Connected tech: smart or sinister?

Culture, Media and Sport Committee Closed Inquiry
Opened: 12 May 2022 Closed: 5 Feb 2024 Parliament page
The DCMS Committee will examine the impacts of the increasing prevalence of smart and connected technology and what needs to be done to ensure it is safe and secure for its users. The Connected tech: smart or sinister? inquiry will explore how devices including smart speakers, virtual assistants such as … Read more
23 Recommendations
8 Conclusions
2 Reports
6 Oral sessions
1 Letter
6 Events
Activity timeline 17 events
11 Jan
2024
Report published
24 Nov
2023
Report published
30 Aug
2023
Report published
7 Aug
2023
Report published
9 Feb
2023
Correspondence
31 Jan
2023
Oral evidence
31 Jan
2023
Formal meeting (oral evidence session) · The Wilson Room, Portcullis House
17 Jan
2023
Oral evidence
17 Jan
2023
Formal meeting (oral evidence session) · The Wilson Room, Portcullis House
22 Nov
2022
Oral evidence
22 Nov
2022
Formal meeting (oral evidence session) · The Grimond Room, Portcullis House
1 Nov
2022
Oral evidence
Oral evidence sessions 6 sessions
31 Jan 2023
View on parliament.uk
Erika Lewis · Department for Digital, Culture, Media and Sport Julia Lopez MP · Department for Culture, Media and Sport Sam Cannicott · Department for Digital, Culture, Media and Sport
17 Jan 2023
View on parliament.uk
David Kleidermacher · Google John Edwards · Information Commissioner's Office Leila Rouhi · Amazon Stephen Almond · Information Commissioner's Office
22 Nov 2022
View on parliament.uk
Dr Yiyun Kang Svana Gisla · ABBA Voyage
1 Nov 2022
View on parliament.uk
Dr Asieh Hosseini Tabaghdehi Dr Efpraxia Zamani Dr Matthew Cole
11 Oct 2022
View on parliament.uk
Matt Lewis · NCC Group Professor George Loukas Simon Moore · Palo Alto Networks
19 Jul 2022
View on parliament.uk
Antony Walker · techUK Dr Leonie Tanczer Dr Lulu Shi Silkie Carlo · Big Brother Watch
Recommendations & Conclusions
31 results
1 Conclusion Accepted
Tenth Report - Connected tech: sma…
Significant barriers prevent individuals from effectively exercising data rights with connected tech.
Data rights are an important tool for empowering data subjects and balancing data processing against users’ rights and freedoms. However, there are many barriers to individuals being able to exercise these rights when using or interacting with connected tech, ranging … Read more
Government Response
The government agrees with the conclusion, stating that existing data protection legislation, including the UK GDPR, already addresses these issues by requiring transparent data processing and empowering individuals to report non-compliance to the ICO. It welcomes the ICO's existing recommendations to technology providers.
Department for Culture, Media and Sport
View details
2 Recommendation Acknowledged
Tenth Report - Connected tech: sma…
Introduce measures to standardise intuitive privacy interfaces for connected devices, empowering users.
The Government should introduce appropriate measures to standardise privacy interfaces for connected devices as a first step, which will help users learn how to control connected devices in their homes and exercise data rights. Privacy interfaces should be appropriately accessible, … Read more
Government Response
The government partially accepts the recommendation, referencing existing GDPR requirements for privacy information. While not committing to standardising interfaces for connected devices, it will engage with interest groups in the coming months to explore options for simpler and more granular cookie preference choices using automated technologies.
Department for Culture, Media and Sport
View details
3 Recommendation Accepted
Tenth Report - Connected tech: sma…
Clarify Online Safety Bill obligations for connected devices and voice assistants surfacing harmful content.
The Government should clarify the obligations in the Online Safety Bill for voice assistants, connected devices (like smart speakers) and other emerging technologies that can surface harmful content, to ensure that those that integrate search services in particular fall in-scope … Read more
Government Response
The government partially accepts the recommendation, clarifying that the Online Safety Act's broad scope covers voice assistants and connected devices integrating internet search, subjecting them to duties to conduct risk assessments and mitigate illegal content and harm to children.
Department for Culture, Media and Sport
View details
4 Recommendation Rejected
Tenth Report - Connected tech: sma…
Urge ICO to proactively engage manufacturers on child-friendly privacy settings for connected tech.
