Impact of GDPR on Data Sharing Behavior of Smart Home Users

Abstract: The number of connected Internet of Things devices are expected to surpass 30 billion in 2020. The unprecedented levels of personal data sharing are drastically increasing the complexity of privacy challenges. This kindled efforts such as the General Data Protection Regulation (GDPR), that came into effect in May 2018 to establish user data rights. These new user data rights have had a considerable impact both for the users, and the data controllers & third-parties that are liable to effectuate the new requirements, such as privacy-by-design and explicit consent. In this thesis, we explore this impact of the GDPR, specifically on self-disclosure of personal data through smart home devices, in order to gain insights for smart home practitioners. In doing so, we specifically want to answer two research questions. Our first research question helps us understand opinions and attitudes, specifically those of Swedish residents. An online survey helps us understand their willingness and fears of adopting smart home devices. In our second research question, we apply a semi-Systematic Literature Review to study how the GDPR has influenced self-disclosure through smart home devices, and which factors have had the most significant effect on its users. The survey (n=131) showed that while trust towards data controllers is the cumulatively highest priority of users, consistent product & service quality was more likely to be the first priority (28%). Some users are struggling to find usefulness for smart home devices, so the perceived benefit is currently mainly exceeding the cost and perceived risk for lead adopters. Since the GDPR came into effect, we have seen a raise in user awareness and perceived control. Notably, this led to increased skepticism towards smart home devices. The literature review showed promise in systems to help negotiate and suggest privacy preferences between users and data controllers. We also found an exacerbation of the concern for information privacy and that trust is a major factor for users when deciding to adopt smart home devices. We conclude that there are some factors that are more important than others, as well as provide insights for smart home practitioners on future venues for research and prototyping.