Fundamentals of IT Law Group 9: IoT PDF

Fundamentals of IT Law Group 9: IoT Jacopo Sarno (905023) Ginevra Maria Sarzo (905349) Alessia Sartor (904517) Mark Shapiro (905343) Martina Spirello (901638) Melis Irem Sen (906651)...

Fundamentals of IT Law Group 9: IoT Jacopo Sarno (905023) Ginevra Maria Sarzo (905349) Alessia Sartor (904517) Mark Shapiro (905343) Martina Spirello (901638) Melis Irem Sen (906651) Yari Sperandio (905214) Daniele Spolaore (904846) Vittoria Tommasini (905147) Kaan Turkova (906682) Introduction The Internet of Things (IoT) is a concept where everyday physical objects are connected to the Internet, allowing them to gather, share, and analyze data without human intervention. This network of interconnected "smart" devices includes everything from home appliances and wearable fitness trackers to industrial machines and vehicles. By connecting to the internet, these devices can communicate with each other, respond to their surroundings, and make data-driven decisions. IoT operates in Smart Homes; Healthcare (IoT in Healthcare or Internet of Medical Things - IoMT); Wearables (Smartwatches, fitness trackers, and health-monitoring devices.); Industry and Manufacturing; Smart Cities and Agriculture. IoT components: Thing or Device: These have sensors and actuators. The sensor collects data from the environment and sends the data to the gateway, while the actuator acts. based on the data collected by the sensors; Gateway: The gateway collects the data from the environment and sends it to the cloud; Cloud: Cloud is a set of servers connected to the internet 24/7; Analytics: Analytics of the data; User Interface: User end application where user can monitor or control the data. History Before IoT was created, several devices were invented as far back as the early 19th century, like the telegraph. The actual origin of IoT is in the late 1960s. It all started with a group of researchers who began exploring ways to connect computer systems. The first example of IoT was ARPANET, a network known also as the forerunner of today’s internet. By the end of the 1970s, governments and individual consumers began exploring ways to connect personal computers with other machines. By 1980, Local Areas Networks provided an effective and widely used way to communicate and share data and documents across a group of computers in real-time. One of the first examples of IoT came from the early 1980s and was a Coca-Cola machine situated at Carnegie Mellon University. Technologists would connect through the internet to the refrigerated appliance, and this is because they wanted to check if there was a cold drink available before purchasing it. In 1997, Kevin Ashton, a British technologist, began to explore a technology framework, radio-frequency identification, that could connect physical devices via microchips and wireless signals. In 1999, during a speech, Ashton talked for the first time about the “Internet of Things.” While working at Procter & Gamble, the British technologist proposed to put radio-frequency identification chips on products to track them through a supply chain; furthermore, inventory tracking has become one of the more obvious advantages of the IoT. In the early 2000s, public interest in IoT technology began to take off as more connected devices were put in the marketplace. By 2008, the number of connected devices exceeded the number of people on the planet! Security and Privacy in IoT: Threats and Protection Techniques The Internet of Things’ main characteristic is connectivity across devices. While this feature offers advantages for users and institutions by accelerating processes like information sharing, it introduces security and privacy challenges, highlighting the need for standardized regulations. IoT devices collect vast data, from personal details to critical business information, making them targets for cybercriminals. Concretely, some of the most serious threats include weak authentication - the cause for hackers to be able to intercept weak passwords - and shared network access that sees IoT function as getaways for attackers to enter a network. Additionally, a limited device management is a weakness point for every business, since it limits the interception of vulnerabilities or unauthorized accesses in a device. Despite the gravity of these threats, methods to protect sensitive data have been developed together with the common agreement that a multi-layered security approach is crucial. Authentication methods, like multi-factor and biometric verification, restrict access to authorized users only, while the creation of VPNs (Virtual Private Networks) reduces the possibility of a hacker entering a network via a vulnerable device. Moreover, implementing mobile device management platforms is a great investment for businesses who wish to create a very safe and secure environment for their devices. Lastly, regular updates help cover vulnerabilities, reducing risks of exploitation. EU Regulation The European Union (EU) has developed several regulations and frameworks to govern the Internet of Things (IoT), aimed to create a safe, secure, and competitive environment for innovation. Relating to privacy and data protection, in May 2018, came into force the General Data Protection Regulation (GDPR), which updated and modernized the Data Protection Directive