The use of connected tech in schools and by children in homes raises concerns, including the harvesting and third-party use of children’s data and their lack of control over what technology is used and when. The Government and ICO were … Read more
Government Response
The government rejects the conclusion, asserting that the ICO has already been proactive through extensive work with industry since the Age-Appropriate Design Code came into force, producing guidance and resources for Edtech and schools.
Department for Culture, Media and Sport
View details
5 Recommendation Accepted
Tenth Report - Connected tech: sma…
Commit to strengthening the Age-Appropriate Design Code and laying revised version promptly.
The Government should commit to ensuring that the Age-Appropriate Design Code is strengthened rather than undermined by data protection reform and to laying the revised code as soon as is practicable.
Government Response
The government agrees with the recommendation, committing to ensure that forthcoming data protection reforms will not undermine the Age-Appropriate Design Code. The ICO will update its guidance, including the code, as soon as practicable once the Data Protection and Digital Information (No.2) Bill receives Royal Assent.
Department for Culture, Media and Sport
View details
6 Recommendation Acknowledged
Tenth Report - Connected tech: sma…
Review incentives for piloting data institutions in smart cities to boost citizen control.
Though smart cities provide a range of opportunities, such as more efficient management of resources, there are also additional risks to confidence in privacy and data protection, making it harder for individuals to exercise data rights. The Government should review … Read more
Government Response
The government partially accepts the recommendation, stating it is examining how data intermediaries can facilitate data sharing and empower individuals. It highlights existing data-driven practices and discusses ongoing work to manage security risks associated with connected places technologies, providing guidance to local authorities.
Department for Culture, Media and Sport
View details
7 Recommendation Accepted
Tenth Report - Connected tech: sma…
Commission research on automated workplace monitoring and clarify HSE's role in AI regulation.
The monitoring of employees in smart workplaces should be done only in consultation with, and with the consent of, those being monitored. The Government should commission research to improve the evidence base regarding the deployment of automated and data collection … Read more
Government Response
The government partially accepts the recommendation, stating that workplace monitoring must comply with existing data protection law. It highlights safeguards in the Data Protection and Digital Information (No.2) Bill for automated decision-making and refers to its previously published AI Regulation White Paper and ongoing work with regulators like HSE, with a consultation response to be published later this year.
Department for Culture, Media and Sport
View details
8 Conclusion Accepted
Tenth Report - Connected tech: sma…
Develop ICO guidance on employment monitoring into a principles-based code for workplace tech.
The Information Commissioner’s Office should develop its existing draft guidance on “Employment practices: monitoring at work” into a principles-based code for designers and operators of workplace connected tech.
Government Response
The ICO plans to publish final guidance for employers on employee monitoring in October, which will replace parts of the 2011 Employers Code of Practice, following a public consultation that closed in January.
Department for Culture, Media and Sport
View details
9 Recommendation Rejected
Tenth Report - Connected tech: sma…
Keep data protection reforms under review to avoid undermining existing adequacy agreements.
The Government has not yet made a compelling case for reform of data protection. While we understand that some companies do not share data outside the UK, we are concerned that differing expectations between those companies and companies that do … Read more
Government Response
The government rejects the conclusion, asserting that the UK remains committed to high data protection standards and that the proposed Bill will simplify legislation while maintaining robust safeguards. It argues that EU adequacy does not require identical rules and that dialogue with the EU continues to ensure free data flows.
Department for Culture, Media and Sport
View details
10 Conclusion Rejected
Tenth Report - Connected tech: sma…
Reject executive overreach by preventing ICO powers without full parliamentary oversight.
We agree that reforming the governance and accountability structures of the Information Commissioner’s Office will be a positive step. We have previously recommended against executive overreach in the case of Ofcom and the Online Safety Bill; these concerns apply with … Read more
Government Response
The government rejects the conclusion, asserting that the reforms will enhance the ICO's accountability without undermining its independence, citing the Information Commissioner's agreement. It clarifies that the Strategic Statement of Priorities will be subject to parliamentary oversight and approval, ensuring accountability to Parliament.
Department for Culture, Media and Sport
View details
11 Recommendation Rejected
Tenth Report - Connected tech: sma…
Produce an implementation plan and commit to codifying remaining IoT security guidelines.
