{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,26]],"date-time":"2026-07-26T00:35:39Z","timestamp":1785026139059,"version":"3.55.0"},"reference-count":40,"publisher":"SAGE Publications","issue":"10","license":[{"start":{"date-parts":[[2020,7,10]],"date-time":"2020-07-10T00:00:00Z","timestamp":1594339200000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100000266","name":"Engineering and Physical Sciences Research Council","doi-asserted-by":"publisher","award":["EP\/N02334X\/1"],"award-info":[{"award-number":["EP\/N02334X\/1"]}],"id":[{"id":"10.13039\/501100000266","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["journals.sagepub.com"],"crossmark-restriction":true},"short-container-title":["New Media &amp; Society"],"published-print":{"date-parts":[[2021,10]]},"abstract":"<jats:p>The right to data portability (RtDP), as outlined in the European Union\u2019s General Data Protection Regulation (GDPR), enables data subjects to transmit their data from one service to another. This is of particular interest in the evolving Internet of Things (IoT) environment. This research delivers the first empirical analysis detailing the exercisability of the RtDP in the context of consumer IoT devices and the information provided to users about exercising the right. In Study 1, we reviewed 160 privacy policies of IoT producers to understand the level of information provided to a data subject. In Study 2, we tested four widely available IoT systems to examine whether procedures are in place to enable users to exercise the RtDP. Both studies showcase how the RtDP is not yet exercisable in the IoT environment, risking consumers being unable to unlock the long-term benefits of IoT systems.<\/jats:p>","DOI":"10.1177\/1461444820934033","type":"journal-article","created":{"date-parts":[[2020,7,10]],"date-time":"2020-07-10T09:09:36Z","timestamp":1594372176000},"page":"2861-2881","update-policy":"https:\/\/doi.org\/10.1177\/sage-journals-update-policy","source":"Crossref","is-referenced-by-count":14,"title":["The exercisability of the right to data portability in the emerging Internet of Things (IoT) environment"],"prefix":"10.1177","volume":"23","author":[{"given":"Sarah","family":"Turner","sequence":"first","affiliation":[{"name":"University College London, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"July","family":"Galindo Quintero","sequence":"additional","affiliation":[{"name":"University College London, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Simon","family":"Turner","sequence":"additional","affiliation":[{"name":"University College London, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jessica","family":"Lis","sequence":"additional","affiliation":[{"name":"University College London, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2618-6208","authenticated-orcid":false,"given":"Leonie Maria","family":"Tanczer","sequence":"additional","affiliation":[{"name":"University College London, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"179","published-online":{"date-parts":[[2020,7,10]]},"reference":[{"key":"bibr1-1461444820934033","doi-asserted-by":"publisher","DOI":"10.1093\/idpl\/ipy001"},{"key":"bibr2-1461444820934033","doi-asserted-by":"crossref","unstructured":"Boniface C, Fouad I, Bielova N, et al. (2019) Security analysis of subject access request procedures: How to authenticate data subjects safely when they request for their data. Annual Privacy Forum 2019, Rome, Italy. Available at: https:\/\/hal.inria.fr\/hal-02072302\/document","DOI":"10.1007\/978-3-030-21752-5_12"},{"key":"bibr3-1461444820934033","doi-asserted-by":"crossref","unstructured":"Brass I, Tanczer LM, Carr M, et al. (2018) Standardising a moving target: the development and evolution of IoT security standards. In: Proceedings of the living in the Internet of Things conference 2018, London, 28\u201329 March. New York: IEEE. Available at: https:\/\/ieeexplore.ieee.org\/document\/8379711","DOI":"10.1049\/cp.2018.0024"},{"key":"bibr4-1461444820934033","doi-asserted-by":"publisher","DOI":"10.1016\/j.telpol.2006.04.001"},{"key":"bibr5-1461444820934033","unstructured":"Centre