Деякі правові проблеми Інтернету речей і напрями їх вирішення

Abstract

Стаття присвячена визначенню кола проблем, що виникають із розвитком Інтернету речей, і аналізу напрямів їх вирішення. Зазначено, що до таких проблем відносять проблеми захисту персональних даних і забезпечення невтручання у приватне життя, проблеми інформаційної безпеки, проблеми ідентифікації осіб, відповідальності учасників цих відносин, проблеми збору доказів тощо. Першочерговими серед них є проблема захисту персональних даних і забезпечення інформаційної безпеки. Цим проблемам приділена особлива увага, визначені шляхи запобігання порушенням у цій сфері.The article is dedicated to definition of the range of problems which arise due to the development of the Internet of things and to the analysis of the ways of their solution. It is noted that the most important issues in this sphere are: problems of personal data protection and holding of the principle of non-interference into private life, problems of information security, a problem of user’s identification, responsibility of participants of these relations, problems of collecting proofs and so forth. Among them the problem of personal data protection and information security is primary. Special attention is paid to these problems, ways of prevention of violations in this sphere are defined. It is noted that recently adopted in European Union General Data Protection Regulation addressed the problem of personal data protection in the sphere of the Internet of things. In this legal act so-called friendly rules for innovations were enshrined, according to which data protection guarantees concerning products and services have to be provided at early stages of development, that is at a design stage (Privacy by Design or Data Protection by Design). To the basic principles of Privacy by Design refer, particularly: 1) preventive measures, that is orientation on prevention of violations, but not just elimination of consequences; 2) confidentiality, maximum protection of personal information; 3) simultaneous safety of a system and protection of personal information; 4) protection of personal information throughout the whole cycle of its collecting, processing, storage and so on; 5) availability and openness of components of a system. The problem of information security is suggested to be resolved, particularly, by self-regulation in the sphere of the Internet of things. It is also offered to enter standardization and obligatory certification of objects which are part of the system of the Internet of things. In Europe for the purpose of safety there is considered to be enforced obligatory certification of all devices which are connected to ІоТ. The member countries of the EU consider the possibility of development of a complex of the actions aimed at ensuring of cyber security of the Internet of things. Such approach is advisable, though gives in to criticism as excessive regulation can interfere with development of technologies in the ІоТ.