The introduction of the product security regime, which codifies three of the original thirteen guidelines set out in the Government’s internationally recognised 2018 Code of Practice for Consumer IoT Security, is an important first step in improving cybersecurity for connected … Read more
Government Response
The government rejects committing to codify the remaining guidelines in phases, stating it's not currently proportionate, but will monitor the impact of existing requirements and may mandate further ones if necessary.
Department for Culture, Media and Sport
View details
12 Conclusion Accepted
Tenth Report - Connected tech: sma…
Work with OPSS to promote data protection and security guidelines for IoT devices.
As the guidelines set out in the 2018 Code of Practice for Consumer IoT Security imply, cybersecurity and data protection are mutually reinforcing. Without cybersecurity, data cannot be meaningfully protected, while data protection can manage the risk and impact of … Read more
Government Response
The government commits that the Information Commissioner’s Office (ICO) will work with the Office for Product Safety Standards (OPSS), bilaterally or via the Digital Regulation Co-operation Forum, to support industry and ensure effective enforcement of new regulations.
Department for Culture, Media and Sport
View details
13 Recommendation Accepted
Tenth Report - Connected tech: sma…
Require providers to adopt network, storage, and cloud security standards for connected tech.
Improving cybersecurity of consumer connected devices is an important and positive step, but the proliferation of connected tech in enterprise settings and the gap in the regime regarding network, storage and cloud security still present likely attack vectors that will … Read more
Government Response
The government claims existing security requirements already apply to relevant software, including off-device elements, and highlights current initiatives like NCSC principles and ongoing work to understand risks in enterprise devices.
Department for Culture, Media and Sport
View details
14 Recommendation Accepted
Tenth Report - Connected tech: sma…
Support free courses, educators, and improve industry hiring to address cyber skills shortage.
We are concerned about the ongoing skills shortage, as recognised in both the Government and industry’s regular reporting on cybersecurity skills in the labour market, and believe that the shortage will be exacerbated further as the product safety regime comes … Read more
Government Response
The government acknowledges an ongoing cyber skills shortage and states it already funds free cyber bootcamps across the UK through the DfE and National Cyber Strategy Programme. It also commits to continuing engagement with industry on improving hiring and retention.
Department for Culture, Media and Sport
View details
15 Recommendation Accepted
Tenth Report - Connected tech: sma…
Improve gender and ethnic diversity in cyber workforce through new schemes and support.
We are particularly concerned that, despite the shortage of cyber skills in the UK, there are stubborn and significant disparities in the cyber workforce based on gender and race and ethnicity. The Government should reflect on the significant disparities in … Read more
Government Response
The government agrees to address diversity in the cyber workforce, highlighting ongoing initiatives like funding the National Centre for Computing Education, DSIT's 'Upskill in Cyber' programme, and funding the UK Cyber Security Council to develop professional recognition processes.
Department for Culture, Media and Sport
View details
16 Recommendation Rejected
Tenth Report - Connected tech: sma…
Ensure DSIT coordinates cyber policy and establish clear ministerial accountability for delivery.
The creation of the Department for Science, Innovation and Technology is an opportunity to ensure a comprehensive, joined up approach to cyber policy. We recommend that responsibilities for cyber policy is co-ordinated by the dedicated Department for Science, Innovation and … Read more
Government Response
The government rejects the recommendation, stating that the UK National Cyber Strategy sets out a whole-of-government approach where various ministers have specific cyber responsibilities, and argues that national security cannot be separated from broader cyber policy.
Department for Culture, Media and Sport
View details
17 Recommendation Rejected
Tenth Report - Connected tech: sma…
Ensure National Cyber Security Centre has capacity to meet growing demands for services
As the prevalence of connected technology grows, so too will the demand for the National Cyber Security Centre’s services. The Government should ensure that the National Cyber Security Centre has the capacity to meet demands for its services. It should … Read more
Government Response
The government partially agrees, stating it ensures the NCSC is sustainably funded but rejects explicitly addressing NCSC capacity issues in its regular labour market reporting, instead confirming that NCSC needs are considered within broader workforce capacity assessments.
Department for Culture, Media and Sport
View details
18 Recommendation Acknowledged
Tenth Report - Connected tech: sma…
Make tackling technology-facilitated abuse a priority across law enforcement and justice system
The Government must make tackling technology-facilitated abuse, or “tech abuse”, a priority. There is little evidence to suggest that our law enforcement and criminal justice system has been equipped to deal with the problems caused by tech abuse now, let … Read more
Government Response
The government agrees, stating that tackling technology-facilitated abuse is already recognised as a priority within existing strategies like the 2021 Tackling Violence Against Women and Girls Strategy, and commits to continuing to ensure it remains a priority.
