The Article 29 Working Party (WP29) has published an opinion on the ‘Internet of Things’ (IoT). In the opinion, the WP29 gives a reminder that the Data Protection Directive applies in full to IoT. The WP29 highlights the specific privacy and security concerns associated with IoT (such as the need to obtain properly informed consent to the processing of personal data) and sets out the practical measures that must be taken by data controllers in the IoT environment to ensure compliance with data protection laws.

WP29 – Press release – September 2014  and

WP29 opinion – September 2014