Toward GDPR Compliance in IoT Systems

Abstract

The General Data Protection Regulation (GDPR) allow citizens to control their data. For that, they must define and update their security data policies that are generally more sophisticated and more dynamic than classical access control policies managed by system administrators. Consequently, GDPR implementation in modern scalable and dynamic systems like IoT is still a challenge. We propose a security model for data privacy and an original solution where a GDPR consent manager is integrated using Complex Event Processing (CEP) system and following the edge computing. We show, through a smart home IoT system, the efficiency of our approach in terms of flexibility and scalability.