for Information Policy Leadership (2017) Comments by the Centre for Information Policy Leadership on the Article 29 data protection working party\u2019s \u2018guidelines on the right to data portability\u2019. Available at: https:\/\/www.informationpolicycentre.com\/uploads\/5\/7\/1\/0\/57104281\/cipl_comments_on_wp29_data_portability_guidelines_15_february_2017.pdf"},{"key":"bibr6-1461444820934033","unstructured":"Data Transfer Project (2018) White Paper. Available at: https:\/\/datatransferproject.dev\/dtp-overview.pdf"},{"key":"bibr7-1461444820934033","unstructured":"DCMS (2018) Code of practice for consumer IoT security. Available at: https:\/\/assets.publishing.service.gov.uk\/government\/uploads\/system\/uploads\/attachment_data\/file\/773867\/Code_of_Practice_for_Consumer_IoT_Security_October_2018.pdf"},{"key":"bibr8-1461444820934033","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2017.10.003"},{"key":"bibr9-1461444820934033","volume-title":"Proceedings of the 5th international management information systems conference","author":"Erkmen A","year":"2019"},{"key":"bibr10-1461444820934033","unstructured":"European Commission (2012) Commission proposes a comprehensive reform of data protection rules to increase users\u2019 control of their data and to cut costs for businesses. Available at: http:\/\/europa.eu\/rapid\/press-release_IP-12-46_en.htm"},{"key":"bibr11-1461444820934033","unstructured":"European Commission (2019) Special Eurobarometer, a487. Available at: https:\/\/ec.europa.eu\/commfrontoffice\/publicopinion\/index.cfm\/ResultDoc\/download\/DocumentKy\/86886"},{"key":"bibr12-1461444820934033","doi-asserted-by":"crossref","unstructured":"Fritsch E, Shklovski I, Douglas-Jones R (2018) Calling for a revolution: an analysis of IoT manifestos. In: CHI conference on human factors in computing systems 2018, Montreal, Canada, April. Available at: https:\/\/dl.acm.org\/citation.cfm?id=3173876","DOI":"10.1145\/3173574.3173876"},{"key":"bibr13-1461444820934033","unstructured":"Harris Interactive (2019) Information rights strategic plan: trust and confidence. Available at: https:\/\/ico.org.uk\/media\/about-the-ico\/documents\/2615515\/ico-trust-and-confidence-report-20190626.pdf"},{"key":"bibr14-1461444820934033","doi-asserted-by":"publisher","DOI":"10.1080\/13600834.2019.1573501"},{"key":"bibr15-1461444820934033","unstructured":"ICO (2017) Overview of the general data protection regulation. Available at: https:\/\/ico.org.uk\/media\/for-organisations\/data-protection-reform\/overview-of-the-gdpr-1-13.pdf"},{"key":"bibr16-1461444820934033","unstructured":"ICO (n.d.) Your right to data portability. Available at: https:\/\/ico.org.uk\/your-data-matters\/your-right-to-data-portability"},{"key":"bibr17-1461444820934033","doi-asserted-by":"publisher","DOI":"10.4135\/9781483399782"},{"key":"bibr18-1461444820934033","doi-asserted-by":"publisher","DOI":"10.1145\/3281444"},{"issue":"1","key":"bibr19-1461444820934033","first-page":"14","volume":"44","author":"Johnson LK","year":"2002","journal-title":"MIT Sloan Management Review"},{"key":"bibr20-1461444820934033","doi-asserted-by":"publisher","DOI":"10.1093\/idpl\/ipy007"},{"key":"bibr21-1461444820934033","doi-asserted-by":"publisher","DOI":"10.14763\/2019.2.1409"},{"key":"bibr22-1461444820934033","doi-asserted-by":"publisher","DOI":"10.1080\/13600834.2019.1644068"},{"key":"bibr23-1461444820934033","doi-asserted-by":"publisher","DOI":"10.1080\/1369118X.2018.1486870"},{"key":"bibr24-1461444820934033","doi-asserted-by":"publisher","DOI":"10.1080\/1369118X.2016.1254268"},{"key":"bibr25-1461444820934033","doi-asserted-by":"crossref","unstructured":"Renaud K, Shepherd LA (2018) How to make privacy policies both GDPR-compliant and usable. In: Proceedings of the 2018 international conference on cyber situational awareness, data analytics and assessment, Glasgow, 11\u201312 June. Available at: