Privacy Engineering for Domestic IoT: Enabling Due Diligence.

The EU's General Data Protection Regulation (GDPR) has recently come into effect and insofar as Internet of Things (IoT) applications touch EU citizens or their data, developers are obliged to exercise due diligence and ensure they undertake Data Protection by Design and Default (DPbD). GDPR mandates the use of Data Protection Impact Assessments (DPIAs) as a key heuristic enabling DPbD. However, research has shown that developers generally lack the competence needed to deal effectively with legal aspects of privacy management and that the difficulties of complying with regulation are likely to grow considerably. Privacy engineering seeks to shift the focus from interpreting texts and guidelines or consulting legal experts to embedding data protection within the development process itself. There are, however, few examples in practice. We present a privacy-oriented, flow-based integrated development environment (IDE) for building domestic IoT applications. The IDE enables due diligence in (a) helping developers reason about personal data during the actual in vivo construction of IoT applications; (b) advising developers as to whether or not the design choices they are making occasion the need for a DPIA; and (c) attaching and making available to others (including data processors, data controllers, data protection officers, users and supervisory authorities) specific privacy-related information that has arisen during an application's development.

The role of community health workers in supporting South Africa's HIV/ AIDS treatment programme.

Community health workers deployed around South Africa's primary health care clinics, supply indispensable support for the world's largest HIV/AIDS treatment programme. Interviews with these workers illuminated the contribution they make to anti-retroviral treatment (ART) of HIV/AIDS patients and the motivations that sustain their engagement. Their testimony highlights points of stress in the programme and supplies insights into the quality of its implementation. Finally, the paper addresses issues about the sustainability of a programme that depends on a group of workers who are not yet fully incorporated into the public sector.

Building accountability into the Internet of Things: the IoT Databox model.

This paper outlines the IoT Databox model as a means of making the Internet of Things (IoT) accountable to individuals. Accountability is a key to building consumer trust and is mandated by the European Union's general data protection regulation (GDPR). We focus here on the 'external' data subject accountability requirement specified by GDPR and how meeting this requirement turns on surfacing the invisible actions and interactions of connected devices and the social arrangements in which they are embedded. The IoT Databox model is proposed as an in principle means of enabling accountability and providing individuals with the mechanisms needed to build trust into the IoT.

When free healthcare is not free. Corruption and mistrust in Sierra Leone's primary healthcare system immediately prior to the Ebola outbreak.

INTRODUCTION: Sierra Leone is one of three countries recently affected by Ebola. In debates surrounding the circumstances that contributed to the initial failure to contain the outbreak, the word 'trust' is often used: In December 2014, WHO director Margret Chan used 'lack of trust in governments'; The Lancet's Editor-in-Chief, wrote how Ebola has exposed the '… breakdown of trust between communities and their governments.' This article explores the lack of trust in public healthcare providers in Sierra Leone, predating the Ebola outbreak, apparently linked to widespread petty corruption in primary healthcare facilities. It compares four NGO-supported accountability interventions targeting Sierra Leone's primary health sector. METHODS: Field research was conducted in Kailahun, Kono and Tonkolili Districts, based on interviews with health workers and focus group discussions with primary healthcare users. RESULTS: Field research showed that in most clinics, women and children entitled to free care routinely paid for health services. CONCLUSIONS: A lack of accountability in Sierra Leone's health sector appears pervasive at all levels. Petty corruption is rife. Understaffing leads to charging for free care in order to pay clinic-based 'volunteers' who function as vaccinators, health workers and birth attendants. Accountability interventions were found to have little impact on healthworker (mis)behaviour.