{"id":9021,"date":"2022-02-02T15:22:32","date_gmt":"2022-02-02T14:22:32","guid":{"rendered":"https:\/\/www.cabinetbouchara.com\/internet-des-objets\/"},"modified":"2026-02-10T08:57:04","modified_gmt":"2026-02-10T07:57:04","slug":"internet-of-things","status":"publish","type":"page","link":"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/internet-of-things\/","title":{"rendered":"Internet of Things"},"content":{"rendered":"

Lexicon<\/a> > Internet of Things<\/b><\/span><\/span><\/p>\n

IT Glossary<\/p>\n

The Internet of Things (IoT) refers to fixed and mobile devices connected to the Internet.<\/p>\n

These devices generally allow direct communication between them, with or without wires, and thus the exchange of information.<\/p>\n

They can be autonomous or dependent on other systems (smartphone, computer…).<\/p>\n

The Internet of Things represents a significant source of exploitable vulnerabilities in more environments and, due to the high quality of interconnections between devices and systems, a faster potential propagation path to multiple devices.<\/p>\n

The implementation of technical and organizational security measures appropriate to the risk must therefore be ensured in all elements of a connected system, as a vulnerability in one component can potentially compromise the whole.<\/p>\n

As the Internet of Things processes a large number of different categories of personal data<\/a> in principle, but also creates new data and metadata by itself, their compliance with the GDPR<\/a> is therefore important for the rights and freedoms of data subjects, but also of third parties.<\/p>\n

In particular, the Internet of Things allows connections to be made between seemingly isolated and unrelated information.<\/p>\n

It also enables knowledge to be generated from mundane data, even data considered “anonymous” due to the proliferation of sensors, revealing specific aspects of people’s habits, behaviors and preferences.<\/p>\n

The volume of information collected by the Internet of Things is of interest in the context of Big Data<\/a>, but also in the development ofArtificial Intelligence<\/a>.<\/p>\n

RGPD Point<\/h2>\n

” 1. Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing operation, as well as the risks to the rights and freedoms of natural persons, which vary in likelihood and severity, the controller shall implement, both at the time of determining the means of processing and at the time of the processing itself appropriate technical and organisational measures, such as pseudonymisation, which are designed to implement data protection principles, such as data minimisation, effectively and to provide the necessary safeguards for the processing to meet the requirements of this Regulation and to protect the rights of the data subject<\/em><\/p>\n

2. The controller shall implement appropriate technical and organizational measures to ensure that, by default, only personal data that are necessary for each specific purpose of the processing are processed. This applies to the amount of personal data collected, the extent of its processing, its storage period and its accessibility. In particular, these measures shall ensure that, by default, personal data are not made accessible to an indeterminate number of natural persons without the involvement of the natural person concerned.”<\/em><\/p>\n

Article 25 of the GDPR<\/p>\n

Point of jurisprudence<\/h2>\n

The Spanish supervisory authority<\/a> was able to recall that “The way in which direct marketing is carried out has changed. Instead of simple emails reaching customers’ mailboxes, targeted advertisements are now appearing on the screens of smart phones and computers. In the near future, advertising could also be integrated on smart devices connected to the Internet of Things.”<\/em>.<\/p>\n

Agencia Espa\u00f1ola de Protecci\u00f3n de Datos, July 6, 2021, No. PS\/00259\/2020<\/p>\n

The Bouchara firm assists you in particular in :<\/p>\n