Privacy Guidelines for Internet of Things: A Cheat Sheet

TL;DR

This paper provides a comprehensive set of 30 privacy guidelines categorized into eight groups to assist in designing and evaluating IoT applications and platforms, emphasizing privacy by design principles.

Contribution

It introduces a structured cheat sheet of privacy guidelines specifically tailored for IoT systems, aiding architects in privacy-aware development and assessment.

Findings

30 privacy guidelines categorized into 8 groups

Guidelines help in designing privacy-aware IoT systems

Questions for architects to evaluate privacy considerations

Abstract

This document presents 30 different privacy guidelines that can be used to both design and assess IoT applications and IoT middleware platforms. These guidelines can be broadly categorised into eight categories, namely, MINIMIZE ( ), HIDE ( ), SEPARATE ( ), AGGREGATE ( ), INFORM ( ), CONTROL ( ), ENFORCE ( ), DEMONSTRATE ( ). This document uses the following structure to introduce the each privacy guidelines. First, we describe the philosophy behind each guideline in general. Then, we present the questions that software architects need to think about when designing or assessing an IoT platform or application. The questions slightly vary depending on whether the architect is assessing a platform or an application.