Data quality, sensitive data and joint controllership as examples of grey areas in the existing data protection framework for the Internet of Things

The technology used to provide connectivity from anytime, any place and for anyone. Now anything can be added to the list.'(1) In the Internet of Things ('IoT'), the amount of individuals' data collected and processed is increasing substantially as data are being collected from various sources. Most communications between smart devices occur automatically, potentially without the user being aware of it. Many questions arise around the vulnerability of the devices in the IoT, often deployed outside a traditional IT structure and lacking sufficient built-in security. The IoT demands consideration and research into how to best balance the opportunities that the IoT affords against legal risks it imposes on data protection. Considerable questions about how our currently existing EU framework for protection of personal data applies in IoT are being raised. The data protection legislation needs to move from theory to practice and in order to achieve this; the legal framework may need additional mechanisms.