of 1995. It governs the collection, processing, and storage of personal data. For this reason, IoT devices must obtain explicit consent from users before collecting personal data. In addition, users have the right to request the deletion of their personal data. The EU Cybersecurity Act (CSA) has also been introduced , providing for the creation of cybersecurity certification schemes for various sectors. Specifically, relating to IoT, in 2023, the EU proposed “The Internet of Things Cybersecurity Improvement Act, which imposes to IoT device manufacturers and service providers to meet minimum cybersecurity standards, before placing their products on the EU market.In addition, to preserve fair competition in the market, in 2024 has been introduced The European Commission’s Digital Market Act (DMA), that seeks to ensure that platforms and devices are fair, transparent, and compatible with others, promoting market competition and innovation.The European Commission dealt with AI-powered IoT devices too, through the EU Artificial Intelligence Act, which imposes the classification of AI systems into different risk categories and requires transparency in the operations. US regulation The Role of Governments: In the field of IoT, the government’s role is to regulate the intangible flow of data between devices and networks, which must use unified standards for data structures, formats, and communication protocols. An important issue in IoT is the lack of transparency about how data is collected from large numbers of users and how it is used. In order to ensure and assure data quality, the government has to play a double role. The first one is the user role, which means that it must decide how IoT should be employed and list the requirements for assuring highly reliable IoT products and solutions.The second role is the infrastructure provider role, in which the government must provide regulations for every device used for Connection to the IoT. IoT must be subject to general legislation since it is entering all sectors of society, industry, and the economy. But general legislation is not enough in this case, instead specific local legislation is applied to manage specific situations that might occur in IoT operations. US legislation: White House Initiative on IoT (2012): It is a list of principles which has the aim of protecting the privacy of consumers in the digital age, addressing the challenges that are present in the field of IoT. This was influenced by the “Consumer’s Bill of Rights”, also proposed in 2012, which was a set of general guidelines for consumer data protection which can be applied in the field of IOT. The main topics were: Respect for Context Principle: consumers have a right to make sure that the collection and use of their personal data are done in ways that are compatible with the context in which it was provided. This also means that only essential data should be collected. Individual control principle: consumers have the right to have control over the personal data that they chose to share with companies and to know how this information is being used. Transparency: companies must inform consumers about how and which data is being collected. Security: companies must ensure security by, for example, encrypting and securing data storage. Accountability: it encouraged the creation of a set of guidelines that developers must follow in order to better comply with all the listed principles. IoT Cybersecurity Improvement Act (2020): It requires that devices meet specific security standards and guidelines for devices purchased by federal agencies. The goal is to ensure that devices used by government agencies are more resistant to cyberattacks and Secure against potential cyber threats. Iot in Smart home Smart home technology relies heavily on IoT to improve automation, security, and energy efficiency. Wireless communication protocols like Wi-Fi, Zigbee, Z-Wave, and Bluetooth Low Energy (BLE) help devices stay connected, enabling features such as remote monitoring and control. Platforms like Amazon Alexa, Google Assistant, and Apple Siri bring these devices together, making it easy for users to manage their homes with voice commands or centralized apps. IoT in smart homes depends on hardware like sensors, which monitor environmental changes, and actuators, which carry out physical actions. Smart appliances, such as connected refrigerators and thermostats, work with these components to create a more responsive and intelligent living space. Regulations play an important role in ensuring IoT devices are safe, work well together, and protect user privacy. Organizations like the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) set global standards. For example, ISO/IEC 30118-5:2021 outlines how smart home devices should work together, ensuring compatibility and smooth operation. In the European Union, the GDPR protects user data by requiring clear consent and ensuring companies handle personal information responsibly. The Radio Equipment Directive (RED) makes sure wireless devices meet strict safety and performance standards, while the Restriction of Hazardous Substances (RoHS) Directive limits harmful materials in electronic devices. IoT in Healthcare The implementation of IoT has a very important purpose, important examples are the reduction of human errors and