FTC’s Bureau of Consumer Protection Staff Submits Comment on Internet of Things and Consumer Product Hazards

In a comment to the Consumer Product Safety Commission (CPSC) about potential safety issues associated with Internet-connected consumer products, staff of the Federal Trade Commission’s Bureau of Consumer Protection (BCP) warned that poorly secured Internet of Things (IoT) devices could pose a consumer safety hazard and outlined ways to mitigate such risks. BCP Staff submitted a response to the CPSC as part of the agency’s Request for Comments on potential safety issues and hazards associated with Internet-connected consumer products. While the CPSC noted that privacy and data security are outside the scope of its inquiry, BCP staff in its comment emphasized that poor security in IoT devices might create technology-related hazards associated with the loss of critical safety function, loss of connectivity, or degradation of data integrity. For example, a car’s braking system might fail if infected with malware, or carbon monoxide or fire detectors could stop working if they lose their Internet connection. Staff also outlined the FTC’s education and enforcement work related to device and information security particularly as it relates to IoT. The FTC has provided IoT manufacturers with guidance on how to predict and mitigate against privacy and security risks.