AIOTI Working Group 04 – Policy Group Digital Enlightenment Forum – Brussels 26 November 2015 AIOTI Working Group 04 – Policy Group WG04 Chair - Robert MacDougall, Vodafone

WG04 Membership Over 200 members, including: Companies Academic Institutions Law firms Sectoral trade associations Objective is to represent the supply and demand side – and make horizontal policy recommendations Key EU policy initiative is the Digital Single Market We also want to inform Large Scale Pilot activities

Activity to date Objective and approach: The identification of existing or potential market barriers that prevent the take-up of loT in the context of the Digital Single Market, as well as from an Internal Market perspective, with a particular focus on trust, security, liability and privacy Privacy Workstream lead - Vodafone Objective - Practical privacy guidance on IoT applications and any related barriers Security Workstream lead - Thales Objective – delivery of practical security guidance on IoT applications and any related barriers Liability Workstream lead – ARM in conjunction with Hogan Lovells Objective – scope out the ‘liability problem statement’ and develop case studies Net Neutrality Workstream lead – Cisco Objective – develop practical case studies to inform regulatory guidance post TSM package

Output to date Face-to-face workshop and audio conferences to finalise approach in Policy document published on 26 October 2015 Privacy WG04 makes ten policy recommendations to address key concerns, ranging from European Commission sponsorship of an accredited Privacy engineering program, adoption of Privacy by Design best practice by AIOTI members to creation of a ‘AIOTI Privacy Knowledge Base’. Security WG04 highlights key challenges, for example in relation to diverse stakeholders, technology and also societal acceptance and trust, and makes recommendations in respect of each. Liability WG04 analyses extent to which IoT technology may raise issues for current legal regime. We propose that the emphasis should, in the main, be on the development of policy solutions to these potential challenges. Net Neutrality WG04 provides case studies to help inform the activities of NRAs in light of the finalised text on net neutrality as set out in Telecoms Single Market package.

Next Steps Implementation Outreach Privacy and security recommendations that AIOTI members should now take forward (e.g. adoption of Privacy-by-Design and Security–by-design best practice and frameworks for new product development). We need to show how this is being applied in practice. Adoption by AIOTI members of Privacy principles Establishment of the AIOTI Privacy and Security Knowledge Base, which will act as a reference tool for Large Scale Pilots Outreach Building on external activity to date (e.g. ‘Digital Revolution’ workshop on IoT liability at Universität Münster, response to BEREC draft report on IoT, Brussels workshops). Set policy priorities for next phase Connected Car. Free movement of IoT data? Interoperability? Participation To drive next phase of AIOTI Policy activity!