Department for Culture, Media and Sport
View details
19 Recommendation Accepted
Tenth Report - Connected tech: sma…
Upskill law enforcement and improve crime data to enhance response to tech abuse
The Government’s response to tech abuse should involve upskilling law enforcement to improve the criminal justice response and increasing law enforcement’s and victims’ and survivors’ awareness of specialist services tackling violence against women and girls. The Government should also reflect … Read more
Government Response
The government partially agrees, committing to provide up to £8.3 million over two years for frontline support, including training on tech-facilitated abuse, and £150k for the Revenge Porn Helpline. It also commits to continuing to work with policing partners on developing skills and with police forces to ensure accurate use of the 'online flag' in crime data.
Department for Culture, Media and Sport
View details
20 Conclusion Rejected
Tenth Report - Connected tech: sma…
Convene cross-sector tech abuse working group to produce guidance and code of practice
We want to see words from cross-sector stakeholders on tech abuse now leading to positive actions. The Office for Product Safety and Standards should, at the earliest opportunity, convene a “tech abuse working group” with stakeholders, bringing industry together with … Read more
Government Response
The government rejects the recommendation, stating there are no plans for OPSS to convene a tech abuse working group as aspects of tech abuse are addressed in existing policies and legal frameworks, and it is not within OPSS's primary remit.
Department for Culture, Media and Sport
View details
1 Recommendation Accepted
Eleventh Report - Connected tech: …
Clarify how non-tech sector regulators will build AI expertise and ensure joined-up working.
We welcome the Government’s sensible proposals for regulating AI, including taking a sectoral approach underpinned by six cross-sector principles. However, there are outstanding weaknesses with this approach that the Government should clarify, including ensuring that sector regulators who do not … Read more
Government Response
The government recognises the need for central coordination for AI regulation and has already established a central risk function and is implementing a coordination function across government departments, with further details to be provided in their response to the white paper consultation.
Department for Culture, Media and Sport
View details
2 Recommendation Acknowledged
Eleventh Report - Connected tech: …
Set out a plan to upskill and resource non-digital sector regulators for the AI regime.
The Government should set out a plan to provide upskilling and resourcing for non- digital sector regulators to ensure they can meet the needs of the new cross-sector regulatory regime for AI.
Government Response
The government recognises the need for central coordination and states it is establishing a central risk function and implementing a coordination function. It will provide further details in a forthcoming response to the white paper consultation.
Department for Culture, Media and Sport
View details
3 Recommendation Deferred
Eleventh Report - Connected tech: …
Establish a discrete AI regulation co-ordination unit within Whitehall to publish regular progress reports.
The Government has announced that it intends to take on a central support role to buttress the regime for AI regulation and provide cross-sector cohesion. The Government should establish a discrete AI regulation co-ordination unit within Whitehall to ensure coherent … Read more
Government Response
The government's response discusses implementing and ratifying the Beijing Treaty on Audiovisual Performances and exploring stronger protections against the misuse of performers' likenesses, but does not address the recommendation to establish a discrete AI regulation co-ordination unit or publish regular reports.
Department for Culture, Media and Sport
View details
4 Conclusion Deferred
Eleventh Report - Connected tech: …
Current text and data mining framework appropriately balances innovation and creator rights.
We are pleased that the Government has been listening to stakeholders on text and data mining intellectual property for commercial benefit and we are encouraged that Ministers are looking again at this. The current framework, which provides an exemption for … Read more
Government Response
The government responds by discussing its commitment to implementing the Beijing Treaty on Audiovisual Performances, which relates to moral rights for performers and deepfakes, and not to the committee's observation on text and data mining intellectual property.
Department for Culture, Media and Sport
View details
5 Recommendation Deferred
Eleventh Report - Connected tech: …
Cease pursuing broad text and data mining copyright exemption; promote strong licensing schemes.
