Regulation Compliance System for IoT Environments: GDPR Compliance as a Use-Case

Due to the increasing number of IoT devices and their different manufacturers, it is necessary to ensure that IoT devices are compliant with laws, regulations and standards before they are placed into operation within their application area, such has within organisations, companies or homes. This paper describes how to ensure regulatory/standards compliance of the IoT devices operating within a home, organisation or company; in particular when those devices attach to homes or organisations network and starts working under that network’s authority. Through application of the proposed solution, IoT devices will be able to demonstrate their compliance with regulations and standards without exchanging extraneous information about themselves or related devices. Conversely, a governance framework will be able to integrate this information to verify the IoT devices compliance to the standards and regulations without any third party involvement. The proposed solution can be applied in home environments where a centralised source of truth, such as a BT HomeHub Internet access point, can ensure that all IoT devices trying to connect through it are compliant with legal obligations and regulations such as the General Data Protection Regulation (GDPR).