Preserve Privacy When Initiating Your IoT Strategy

Foundational Refreshed: 04 July 2018 | Published: 13 March 2017 ID: G00317400

Analyst(s): |

Purchase this Document

Price: $195.00 USD (PAGES: 10)

To purchase this document, you will need to register or sign in above.


IoT devices generate an unprecedented amount of data, which often includes sensitive personal data. Security and risk management leaders focusing on IoT will need to harness the information gathered for responsible use and distinguish between consumer and business risk.

Table of Contents

  • Analysis
  • Impacts and Recommendations
    • Organizations are embarking on a wide variety of IoT projects, many of which will involve the collection and analysis of (sensitive) personal data — subject to privacy requirements about which security and risk management leaders should be informed
    • Security and risk management leaders should be aware that existing and upcoming privacy laws, including the EU's GDPR, dramatically impact an organization's strategy, purpose and methods for processing personal data in IoT
      • Rather Than Focusing on Business Risk Alone, Include a Focus on Risk to Individual(s)
      • Pay Specific Attention to IoT Data Analytics
    • Many IoT devices will process data in insufficiently protected states, posing significant challenges to security and risk management leaders when ensuring data security and privacy compliance
      • Legacy Devices and Devices With No Embedded Security
      • Custom or Preselected Devices
      • Emerging Data Security and Privacy Technology
      • Pseudonymization
      • TTP
      • Secure Multiparty Computation (MPC)
      • Blockchain
  • Gartner Recommended Reading
© 2017 Gartner, Inc. and/or its Affiliates. All Rights Reserved. Reproduction and distribution of this publication in any form without prior written permission is forbidden. The information contained herein has been obtained from sources believed to be reliable. Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information. Although Gartners research may discuss legal issues related to the information technology business, Gartner does not provide legal advice or services and its research should not be construed or used as such. Gartner shall have no liability for errors, omissions or inadequacies in the information contained herein or for interpretations thereof. The opinions expressed herein are subject to change without notice.

Why Gartner

Gartner delivers the technology-related insight you need to make the right decisions, every day.

Find out more

Call +1 800 213 4848 or contact us

to become a Gartner client.