Recommendations & Conclusions
7 items
4
Recommendation
Tenth Report - Connected tech: smart or…
Rejected
The use of connected tech in schools and by children in homes raises concerns, including the harvesting and third-party use of children’s data and their lack of control over what technology is used and when. The Government and ICO were quick to dismiss our concerns about this issue. We urge …
Read more
The use of connected tech in schools and by children in homes raises concerns, including the harvesting and third-party use of children’s data and their lack of control over what technology is used and when. The Government and ICO were quick to dismiss our concerns about this issue. We urge the ICO to take a more proactive approach in engaging with manufacturers of connected toys and education technology. It should ensure that all products include: terms and conditions that are age-appropriate; privacy settings that are intuitive for children and help them exercise data rights; and fully explain the benefits and risks of data processing. Industry should be supported in this through comprehensive guidance, independent research and user- testing.
Show less
Government response AI summary
The government rejects the conclusion, asserting that the ICO has already been proactive through extensive work with industry since the Age-Appropriate Design Code came into force, producing guidance and resources for Edtech and schools.
Read full response →
Department for Culture, Media and Sport
9
Recommendation
Tenth Report - Connected tech: smart or…
Rejected
The Government has not yet made a compelling case for reform of data protection. While we understand that some companies do not share data outside the UK, we are concerned that differing expectations between those companies and companies that do share data outside the UK may give the impression of …
Read more
The Government has not yet made a compelling case for reform of data protection. While we understand that some companies do not share data outside the UK, we are concerned that differing expectations between those companies and companies that do share data outside the UK may give the impression of “lesser” protections for processing personal data in the UK overall. This could be perceived as undermining our existing data adequacy arrangements and ultimately harm companies that share data between the UK and other jurisdictions. To maintain the UK’s reputation as a world-class technology hub, the Government should keep its data reforms under review so as not to undermine its existing data adequacy agreements.
Show less
Government response AI summary
The government rejects the conclusion, asserting that the UK remains committed to high data protection standards and that the proposed Bill will simplify legislation while maintaining robust safeguards. It argues that EU adequacy does not require identical rules and that dialogue with the EU continues …
Read full response →
Department for Culture, Media and Sport
10
Conclusion
Tenth Report - Connected tech: smart or…
Rejected
We agree that reforming the governance and accountability structures of the Information Commissioner’s Office will be a positive step. We have previously recommended against executive overreach in the case of Ofcom and the Online Safety Bill; these concerns apply with respect to the Information Commissioner’s Office and the Data Protection …
Read more
We agree that reforming the governance and accountability structures of the Information Commissioner’s Office will be a positive step. We have previously recommended against executive overreach in the case of Ofcom and the Online Safety Bill; these concerns apply with respect to the Information Commissioner’s Office and the Data Protection and Digital Information (No. 2) Bill. Powers to veto codes of practice and to set strategic priorities without parliamentary oversight should not be adopted. (Paragraph 78) Product security
Show less
Government response AI summary
The government rejects the conclusion, asserting that the reforms will enhance the ICO's accountability without undermining its independence, citing the Information Commissioner's agreement. It clarifies that the Strategic Statement of Priorities will be subject to parliamentary oversight and approval, ensuring accountability to Parliament.
Read full response →
Department for Culture, Media and Sport
11
Recommendation
Tenth Report - Connected tech: smart or…
Rejected
The introduction of the product security regime, which codifies three of the original thirteen guidelines set out in the Government’s internationally recognised 2018 Code of Practice for Consumer IoT Security, is an important first step in improving cybersecurity for connected devices. However, the remaining ten guidelines retain considerable support among …
Read more
The introduction of the product security regime, which codifies three of the original thirteen guidelines set out in the Government’s internationally recognised 2018 Code of Practice for Consumer IoT Security, is an important first step in improving cybersecurity for connected devices. However, the remaining ten guidelines retain considerable support among stakeholders. We recommend that the Office for Product Safety and Standards (OPSS), as the national regulator, should produce an implementation plan so policymakers can measure the impact of the product security regime. The OPSS should continue to promote the guidelines not included in the Product Security and Telecommunications Infrastructure Act 2022 and the Government should commit to codifying these remaining guidelines in phases as the regime matures and industry adapts, in order to stay ahead of emerging cyber threats. (Paragraph 101) 68 Connected tech: smart or sinister?