We recommend that the Government does not pursue plans for a broad text and data mining exemption to copyright. Instead, the Government should proactively support small AI developers in particular, who may find difficulties in acquiring licences, by reviewing how … Read more
Government Response
The government's response focuses on implementing the Beijing Treaty on Audiovisual Performances and addressing deepfakes, rather than directly addressing the recommendation concerning text and data mining copyright exemptions, licensing schemes, or a strong copyright regime for AI content.
Department for Culture, Media and Sport
View details
6 Recommendation Deferred
Eleventh Report - Connected tech: …
Regain creative industries' trust; ensure transparency, recourse, and redress for AI use.
The Government must work to regain the trust of the creative industries following its abortive attempt to introduce a broad text and data mining exemption. The Government should consider how creatives can ensure transparency and, if necessary, recourse and redress … Read more
Government Response
The government's response addresses the implementation of the Beijing Treaty on Audiovisual Performances and issues like deepfakes, sidestepping the recommendation to regain trust with creative industries and consider transparency and redress for wrongful AI use of creative works.
Department for Culture, Media and Sport
View details
7 Recommendation Accepted
Eleventh Report - Connected tech: …
Provide substantive update by year-end on managing AI's impact on creative industries.
The Government’s initial handing of the text and data mining exemption to copyright for AI development, though eventually correct, shows a clear lack of understanding of the needs of the UK’s creative industries. All branches of Government need to better … Read more
Government Response
The government highlights its existing Creative Industries Sector Vision and significant investments, including over £300 million in growth support and £75 million for the CoSTAR programme, to drive innovation and technology in the creative industries. It also mentions ongoing assessments and being informed by a Council for Science and Technology report.
Department for Culture, Media and Sport
View details
8 Conclusion Acknowledged
Eleventh Report - Connected tech: …
Ensure support for creative industries encourages artists' innovation in emerging technologies and cultural institutions' investment.
While institutions are understandably investing in products such as the metaverse and generative AI, this should not be to the exclusion of novel and emerging technologies, which are enabling artists to innovate and attract audiences. In order to encourage a … Read more
Government Response
The government outlines the five objectives and scope of its forthcoming Cultural Education Plan, which aims to support high-quality cultural education for children and young people and strengthen talent pipelines, and will be published in the coming months.
Department for Culture, Media and Sport
View details
9 Conclusion Acknowledged
Eleventh Report - Connected tech: …
Ensure Cultural Education Plan explicitly addresses digital skills shortages in creative technology sectors.
As we have repeatedly raised, the tech sector and creative industries are experiencing long-standing skills and personnel shortages that have capped the potential for growth. The Government’s forthcoming Cultural Education Plan should explicitly discuss how educators can combine digital skills … Read more
Government Response
The government outlines the objectives of its Cultural Education Plan, including strengthening talent pipelines into cultural and creative sectors, and states the plan will be published in the coming months. However, it does not explicitly commit to detailing how educators will combine digital and creative skills provision as requested.
Department for Culture, Media and Sport
View details
10 Recommendation Accepted
Eleventh Report - Connected tech: …
Urgently clarify the scope and timescale for the Cultural Education Plan.
The Government’s Cultural Education Plan Expert Advisory Panel has only recently been appointed, almost a year after the appointment of its chair and well over six months after Government said it would appoint its members. We have serious misgivings about … Read more
Government Response
The government clarified the scope and five objectives of the Cultural Education Plan, outlining the types of organisations it will cover. It committed to publishing the Plan "in the coming months."
Department for Culture, Media and Sport
View details
11 Recommendation Accepted in Part
Eleventh Report - Connected tech: …
Improve protections for creatives from generative AI misuse by urgently ratifying the Beijing Treaty.
The rapid growth of generative artificial intelligence and the impact this is already having on the ability of artists to protect their moral rights means that urgent action is necessary. The Government should improve protections for creatives to prevent misuse … Read more
Government Response
The government committed to implementing and ratifying the Beijing Treaty, expecting it to come into force in late 2024, fulfilling the request for ratification. However, for broader protections against AI misuse of likeness, it will only "explore the case for stronger protections" due to the Treaty's limitations.
Department for Culture, Media and Sport
View details
Government Response AI assessment · 31 of 23 classified
Accepted 13
Accepted in Part 1
Acknowledged 6
Deferred 4
Rejected 7
Total 23 recs + 8 conclusions
Correspondence 1 letter
9 Feb 2023 To committee Letter from John Edwards, Information Commissioner, relating to oral evidence on 17 January, 6 February 2023
Parliament page