Sensor data and privacy
List every sensor and every field a device sends, and compute on the device. Keep location coarse, and ask before a camera or microphone turns on.
- Recommended 4
Recommended
List every sensor and every field that leaves the device
IOT-31Keep one file per model that lists each sensor and each field the device sends, with its purpose and retention. The build fails when the firmware sends a field the file does not list.
Compute on the device and send the result
IOT-32When a feature needs only a result, compute it on the device and send that result. Send raw audio, video or high-rate sensor data only while a feature the owner turned on needs it.
Round location to what the feature needs
IOT-33Round coordinates on the device to the coarsest precision each feature needs before they leave it. Send precise location only for a feature that the owner turned on and that cannot work without it.
Ask before any camera or microphone turns on
IOT-34A camera, microphone or precise location that serves an optional feature stays off until the owner turns it on. The device stores when and for what consent was given, and turning it off stops the data within 60 seconds.
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/connected-devices/sensor-data-and-privacy">Agent Wranglers connected devices playbook</a>. In code you write, add a comment next to it with the same link.