costs, early diagnosis of chronic diseases, and improved medication management are the major advantages which could be considered within IoT-based healthcare systems. IoT will also allow access to medical consultations remotely and reduce burdens on hospitals.It can also contribute to IoWT with wearable sensors that help monitor several parameters like heart rate, body temperature, SpO2, and blood pressure. Besides, BLE, Wi-Fi, and LPWAN are some wireless technologies that provide support regarding data transmission. Based on this the FDA (Food and Drug Administration) has issued pre-market recommendations for the cybersecurity of connected medical devices to prevent vulnerabilities that could compromise patient safety. Meanwhile, the challenges and open issues include panaceas such as healthcare data security and privacy, multi-device integration complexity, system reliability, and scalability. Practical use cases of IoT in healthcare include the remote monitoring of heart rate, body temperature, blood glucose, detection of a medical emergency with the use of automatic notifications, and management of COVID-19, Alzheimer's disease, and anemia. In terms of the future perspectives, increasing adoption of IoWT and artificial intelligence implementation for predictive analytics and personalized diagnoses is expected. IoT in Agriculture The Internet of Things has become a transformational technology in the agriculture sector, addressing resource optimization, productivity enhancement, and sustainability. The incorporation of sensors, automation technologies, and data analytical techniques into IoT allows for the delivery of more intelligent and accurate farming practices. The most prominent applications include precision agriculture, livestock observation, greenhouse automation, and intelligent irrigation systems. IoT sensors are used in precision farming to monitor soil quality, weather conditions, and crop health, allowing farmers to optimize planting and irrigation schedules. The use of the IoT helps in the early-stage detection of pests and diseases, reducing losses and the application of pesticides. Livestock management becomes more efficient with wearable devices that track health and activity for the early detection of illness. Greenhouse automation uses IoT to maintain optimal growing conditions: it dynamically adjusts temperature, humidity, and CO₂ levels. Advanced technologies underlying IoTx include cloud computing, edge processing, and wireless communication protocols, among others—ZigBee and LoRaWAN. Such systems allow real-time processing of data and remote control over farming operations. The high costs, limited rural connectivity, and security risks remain the key barriers to widespread adoption. Despite such challenges, IoT holds tremendous potential. Continuous improvement in the areas of low-cost sensors, standardized protocols, and AI-driven analytics will only amplify its transformational impact on making agriculture more efficient, sustainable, and resilient. IoT and AI technologies within Smart Cities The following IoT-enabled technologies and AI demonstrate practical applications in smart cities that help immensely to enhance urban living. Such technologies are modifying the management and operation of cities by conserving resources and improving the quality of life for inhabitants. Here are the main uses and some examples of its impact: Traffic Management: City traffic and transport change through AI and IoT systems. Data on the vehicular flow is collected in real-time using sensors buried under the road and cameras. This information is processed by AI algorithms to determine real-time traffic signal modulation and reduce traffic jams. Take Los Angeles, for instance: Its adaptive traffic signal operates on a simple premise that quickly adapts to shifting traffic patterns, thereby reducing commute time and emissions. Environmental Monitoring: In Amsterdam Urban IOT sensors that provide continuous monitoring of environmental factors, like air and noise pollution are used to measure noise and air quality for informing local policies regarding pollution. In Chicago, the Array of Things is gathering data on air pollution, temperature, and urban flooding risks, allowing us to take preventive actions that promote both public health and infrastructure safety. Energy Efficiency: Smart streetlights in Barcelona adapt their brightness according to foot traffic, saving the whole city great amounts of electricity. Smart grids use IoT to monitor and optimize energy distribution, minimize waste, and increase the deployment of renewable sources. Predictive Maintenance: AI carefully analyzes the infrastructure sensor data through the Internet of Things starting from curved roads to pipes, enabling visualization of when repairs are due. This kind of focus on consumer behavior protects against potential adverse market conditions and extends the life martof the infrastructure. For example, Arkhangelsk Geofisika (ARH) equipped the bridge sensors with the Internet of Things (IoT) to enable it to regulate the pressure and other readings. IoT in Industry IoT is transforming the industrial sector by connecting machines, devices, and systems to optimize processes, reduce costs, and enhance product quality. In manufacturing, IoT enables real-time data collection and analysis, driving