Source · Select Committees · Culture, Media and Sport Committee
Tenth Report - Connected tech: smart or sinister?
Culture, Media and Sport Committee
HC 157
Published 7 August 2023
Recommendations
3
Accepted
Para 41
Clarify Online Safety Bill obligations for connected devices and voice assistants surfacing harmful content.
Recommendation
The Government should clarify the obligations in the Online Safety Bill for voice assistants, connected devices (like smart speakers) and other emerging technologies that can surface harmful content, to ensure that those that integrate search services in particular fall in-scope …
Read more
Government Response Summary
The government partially accepts the recommendation, clarifying that the Online Safety Act's broad scope covers voice assistants and connected devices integrating internet search, subjecting them to duties to conduct risk assessments and mitigate illegal content and harm to children.
Department for Culture, Media and Sport
View Details →
5
Accepted
Para 52
Commit to strengthening the Age-Appropriate Design Code and laying revised version promptly.
Recommendation
The Government should commit to ensuring that the Age-Appropriate Design Code is strengthened rather than undermined by data protection reform and to laying the revised code as soon as is practicable.
Government Response Summary
The government agrees with the recommendation, committing to ensure that forthcoming data protection reforms will not undermine the Age-Appropriate Design Code. The ICO will update its guidance, including the code, as soon as practicable once the Data Protection and Digital Information (No.2) Bill receives Royal Assent.
Department for Culture, Media and Sport
View Details →
7
Accepted
Para 64
Commission research on automated workplace monitoring and clarify HSE's role in AI regulation.
Recommendation
The monitoring of employees in smart workplaces should be done only in consultation with, and with the consent of, those being monitored. The Government should commission research to improve the evidence base regarding the deployment of automated and data collection …
Read more
Government Response Summary
The government partially accepts the recommendation, stating that workplace monitoring must comply with existing data protection law. It highlights safeguards in the Data Protection and Digital Information (No.2) Bill for automated decision-making and refers to its previously published AI Regulation White Paper and ongoing work with regulators like HSE, with a consultation response to be published later this year.
Department for Culture, Media and Sport
View Details →
13
Accepted
Para 108
Require providers to adopt network, storage, and cloud security standards for connected tech.
Recommendation
Improving cybersecurity of consumer connected devices is an important and positive step, but the proliferation of connected tech in enterprise settings and the gap in the regime regarding network, storage and cloud security still present likely attack vectors that will …
Read more
Government Response Summary
The government claims existing security requirements already apply to relevant software, including off-device elements, and highlights current initiatives like NCSC principles and ongoing work to understand risks in enterprise devices.
Department for Culture, Media and Sport
View Details →
14
Accepted
Para 116
Support free courses, educators, and improve industry hiring to address cyber skills shortage.
Recommendation
We are concerned about the ongoing skills shortage, as recognised in both the Government and industry’s regular reporting on cybersecurity skills in the labour market, and believe that the shortage will be exacerbated further as the product safety regime comes …
Read more
Government Response Summary
The government acknowledges an ongoing cyber skills shortage and states it already funds free cyber bootcamps across the UK through the DfE and National Cyber Strategy Programme. It also commits to continuing engagement with industry on improving hiring and retention.
Department for Culture, Media and Sport
View Details →
15
Accepted
Para 117
Improve gender and ethnic diversity in cyber workforce through new schemes and support.
Recommendation
We are particularly concerned that, despite the shortage of cyber skills in the UK, there are stubborn and significant disparities in the cyber workforce based on gender and race and ethnicity. The Government should reflect on the significant disparities in …
Read more
Government Response Summary
The government agrees to address diversity in the cyber workforce, highlighting ongoing initiatives like funding the National Centre for Computing Education, DSIT's 'Upskill in Cyber' programme, and funding the UK Cyber Security Council to develop professional recognition processes.
Department for Culture, Media and Sport
View Details →
19
Accepted
Para 132
Upskill law enforcement and improve crime data to enhance response to tech abuse
Recommendation
The Government’s response to tech abuse should involve upskilling law enforcement to improve the criminal justice response and increasing law enforcement’s and victims’ and survivors’ awareness of specialist services tackling violence against women and girls. The Government should also reflect …
Read more
Government Response Summary
The government partially agrees, committing to provide up to £8.3 million over two years for frontline support, including training on tech-facilitated abuse, and £150k for the Revenge Porn Helpline. It also commits to continuing to work with policing partners on developing skills and with police forces to ensure accurate use of the 'online flag' in crime data.
Department for Culture, Media and Sport
View Details →
Conclusions (3)
1
Conclusion
Accepted
Para 35
Data rights are an important tool for empowering data subjects and balancing data processing against users’ rights and freedoms. However, there are many barriers to individuals being able to exercise these rights when using or interacting with connected tech, ranging from product design to digital literacy and resources. Users must …
Government Response Summary
The government agrees with the conclusion, stating that existing data protection legislation, including the UK GDPR, already addresses these issues by requiring transparent data processing and empowering individuals to report non-compliance to the ICO. It welcomes the ICO's existing recommendations to technology providers.
8
Conclusion
Accepted
Para 65
The Information Commissioner’s Office should develop its existing draft guidance on “Employment practices: monitoring at work” into a principles-based code for designers and operators of workplace connected tech.
Government Response Summary
The ICO plans to publish final guidance for employers on employee monitoring in October, which will replace parts of the 2011 Employers Code of Practice, following a public consultation that closed in January.
12
Conclusion
Accepted
Para 102
As the guidelines set out in the 2018 Code of Practice for Consumer IoT Security imply, cybersecurity and data protection are mutually reinforcing. Without cybersecurity, data cannot be meaningfully protected, while data protection can manage the risk and impact of cyberattack. The Information Commissioner’s Office, either bilaterally or through the …
Government Response Summary
The government commits that the Information Commissioner’s Office (ICO) will work with the Office for Product Safety Standards (OPSS), bilaterally or via the Digital Regulation Co-operation Forum, to support industry and ensure effective enforcement of new regulations.