Show less
Government response AI summary
The government rejects committing to codify the remaining guidelines in phases, stating it's not currently proportionate, but will monitor the impact of existing requirements and may mandate further ones if necessary.
Read full response →
Department for Culture, Media and Sport
16
Recommendation
Tenth Report - Connected tech: smart or…
Rejected
The creation of the Department for Science, Innovation and Technology is an opportunity to ensure a comprehensive, joined up approach to cyber policy. We recommend that responsibilities for cyber policy is co-ordinated by the dedicated Department for Science, Innovation and Technology and that government ensures collaboration between the Department and …
Read more
The creation of the Department for Science, Innovation and Technology is an opportunity to ensure a comprehensive, joined up approach to cyber policy. We recommend that responsibilities for cyber policy is co-ordinated by the dedicated Department for Science, Innovation and Technology and that government ensures collaboration between the Department and other cyber-focused teams distributed across Whitehall. Ministers in the Department for Science, Innovation and Technology should be ultimately responsible and accountable for developing and delivering cyber policy except for national security measures.
Show less
Government response AI summary
The government rejects the recommendation, stating that the UK National Cyber Strategy sets out a whole-of-government approach where various ministers have specific cyber responsibilities, and argues that national security cannot be separated from broader cyber policy.
Read full response →
Department for Culture, Media and Sport
17
Recommendation
Tenth Report - Connected tech: smart or…
Rejected
As the prevalence of connected technology grows, so too will the demand for the National Cyber Security Centre’s services. The Government should ensure that the National Cyber Security Centre has the capacity to meet demands for its services. It should explicitly consider and address capacity issues as part of its …
Read more
As the prevalence of connected technology grows, so too will the demand for the National Cyber Security Centre’s services. The Government should ensure that the National Cyber Security Centre has the capacity to meet demands for its services. It should explicitly consider and address capacity issues as part of its regular reporting Connected tech: smart or sinister? 69 on cybersecurity skills in the UK. (Paragraph 121) Technology-facilitated abuse
Show less
Government response AI summary
The government partially agrees, stating it ensures the NCSC is sustainably funded but rejects explicitly addressing NCSC capacity issues in its regular labour market reporting, instead confirming that NCSC needs are considered within broader workforce capacity assessments.
Read full response →
Department for Culture, Media and Sport
20
Conclusion
Tenth Report - Connected tech: smart or…
Rejected
We want to see words from cross-sector stakeholders on tech abuse now leading to positive actions. The Office for Product Safety and Standards should, at the earliest opportunity, convene a “tech abuse working group” with stakeholders, bringing industry together with researchers, specialist support services and public services. This group should …
Read more
We want to see words from cross-sector stakeholders on tech abuse now leading to positive actions. The Office for Product Safety and Standards should, at the earliest opportunity, convene a “tech abuse working group” with stakeholders, bringing industry together with researchers, specialist support services and public services. This group should be more than just a talking shop, and draw on research to produce guidance and a code of practice that establishes best practice for manufacturers, vendors and law enforcement. The working group should report publicly through the OPSS on its progress at regular intervals. (Paragraph 138) 70 Connected tech: smart or sinister?
Show less
Government response AI summary
The government rejects the recommendation, stating there are no plans for OPSS to convene a tech abuse working group as aspects of tech abuse are addressed in existing policies and legal frameworks, and it is not within OPSS's primary remit.
Read full response →
Department for Culture, Media and Sport