smarter operations. One key application is predictive maintenance: sensors monitor parameters like vibration and temperature, predicting failures before they occur. This reduces downtime, lowers repair costs, and extends equipment lifespan, ensuring seamless production. IoT enhances production by identifying inefficiencies through real-time monitoring. Automated adjustments maintain high quality and reduce waste. In inventory management, RFID tags and trackers provide live updates on materials and goods, improving supply chain efficiency and preventing overstocking or shortages. Safety is also improved: wearable devices and environmental sensors mitigate risks by detecting hazards and monitoring worker health. Automation powered by IoT allows machines to adapt dynamically to changing production needs, boosting flexibility and precision. These advancements help manufacturers achieve greater operational efficiency, sustainability, and product customization, aligning production with environmental goals and market demands. Despite its benefits, IoT adoption faces challenges. Data security is critical as industries risk exposure to cyber threats. High initial costs for sensors, infrastructure, and legacy system integration remain barriers. Moreover, managing the massive data generated by IoT devices requires robust analytics tools. Looking ahead, technologies like 5G, edge computing, and digital twins promise to enhance IoT impact. Faster networks will connect more devices, while edge computing reduces latency. Digital twins offer real-time process simulation, driving innovation. IoT is vital for Industry 4.0, ensuring competitiveness in an evolving industrial landscape. Future Perspectives Understanding IoT's impact on future generations is crucial for leveraging the opportunities it offers and anticipates the challenges it presents. IoT has the potential to revolutionize various fields, including education, work, and healthcare. In education, IoT makes learning more interactive and accessible through tools like smart boards and data analytics systems. These tools allow real-time assessments of student performance and enable the creation of personalized learning plans. In the workforce, IoT is expected to integrate more closely with automation systems, enhancing productivity while reshaping traditional job models and introducing new modes of operation. Similarly, in healthcare, IoT devices facilitate remote patient monitoring, enabling faster medical interventions and expanding access to healthcare services. This has the potential to significantly improve the quality of life. However, alongside these opportunities, IoT also brings significant challenges. The increasing number of IoT devices raises concerns about cybersecurity, as more devices mean more potential targets for cyberattacks. Ensuring the security of personal data through robust cybersecurity protocols is critical. Additionally, IoT's efficient operation requires a strong and widespread internet infrastructure, which poses significant challenges, particularly in rural and underdeveloped regions. The growing number of IoT devices also raises concerns about energy consumption, highlighting the need for sustainable energy solutions. Another challenge lies in ensuring compatibility and interoperability among devices from different manufacturers. Variations in software updates and communication protocols can further exacerbate these compatibility issues. To address these challenges, several strategies have been proposed. Strengthening encryption and authentication systems are essential to enhance IoT security. Integrating IoT with artificial intelligence and machine learning can significantly improve the data analysis capabilities of these devices. Moreover, developing global regulatory and legal frameworks to govern IoT usage, protect user privacy, and ensure security is increasingly necessary. In conclusion, while IoT offers numerous advantages for future generations, it also introduces considerable challenges. To fully harness its potential and minimize associated risks, sustainable, secure, and integrated approaches to IoT development and implementation are imperative. Sources GeeksforGeeks. (2020). Components of IOT and relation with Cloud Computing. [online] Available at: https://www.geeksforgeeks.org/components-of-iot-and-relation-with-cloud-computing/. Greengard, S. (2023). Internet of Things | electronic network. [online] Encyclopedia Britannica. Available at: https://www.britannica.com/science/Internet-of-Things. Foote, K. (2022). A Brief History of the Internet of Things - DATAVERSITY. [online] DATAVERSITY. Available at: https://www.dataversity.net/brief-history-internet-things/. Merchant, N. (2021). IoT Technologies Explained: History, Examples, Risks & Future. [online] Vision of Humanity. Available at: https://www.visionofhumanity.org/what-is-the-internet-of-things/.) for, O. (2021). ISO/IEC 30118-5:2021. [online] ISO. Available at: https://www.iso.org/standard/82131.html. www.iec.ch. (n.d.). Understanding standards | IEC. [online] Available at: https://www.iec.ch/understanding-standards. ‌Shea, S. (2020). What is smart home or building (home automation or domotics)? - Definition from WhatIs.com. [online] IoT Agenda. Available at: https://www.techtarget.com/iotagenda/definition/smart-home-or-building.