https:\/\/arxiv.org\/abs\/1806.06670","DOI":"10.1109\/CyberSA.2018.8551442"},{"key":"bibr26-1461444820934033","unstructured":"Statista (2019) Leading search engines ranked by market share UK. Available at: https:\/\/www.statista.com\/statistics\/280269\/market-share-held-by-search-engines-in-the-united-kingdom\/"},{"key":"bibr27-1461444820934033","unstructured":"Stevens B (2018) Amazon now 5th largest retailer in UK. Retail Gazette, 16 April. Available at: https:\/\/www.retailgazette.co.uk\/blog\/2018\/04\/amazon-now-5th-largest-retailer-uk\/"},{"key":"bibr28-1461444820934033","doi-asserted-by":"publisher","DOI":"10.1108\/14636690710762101"},{"key":"bibr29-1461444820934033","first-page":"37","volume-title":"Rewired: Cybersecurity Governance","author":"Tanczer LM","year":"2019"},{"key":"bibr30-1461444820934033","unstructured":"Tech UK (2018) The state of the connected home: edition two. Available at: https:\/\/www.techuk.org\/insights\/news\/item\/13914-connected-home-device-ownership-up-but-consumers-remain-sceptical"},{"key":"bibr31-1461444820934033","doi-asserted-by":"crossref","unstructured":"Tolk A (2013) Interoperability, composability, and their implications for distributed simulation. In: Proceedings of the 17th international symposium on distributed simulation and real time applications, Washington, DC, 30 October\u20131 November. New York: ACM. Available at: https:\/\/dl.acm.org\/citation.cfm?id=2570870","DOI":"10.1109\/DS-RT.2013.8"},{"key":"bibr32-1461444820934033","doi-asserted-by":"publisher","DOI":"10.1145\/2818048.2819992"},{"key":"bibr33-1461444820934033","volume-title":"New Device? Looks Nice: But What\u2019s Going to Happen to Your Data?","author":"Turner S","year":"2019"},{"key":"bibr34-1461444820934033","doi-asserted-by":"publisher","DOI":"10.1007\/s00779-017-1069-2"},{"issue":"1","key":"bibr35-1461444820934033","doi-asserted-by":"crossref","first-page":"42","DOI":"10.2966\/scrip.150118.42","volume":"15","author":"Ursic H","year":"2018","journal-title":"SCRIPTed: A Journal of Law, Technology & Society"},{"key":"bibr36-1461444820934033","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2016.11.012"},{"key":"bibr37-1461444820934033","doi-asserted-by":"publisher","DOI":"10.1080\/1369118X.2019.1646777."},{"key":"bibr38-1461444820934033","doi-asserted-by":"crossref","unstructured":"Wong J, Henderson T (2018) How portable is portable? In: Proceedings of the 2018 ACM international joint conference and 2018 international symposium on pervasive and ubiquitous computing and wearable computers, Singapore, 8\u201312 October. New York: ACM. Available at: https:\/\/dl.acm.org\/citation.cfm?id=3274152","DOI":"10.1145\/3267305.3274152"},{"key":"bibr39-1461444820934033","doi-asserted-by":"publisher","DOI":"10.1093\/idpl\/ipz008"},{"key":"bibr40-1461444820934033","unstructured":"WP29 (2016) Guidelines on the right to data portability. Available at: https:\/\/ec.europa.eu\/newsroom\/article29\/item-detail.cfm?item_id=611233"}],"container-title":["New Media &amp; Society"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/journals.sagepub.com\/doi\/pdf\/10.1177\/1461444820934033","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/journals.sagepub.com\/doi\/full-xml\/10.1177\/1461444820934033","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/journals.sagepub.com\/doi\/pdf\/10.1177\/1461444820934033","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,2]],"date-time":"2026-05-02T03:50:31Z","timestamp":1777693831000},"score":1,"resource":{"primary":{"URL":"https:\/\/journals.sagepub.com\/doi\/10.1177\/1461444820934033"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,7,10]]},"references-count":40,"journal-issue":{"issue":"10","published-print":{"date-parts":[[2021,10]]}},"alternative-id":["10.1177\/1461444820934033"],"URL":"https:\/\/doi.org\/10.1177\/1461444820934033","relation":{},"ISSN":["1461-4448","1461-7315"],"issn-type":[{"value":"1461-4448","type":"print"},{"value":"1461-7315","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,7,10]]}}}