s Office (ICO) in a Freedom of Information Act 2000 appeal regarding the ability to aggregate public interest factors for and against disclosure when applying exemptions under the Act.
Statement regarding the outcome of the Independent External Review of Lancashire Police’s handling of the Nicola Bulley case21/11/2023 12:25:00
Statement regarding the outcome of the Independent External Review of Lancashire Police’s handling of the Nicola Bulley case.