Amazon: Require Privacy Policies for Internet-Connected Devices
Alarmingly, countless products connected to the internet are sold without any information about how they handle and use personal data. The problem is so significant that Mozilla was unable to fully evaluate numerous products in *Privacy Not Included, a shopping guide that ranks popular devices’ privacy and security features, because there simply was not enough publicly available information about them.
From thermostats and doorbells to oil diffusers and watches, more and more internet-connected devices are now on the market and many of these connected products are manufactured and sold by questionable companies, often without even a website to back them up. It’s alarming to see Amazon allow these products on its platform when the manufacturers haven’t even taken basic steps for user privacy.
The result? More insecure products in homes, and more consumers vulnerable to fraud and snooping.
Consumer privacy is paramount to Mozilla. This ask is the next step in our work to make the consumer IoT ecosystem more private and secure. Last year, we debuted our five minimum security guidelines for IoT – standards that were used to research the *Privacy Not Included guide. Now, we’re urging one of the world’s largest retailers to enforce one of those guidelines: mandatory privacy policies.
We urge Amazon to take this important step toward protecting consumers’ privacy. When a company the size of Amazon speaks, manufacturers listen. That’s why we’ve pressured Amazon to do better in the past, and why we cheer when our allies do the same.