IoT and Smart Home Data Breach Risks from the Perspective of Croatian Data Protection and Information Security Law

Abstract

Standard-Nutzungsbedingungen:Die Dokumente auf EconStor dürfen zu eigenen wissenschaftlichen Zwecken und zum Privatgebrauch gespeichert und kopiert werden.Sie dürfen die Dokumente nicht für öffentliche oder kommerzielle Zwecke vervielfältigen, öffentlich ausstellen, öffentlich zugänglich machen, vertreiben oder anderweitig nutzen.Sofern die Verfasser die Dokumente unter Open-Content-Lizenzen (insbesondere CC-Lizenzen) zur Verfügung gestellt haben sollten, gelten abweichend von diesen Nutzungsbedingungen die in der dort genannten Lizenz gewährten Nutzungsrechte. AbstractIoT technology required to build smart homes, regarding automation and control processes, represents a significant information security and personal data protection challenge. Smart homes demand a new level of security requirements as they contain relevant, vulnerable and private information. Since IoT technology offers opportunities and imposes risks, an IoT based smart home is susceptible to the IoT security vulnerabilities and attacks via Internet. Personal data covering household habits could easily become available to the third parties without data subject consent. The business model created by the smart home technology industry based on sharing the house owners' data with third parties is now facing significant obstacles with regard to data protection regulation and practice being developed in European Union. This paper indicates potential threats and points out current regulatory provisions regarding preserving data privacy and information security in the IoT smart home environment.

Blockchain-Based Secured Access Control in an IoT System

“…This type of attack poses a new threat to smart home device users. The risks in smart homes fall into five classes: technical vulnerabilities, user data risk, a lack of encryption, privacy issues and increased complexity of the system [33]. On October of 2016, in one of the worst breaches, Mirai botnet attacked IoT, which affected the control of the world's Domain Name Server (DNS) infrastructure.…”

Cyber-physical security for IoT networks: a comprehensive review on traditional, blockchain and artificial intelligence based key-security

“…Data Breach The intention of the attacker is to retrieve private and confidential information which may result through theft, loss of storage drives, stolen hardware, etc. A data breach may be unintentional which can occur due to accidental corruption of storage media resulting in privacy and data leakage [66].…”

Data Protection and Smart Cities

“…When such services are in place and large amounts of data are collected, the current framework of data protection in the EU requires certain safeguards need to be undertaken to protect privacy of the users and prevent misuse of their personal data. This data may contain sensitive data or categories of data of interest to many data controllers, from the financial sector to the communication and content providers, market researches, and others (Vojković et al 2019).…”

“…Finally, the data controllers need to carefully examine their processing operations. Through the records of processing activities, they need to establish proper and applicable basis for every personal data processing activity and those controllers responsible for IoT infrastructure will need to develop easily accessible and functional ways to let users exercise their data protection rights (Vojković et al 2019).…”