Academy & Industry Research Collaboration Center (AIRCC)

Volume 11, Number 23, December 2021

Internet of Things (IoT): Data Security and Privacy Concerns under
the General Data Protection Regulation (GDPR)


Olumide Babalola, University of Reading, United Kingdom


Internet of Things (IoT) refers to the seamless communication and interconnectivity of multiple devices within a certain network enabled by sensors and other technologies facilitating unusual processing of personal data for the performance of a certain goal. This article examines the various definitions of the IoT from technical and socio-technical perspectives and goes ahead to describe some practical examples of IoT by demonstrating their functionalities vis a vis the anticipated privacy and information security implications. Predominantly, the article discusses the information security and privacy risks posed by the operationality of IoT as envisaged under the EU GDPR and makes a few recommendations on how to address the risks.


Data Protection, GDPR, Information Security, Internet of Things, Privacy.