This chapter outlines the IoT Databox model as an in principle means of making the Internet of Things (IoT) accountable to individuals. Accountability is key to building consumer trust and is mandated by the European Union's General Data Protection Regulation (GDPR). We focus here on the external data subject accountability requirement specified by GDPR and how meeting this turns on surfacing the invisible actions and interactions of connected devices and the social arrangements in which they are embedded. The IoT Databox model articulates how this requirement might be met and individuals be provided with the mechanisms needed to build widespread consumer trust into the IoT.

Chapter Contents:

• 6.1 Introduction
• 6.2 The external accountability requirement
• 6.3 Implementing the external accountability requirement
• 6.4 Accountability at the edge: The IoT Databox model
• 6.4.1 Origin and evolution of the model
• 6.4.2 Architecture of the model
• 6.4.3 App development
• 6.4.4 Managing risk
• 6.4.5 Enabling consent and granular choice
• 6.5 Responding to the privacy challenge
• 6.6 Fit with the state-of-the art
• 6.7 Conclusion
• Acknowledgements
• References

Inspec keywords: legislation; Internet of Things; data protection; data privacy; security of data

Other keywords: connected devices; principle means; consumer trust; external data subject accountability requirement; GDPR; Internet of Things; European Union's General Data Protection Regulation; IoT Databox model

Subjects: Data security; Mobile, ubiquitous and pervasive computing