Sheets of a talk given by Dr. Aaron Ding at the Playground Meeting of the Delft Design for Values Institute that took place at 13 December 2018.

1. 1
IoT Privacy
by-design or after-design
Dr. Aaron Ding
Assistant Professor
Engineering Systems & Services
DDfV Playground Meeting @ EWI – 13.12.2018

2. 2
About Aaron
• Research path
– Helsinki University, Helsinki, Finland
– Cambridge University, Cambridge, UK
– Columbia University, New York, USA
– BMW Lab at TU Munich, Munich, Germany

3. 3
Now
• Tenure-Track Assistant Professor
– Edge Computing and IoT

4. 4
Privacy in Internet of Things

5. 5
Versatile
IoT
Smart Home
Transportation
Wearables Industrial 4.0
Surveillance

6. 6
Growth
Growth in Billions
IoT devices connected 2015-2025
Statista Report 2016

7. 7
Scale
Percentage of Enterprises Adopting IoT
2017: 30% ⇒ 2020: 65%
IoT Spending in Transport and Logistic Industry
2015: $10 billion ⇒ 2020: $40 billion
Business Investment in IoT
2015: $215 billion ⇒ 2020: $832 billion
Number of Connected Devices Worldwide
2018: 23 billion ⇒ 2025: 75 billion
Source: Statista

8. 8
What about Privacy?
• Internet of Too Many Things
– Private and personal data

9. 9
IoT Issues for Privacy
• Value of data
– User data protection?
• Market demand and competition
– Security enforcement? e.g., device restrictions
• User awareness
– What’s privacy are we talking about?

10. 10
Contradictory View
• Case study in Netherlands
– Usage based insurance
– Privacy compensation
• € 2.77 for privacy
– per month, for selling personal data and image for third party
advertisements
– buy-off value for privacy depends on dimension of privacy
concerned, e.g., behavior & action > location
People Do Trade Privacy
“Can privacy concerns for insurance of connected cars be compensated?”
Electronic Markets, 2016, Volume 26, Issue 1, pp 73–81.

11. 11
Not Just Technical Problem!
RFID chip injected in hand
* Enter office door
* Log on PC
* Buy food/drinks

12. 12
Not Technical, then What ?

13. 13
Role of Regulation and Governance
• Business blind spot
– Incentives vs. Requirements

14. 14
Food for Thoughts
• Digestible format for users

15. 15
Privacy After-Design
• Value of privacy for users
Privacy Facts
Data Usage
Data Collect
Warnings
Privacy Dimensions
Image and Video
Voice
Location
Behavior

16. 16
ACM EdgeSys 2019
(Dresden, Germany)
Co-Chairs:
Aaron Ding (TU Delft)
Richard Mortier (Cambridge)