Handling of Personal Data by Smart Home Equipment: an Exploratory Analysis in the Context of LGPD

This paper presents an exploratory research that analyzed the Privacy and Security Policies and the Instruction Manuals of 59 home automation equipment for Smart Home in order to verify which personal data was handled and how these documents were providing information about processes performed in p...

Full description

Bibliographic Details
Main Authors: Thiago Adriano Coleti, Renato Balancieri, André Menolli, Omar Ali Mahmoud, Victor Hugo Sotti, Michel Yvano, Marcelo Morandini
Format: Article
Language:English
Published: Brazilian Computer Society 2024-03-01
Series:Journal on Interactive Systems
Subjects:
Online Access:https://sol.sbc.org.br/journals/index.php/jis/article/view/3944
_version_ 1797224637324591104
author Thiago Adriano Coleti
Renato Balancieri
André Menolli
Omar Ali Mahmoud
Victor Hugo Sotti
Michel Yvano
Marcelo Morandini
author_facet Thiago Adriano Coleti
Renato Balancieri
André Menolli
Omar Ali Mahmoud
Victor Hugo Sotti
Michel Yvano
Marcelo Morandini
author_sort Thiago Adriano Coleti
collection DOAJ
description This paper presents an exploratory research that analyzed the Privacy and Security Policies and the Instruction Manuals of 59 home automation equipment for Smart Home in order to verify which personal data was handled and how these documents were providing information about processes performed in personal data. The analysis was conducted with a quantitative approach followed by a qualitative analysis, using content analysis. The surveys identified the following types of personal data: Identification, Financial, Devices and Location. The results presented greater interest in identification data, although financial and location are also used in specific cases. We also concluded that the Privacy and Security Policies present several information that meets the LGPD’s guidelines, especially regarding the purpose of using the data and which personal data is used. However, there is a visible lack of information about the benefits provided to data subjects and about sharing data with third parties, such as recipient data and the legal basis for sharing data.
first_indexed 2024-04-24T13:56:17Z
format Article
id doaj.art-e26728363be642bb8b95cf7a660e598c
institution Directory Open Access Journal
issn 2763-7719
language English
last_indexed 2024-04-24T13:56:17Z
publishDate 2024-03-01
publisher Brazilian Computer Society
record_format Article
series Journal on Interactive Systems
spelling doaj.art-e26728363be642bb8b95cf7a660e598c2024-04-03T17:45:09ZengBrazilian Computer SocietyJournal on Interactive Systems2763-77192024-03-0115110.5753/jis.2024.3944Handling of Personal Data by Smart Home Equipment: an Exploratory Analysis in the Context of LGPDThiago Adriano Coleti0Renato Balancieri1André Menolli2Omar Ali Mahmoud3Victor Hugo Sotti4Michel Yvano5Marcelo Morandini6Universidade Estadual do Norte do Paraná Universidade Estadual do Paraná Universidade Estadual do Norte do ParanáUniversidade Estadual do Paraná Universidade Estadual do Paraná Instituto Federal do ParáUniversidade de São Paulo This paper presents an exploratory research that analyzed the Privacy and Security Policies and the Instruction Manuals of 59 home automation equipment for Smart Home in order to verify which personal data was handled and how these documents were providing information about processes performed in personal data. The analysis was conducted with a quantitative approach followed by a qualitative analysis, using content analysis. The surveys identified the following types of personal data: Identification, Financial, Devices and Location. The results presented greater interest in identification data, although financial and location are also used in specific cases. We also concluded that the Privacy and Security Policies present several information that meets the LGPD’s guidelines, especially regarding the purpose of using the data and which personal data is used. However, there is a visible lack of information about the benefits provided to data subjects and about sharing data with third parties, such as recipient data and the legal basis for sharing data. https://sol.sbc.org.br/journals/index.php/jis/article/view/3944Smart HomePersonal DataGeneral Data Protection RegulationPrivacy and Security
spellingShingle Thiago Adriano Coleti
Renato Balancieri
André Menolli
Omar Ali Mahmoud
Victor Hugo Sotti
Michel Yvano
Marcelo Morandini
Handling of Personal Data by Smart Home Equipment: an Exploratory Analysis in the Context of LGPD
Journal on Interactive Systems
Smart Home
Personal Data
General Data Protection Regulation
Privacy and Security
title Handling of Personal Data by Smart Home Equipment: an Exploratory Analysis in the Context of LGPD
title_full Handling of Personal Data by Smart Home Equipment: an Exploratory Analysis in the Context of LGPD
title_fullStr Handling of Personal Data by Smart Home Equipment: an Exploratory Analysis in the Context of LGPD
title_full_unstemmed Handling of Personal Data by Smart Home Equipment: an Exploratory Analysis in the Context of LGPD
title_short Handling of Personal Data by Smart Home Equipment: an Exploratory Analysis in the Context of LGPD
title_sort handling of personal data by smart home equipment an exploratory analysis in the context of lgpd
topic Smart Home
Personal Data
General Data Protection Regulation
Privacy and Security
url https://sol.sbc.org.br/journals/index.php/jis/article/view/3944
work_keys_str_mv AT thiagoadrianocoleti handlingofpersonaldatabysmarthomeequipmentanexploratoryanalysisinthecontextoflgpd
AT renatobalancieri handlingofpersonaldatabysmarthomeequipmentanexploratoryanalysisinthecontextoflgpd
AT andremenolli handlingofpersonaldatabysmarthomeequipmentanexploratoryanalysisinthecontextoflgpd
AT omaralimahmoud handlingofpersonaldatabysmarthomeequipmentanexploratoryanalysisinthecontextoflgpd
AT victorhugosotti handlingofpersonaldatabysmarthomeequipmentanexploratoryanalysisinthecontextoflgpd
AT michelyvano handlingofpersonaldatabysmarthomeequipmentanexploratoryanalysisinthecontextoflgpd
AT marcelomorandini handlingofpersonaldatabysmarthomeequipmentanexploratoryanalysisinthecontextoflgpd