No excuses: Families deserve secure smart devices

Common Sense Kids Action addresses the "smart device" industry's concerns with SB 327, the Teddy Bear and Toaster Bill. By Ariel Fox Johnson
No excuses: Families deserve secure smart devices

The Teddy Bear and Toaster Bill (SB 327), authored by California State Sen. Hannah-Beth Jackson, was introduced last month. It has a simple goal: bring much-needed basic security and privacy practices to the connected devices filling our homes. It would ensure that devices recording your child's bedroom at night or listening in on your early morning kitchen musings have reasonable security. And it would ensure that families know what information the devices they buy are capable of collecting and that they have control over that collection.

Consumers should be able to make informed decisions about whether they want a teddy bear with a microphone in their homes or when they want a fridge's camera to stop recording. Keeping personal information secure and being upfront with users doesn't seem like too much to ask.

But for many, apparently, it is.

As usual, much of the industry seems to have little regard for keeping its devices secure or being upfront with consumers, focusing more on getting the latest hit gadget to market quickly and cheaply.

So they're up to their typical tactics: Companies are clamoring that these rules should not apply to them, and they're trotting out the same standard refrains used whenever someone tries to hold them accountable.

The first concern is that these rules aren't needed.

Looking only at the security context, reality tells a different story. Many of these devices are unbelievably insecure. From the VTech breach in 2015 to the CloudPets leak earlier this year, millions of parents' and children's photos, names, and audio messages have been exposed. Innumerable web cameras and other devices with lax security have been used to take down major internet news, shopping, and other sites. And experts predict that the hacking of smart devices will only increase in 2017, leading to everything from privacy harm to physical risk.

Another alleged concern is that it will be impossible to comply.

This has come up regarding the bill's notice provisions -- for example, that companies must tell consumers that a device can collect information and when they're collecting it. Some devices already do provide such information: Both the Amazon Echo light and CogniToys' Dino light -- which indicate when they're listening to you -- also explain on their boxes that they can collect information. So the notion that this is impossible seems a little disingenuous. Moreover, if these devices can't succinctly explain which information they collect, how is a harried parent supposed to figure it out?

Families are tired of hearing the same old excuses. That's why we have this bill, and that's why we're working to get it passed. We've reached out to the makers of children's toys for their support. And we will be reaching out to others harmed by insecure devices. Stay tuned: Next week we're holding a press conference with Senator Jackson.

Share your "smart device" concerns by sending us a message!

About Ariel Fox Johnson

Image of blog author
As Common Sense's Senior Counsel for Policy and Privacy, Ariel advocates for smart practices, policies, and rules to help all kids thrive in today’s wired world. Her work focuses on child, teen, and student privacy,... Read more

Add comment

Sign in or sign up to share your thoughts


Common Sense Media is working with PubExchange to share content from a select group of publishers. These are not ads. We receive no payment, and our editors have vetted each partner and hand-select articles we think you'll like. By clicking and leaving this site, you may view additional content that has not been approved by our editors.