{"id":19811,"date":"2025-06-27T19:06:13","date_gmt":"2025-06-27T19:06:13","guid":{"rendered":"https:\/\/www.europesays.com\/us\/19811\/"},"modified":"2025-06-27T19:06:13","modified_gmt":"2025-06-27T19:06:13","slug":"how-internet-of-things-devices-affect-your-privacy-even-when-theyre-not-yours-2","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/us\/19811\/","title":{"rendered":"How Internet of Things Devices Affect Your Privacy \u2013 Even When They\u2019re Not\u00a0Yours"},"content":{"rendered":"

By David Sella-Villa<\/a>, <\/strong>University of South Carolina<\/a>, The Conversation <\/strong><\/p>\n

Some unusual witnesses helped convict Alex Murdaugh of the murders of his wife, Maggie, and son, Paul.<\/p>\n

The first was Bubba, Maggie\u2019s yellow Labrador retriever. Prosecutors used a recording of Bubba<\/a> to place Alex at the site of the murders. Given Alex\u2019s presence at the crime scene, other witnesses then revealed his movements, tracked his speed and explained what he had in his hands. Those other witnesses were a 2021 Chevy Suburban and Maggie, Paul and Alex\u2019s cellphones<\/a>, which all provided data. They\u2019re all part of the Internet of Things, also known as IoT.<\/p>\n

The privacy implications of devices connected to the internet are not often the most important consideration in solving a murder case. But outside of criminal prosecution, they affect people\u2019s privacy in ways that should give everyone pause.<\/p>\n

The Internet of Things<\/p>\n

The Internet of Things includes any object or device that automatically sends and receives data<\/a> via the internet. When you use your phone to message someone or social media to post something, the sharing is deliberate. But the automatic nature of connected devices effectively cuts humans out of the loop<\/a>. The data from these devices can reveal a lot about the people who interact with them \u2013 and about other people around the devices.<\/p>\n

As an assistant professor of law<\/a> at the University of South Carolina, I have watched as new kinds of connected devices have entered the market. New devices mean new ways to collect data about people.<\/p>\n

Connected devices collect information from different contexts<\/a>. Take your refrigerator. As a non-IoT device, your fridge generated no data about your kitchen, your food or how often you peeked inside. Your relationship with the fridge was effectively private. Only you knew about that midnight snack or whether you ogled a co-worker\u2019s lunch.<\/p>\n

Now, smart refrigerators<\/a> can respond to voice commands, show images<\/a> of the items in your fridge, track who opens it, suggest recipes, generate grocery lists and even contact your car<\/a> to let you know the milk has expired. All these functions require continuous streams of data.<\/p>\n

Device data and your privacy<\/p>\n

Connected devices generate lots of data in contexts that have typically produced little data to make those situations \u201clegible\u201d<\/a> to whoever can access the data.<\/p>\n

In the past, if you wanted to monitor your heart rate, blood oxygenation, sleep patterns and stress levels, you might have undergone a battery of tests at a hospital. Specialized equipment in a controlled setting would have measured your body and make these parts of you visible to highly trained, licensed professionals. But now, devices such as the Oura Ring<\/a> track and analyze all that information continuously, in non-health care contexts.<\/p>\n

Even if you don\u2019t mind sharing data with an Internet of Things company, there are privacy risks to using a device like this. In the health care context, a series of rules enforced by several groups make sure that connected equipment<\/a> and the data the equipment generates<\/a> have adequate cybersecurity protections. Away from that context, connected devices that perform similar functions don\u2019t have to meet the same cybersecurity standards.<\/p>\n

The U.S. Cyber Trust Mark<\/a> program, administered by the Federal Communications Commission, is developing cybersecurity standards for Internet of Things devices. But the program is voluntary. In some states, such as Washington, state laws set standards for protecting health data from connected devices. But these laws don\u2019t cover all data from all devices in all contexts. This leaves the devices, and the data they generate, particularly vulnerable to unwanted access by hackers.<\/p>\n

Your inability to control who sees the data that connected devices gather is another privacy risk. It can give advertisers insights about potential customers. Absent a mandated opt-out, each device provider can decide what it does with customer data. Amazon, for example, recently removed the \u201cDo Not Send Voice Recordings\u201d option from the privacy settings of its popular smart speaker, Alexa.<\/p>\n

Some connected-device providers participate in data markets<\/a>, selling your data<\/a> to the highest bidder. Sometimes those purchasers include government agencies. So, instead of needing a warrant<\/a> to track your whereabouts or learn about activity in your home, they can purchase or access<\/a> Internet of Things records.<\/p>\n

A connected device can also compromise the data privacy of someone who just happens to be nearby.<\/p>\n

Connected cars<\/p>\n

Cars have joined the ranks of the Internet of Things. The 2021 Chevy Suburban that helped convict Alex Murdaugh simply tracked information about the vehicle. This included the vehicle\u2019s speed, the turning radius of the steering wheel and time stamps.<\/p>\n

Most modern vehicles also incorporate data from external sources. GPS data and infotainment systems that connect to cellphones also track the vehicle\u2019s movements. All of this data can also be used to track the whereabouts and behavior<\/a> of drivers and other people in the vehicles.<\/p>\n

And as vehicles become increasingly automated, they need to make driving decisions in increasingly complex situations. To make safe driving decisions, they need data about the world around them. They need to know the size, speed and behavior of all the nearby vehicles on the roadway, moment to moment. They need to instantly identify the best way to avoid a pedestrian, cyclist or other object entering the roadway.<\/p>\n

