ABSTRACT
The Internet of Things (IoT) is a loosely defined term describing internet-connected sensors that among other capabilities enable companies to monitor individuals. New privacy-related challenges can arise when sensors communicate with each other. These challenges call for changes to corporate privacy policies to incorporate potential IoT issues and guidance. This research investigates existing privacy policies and IoT-related research to provide IoT privacy policy recommendations. Privacy policy questions include: Who or what is notified of monitoring? When and where should there be expectations of privacy? Why and how is user data collected and how should monitoring problems be communicated? The analysis concludes with IoT-related privacy policy recommendations.
Acknowledgments
The authors would like to acknowledge Boise State University MBA graduate assistants Hannah Coad, Liya Gehler, Amalka Jayasundera, and Bradley Tinker for their assistance with data collection.
Additional information
Notes on contributors
Gundars Kaupins
Gundars (Gundy) Kaupins (PhD, University of Iowa) is professor of management in the College of Business and Economics at Boise State University. His work includes over 400 articles and book reviews on topics such as ethics, location monitoring, experiential training, and Baltic studies in journals such as Academy of Management Perspectives and International Journal of Technology and Human Interaction. Some books include Business Aha! Tips on Ethics for Managers and Business Aha! Tips on Creativity.
Janet Stephens
Janet Stephens (PhD, University of Idaho) is a lecturer in the College of Business and Economics at Boise State University with a corporate background in human resources, organizational development, sales, and marketing. Her current research interests include using technology to expand access to education and strengthening inclusiveness in classroom practices.