Internet of Things (IoT) 13 May 2015

OTA Announces Trust Framework to Address Internet of Things Risks

Experts invited to join working group and attend workshop on June 16th

Bellevue, WA – The Online Trust Alliance (OTA), the non-profit with the mission to enhance online trust, announced today that it is leading an initiative to develop a security, privacy and sustainability trust framework for Internet of Things (IoT) devices. Intended to provide clarity and confidence to consumers as they shop and use connected devices, the framework will initially focus on connected home and wearable/fitness technologies. OTA’s vision is to use this framework as the basis for a potential certification program for IoT devices and their manufacturers.

“With the rapid introduction of Internet of Things products into the market, we must ensure that security and privacy best practices are integrated to maximize consumer protection,” said Craig Spiezle, Executive Director and President of OTA. “According to preliminary data from OTA’s forthcoming Online Trust Audit, 14 percent of leading IoT products did not have a discoverable privacy policy for consumers to review prior to purchase. We welcome industry leaders to join in the multi-stakeholder effort to raise the bar and make security, privacy and sustainability key product attributes.”

The next full working group meeting is on June 16th in Mountain View, Calif. The framework reflects input from a consortium of leaders in both the private and public sectors—including the security and privacy community, app developers, manufacturers and international retailers.

The trust framework answers the White House’s call for an IoT certification program much like the UL Seal of Approval, an independent safety certification for appliances. It will propose that devices be verified through a combination of self-certification and third-party auditing against a set of published criteria. Initial goals of the framework include:

  • Aid consumers’ ability to confidently make purchase decisions based on vendors’ commitment to privacy and security.
  • Provide prescriptive guidance to manufacturers and developers to adopt best practices that reduce device vulnerabilities while enhancing consumer privacy and product sustainability.
  • Provide retailers and ecommerce sites with criteria to aid in their product merchandising decisions.
  • Encourage collaboration and sharing of best practices among participants and industries.
  • Demonstrate a commitment to meaningful self-regulation.

“We welcome OTA’s initiative to extend the work of the IoT Privacy Tech Working Group to include the security and sustainability issues arising out of the explosion of data collection from connected devices,” said TRUSTe CEO Chris Babel. “Considering that 79 percent of U.S. consumers are concerned about data collected by connected devices, we urge companies to join this important endeavor to develop clear standards for privacy and security in the Internet of Things.”

About the IoT Trust Framework Working Group
Interested parties may join the working group and comment on the draft framework by visiting https://otalliance.org/IoT. To register to attend the next full Working Group General Meeting on June 16 visit https://iotwg.eventbrite.com

About OTA:

The Online Trust Alliance (OTA) is a non-profit with the mission to enhance online trust and user empowerment while promoting innovation and the vitality of the Internet. Its goal is to help educate businesses, policy makers and stakeholders while developing and advancing best practices and tools to enhance the protection of users’ security, privacy and identity. OTA supports collaborative public-private partnerships, benchmark reporting, and meaningful self-regulation and data stewardship. Its members and supporters include leaders spanning the public policy, technology, ecommerce, social networking, mobile, email and interactive marketing, financial, service provider, government agency and industry organization sectors.

Related resources

Internet of Things (IoT) 1 May 2019

Concerns Over Privacy and Security Contribute to Consumer Distrust in Connected Devices

New research shows privacy, security are frequently key consumer concerns and drive buying decisions 73% of consumers think people...

Internet of Things (IoT) 8 January 2019

Internet Society Advances IoT Security in France

Launches IoT Security Working Group and Reveals Results of Study “The French and Connected Objects” Founding members of the...

Building Trust 7 March 2017

OTA Details the Shared Responsibility of Businesses, Consumers and Government to Avoid IoT Weaponization

Report likens connected device security and privacy to global warming where inaction today could lead to irreversible consequences  ...