If you and I are driving in separate cars on the same roadway, it means my car is collecting information about you. And if my vehicle is connected, then data about you is being shared<\/a> with other cars and car companies. In other words, if a Tesla had been present at the scene of the Murdaugh murders, its outward facing cameras<\/a> could have captured footage<\/a>. Bubba\u2019s testimony might not have been necessary.<\/p>\n

Spillover data collection<\/p>\n

Internet of Things devices generate data from similar situations in a highly structured way. Therefore, what data collectors learn about me from my connected device may also give them insights about someone else in a similar situation.<\/p>\n

Take smart meters that share information with the water utility every 15 minutes. Imagine a subdivision with a narrow range of house and yard sizes. Water usage should be relatively comparable for each household. Data from even just a couple of houses can give a good sense of what water use should be for everyone in the neighborhood. Without actually collecting data from each house, data from connected devices reveals potentially private information about similarly situated people.<\/p>\n

Data from IoT devices can also fuel insights into people who never use or make contact with these devices. Aggregated data from Oura rings, for instance, could contribute to decisions a health insurer makes about you.<\/p>\n

\"Chrome<\/a>Wearable devices like the Oura Ring collect information such as heart rate, temperature, oxygen saturation, and movement and breathing patterns. T3\/Future via Getty Images<\/a><\/p>\n

Connected devices are also changing. In addition to collecting data about the person using the device, a growing number of sensors collect information about the environment around that person.<\/p>\n

Some of my research<\/a> has examined what privacy means for people observed by vehicle sensor systems such as radar, lidar and sonar. These technologies capture potentially very revealing information about people and their property. Even the most comprehensive privacy laws in the United States offer people little recourse for the impact to their privacy.<\/p>\n

Civilian drones are capable of gathering data about other people<\/a>. But people observed by drones would have a tough time learning that data about them exists and an even harder time controlling how that information might be used.<\/p>\n

Meanwhile, artificial intelligence systems are expanding the ways Internet of Things data can affect the privacy of other people by automating the process of training IoT systems. AI chipmaker Nvidia has created a digital environment, or model, where people can upload their connected device data. This environment can help train IoT devices to \u201cpredict the outcomes of the device\u2019s interactions<\/a> with other people,\u201d according to Nvidia.<\/p>\n

Models like this make it easy for AI devices that you don\u2019t own to collect data or reach conclusions about you. In other words, IoT data processed by AI can make inferences about you<\/a>, rendering you legible to the AI system even before you interact with an IoT device.<\/p>\n

Looking forward<\/p>\n

Internet of Things devices and the data they generate are here to stay. As the world becomes increasingly automated, I believe it\u2019s important to be more aware of the way connected devices may be affecting people\u2019s privacy.<\/p>\n

The story of how vehicle data combined with cell data in the Murdaugh trial is a case in point. At the start of the trial, prosecutors came ready to show \u201cphone call logs and texts, steps recorded, apps asking for information, GPS locations, changes when the phone went from vertical portrait mode to horizontal landscape mode and back, and \u2014 key to the prosecution\u2019s case \u2014 when the camera was activated.\u201d<\/p>\n

But that was probably not enough to merit a conviction. During the trial, GM called and said something like \u201coh wait, we found something<\/a>,\u201d according to the prosecution. That vehicle data, combined with the cellphone data, told a story that Alex Murdaugh could not deny.<\/p>\n

There are at least two lessons from this story. First, not even GM fully realized all the data it had collected in its vehicles. It\u2019s important to be aware of just how much information IoT devices are collecting. Second, combining data from different IoT devices revealed incontestable details of Alex Murdaugh\u2019s activities. Away from criminal court, combining data from multiple IoT devices can have a profound effect on people\u2019s privacy.<\/p>\n

If people\u2019s data privacy matters, how do we address this reality? One way of potentially protecting people\u2019s privacy is to make sure people and communities observed by connected devices have a direct say in what data the devices collect and how the data is used.<\/p>\n

This article is part of a series on data privacy<\/a> that explores who collects your data, what and how they collect, who sells and buys your data, what they all do with it, and what you can do about it.<\/p>\n

David Sella-Villa<\/a>, Assistant Professor of Law, University of South Carolina<\/a><\/p>\n

This article is republished from The Conversation<\/a> under a Creative Commons license. Read the original article<\/a>.<\/p>\n

\n\tRelated<\/p>\n","protected":false},"excerpt":{"rendered":"By David Sella-Villa, University of South Carolina, The Conversation Some unusual witnesses helped convict Alex Murdaugh of the…\n","protected":false},"author":3,"featured_media":19812,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[18546,18547,691,18548,18549,18550,18551,718,712,50,18552,158,67,132,68,18553],"class_list":{"0":"post-19811","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-internet","8":"tag-african-american","9":"tag-african-americans","10":"tag-ai","11":"tag-artificial-inteligence","12":"tag-black-americans","13":"tag-black-community","14":"tag-black-people","15":"tag-community","16":"tag-internet","17":"tag-news","18":"tag-san-diego-voice-and-viewpoint","19":"tag-technology","20":"tag-united-states","21":"tag-unitedstates","22":"tag-us","23":"tag-voice-and-viewpoint"},"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@us\/114756896903773627","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/posts\/19811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/comments?post=19811"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/posts\/19811\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/media\/19812"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/media?parent=19811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/categories?post=19811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/tags?post=19811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}