[iot-discussion] European Commission Report: Workshop on Security & Privacy in IoT

On 13/04/17 12:10, Bastiaan Goslings wrote:
> On 13 January the European Commission organised and hosted a workshop in Brussels, the main purpose of which was ‘to discuss minimum baseline security and privacy requirements along the entire networked architecture and value chain similar in various sectors.’
>
> It took them a while for them to publish a report, but it’s an interesting read for this group nonetheless, I imagine.
>
> ‘Participants were asked to come with, reflect and comment on concrete minimum IoT privacy and security principles to create a trusted IoT environment’
>
> The results of the workshop can be found at https://ec.europa.eu/digital-single-market/en/news/internet-things-privacy-security-workshops-report
>
> (Was anyone on the list there btw?)
Yes, I was there. The report you linked is a very good summary. 
Impression in the room was that the main goal (and challenge) is to 
create trust in the IoT market, which is lacking at the moment. However, 
trust takes time, while it takes only one incident to bring the IoT 
market back to square one.

There was also a lot of talk about data ownership, not just control. 
Concerns were voiced that consumers might lose ownership of data they 
are generating. And also concerns that manifacturers don't provide 
consumers with enough choice, for example taking out the location 
tracking device in some car models is a hassle and for someone buying 
second hand - even more difficult.

>
> As the EU is part of the RIPE NCC service region, I think it is important to follow closely what the EC is up to and it probably makes sense to engage with them on this topic if we’re not already doing so.
> _______________________________________________
> iot-discussion mailing list
> iot-discussion at ripe.net
> https://lists.ripe.net/mailman/listinfo/iot-discussion
>

Gergana Petrova
External Relations
RIPE NCC

Stationsplein 11, 1012 AB Amsterdam, The Netherlands
T: +31 20 535 4444
www.ripe.net