SecurityWorldMarket

16/03/2021

New privacy protection standard for smart cities

Geneva, Switzerland

The new recommendations apply to organisations and stakeholders concerned with the delivery, use or availability of a service in a smart city ecosystem.

A new technical specification has just been published that aims to help maintain the personal privacy and security protection of citizens within the complexities of smart city systems and interconnections.

Cloud computing, the Internet of Things, mobile networks and artificial intelligence are just some of the tools cities use to increase efficiency and improve the quality of life of their citizens, yet they also expose us to risks and vulnerabilities related to personal privacy and security.

ISO/IEC TS 27570, Privacy protection – Privacy guidelines for smart cities, provides recommendations and guidance on the management of privacy and on the use of supporting standards. These recommendations apply to organisations and stakeholders concerned with the delivery, use or availability of a service in a smart city ecosystem, where many technologies, systems and stakeholders interact in many and complex ways.

Prof. Kai Rannenberg, Convenor of the group of experts that developed the technical specification, said this complexity can pose challenges to privacy protection, “but there are many different standards that can be used, including those for big data, cloud computing, IT governance and much more”.

“The key is knowing which one is most appropriate and how. ISO/IEC TS 27570 provides guidance on how to benefit from the standards available in the most effective way.”

The document takes a multiple-agency as well as a citizen-centric viewpoint and provides guidance on how privacy standards can be used at a global level and at an organisational level for the benefit of citizens.

What’s more, it will pave the way to future privacy standards for smart cities, including those for communication, privacy management plans and policy making, as well as consent management, to name a few.

ISO/IEC TS 27570 is applicable to all types and sizes of organisation, including public and private companies, government entities and not-for-profit organisations that provide services in smart city environments.

The technical specification was developed by subcommittee SC 27, Information security, cybersecurity and privacy protection, of joint technical committee ISO/IEC JTC 1, the information technology arm of ISO and the International Electrotechnical Commission (IEC). The secretariat of SC 27 is held by DIN, ISO’s member for Germany.


Tags


Product Suppliers
Back to top