Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, what steps her Department is taking to ensure that internet-connected smart TVs do not monitor users’ activity without prior, informed consent; and if she will consider requiring such devices to use an opt-in system for data collection.

All organisations in the UK that process personal data must comply with the requirements of the UK GDPR, including ensuring any processing is lawful, fair and transparent. Providers of smart devices must consider how their products implement these principles effectively and include appropriate safeguards to protect people's rights.

In addition, the Privacy and Electronic Communications Regulations 2003 include more specific rules on the use of technologies such as cookies on people’s smart devices. This is prevented unless an exception applies, for example, where the user has given their consent.

The Information Commissioner is currently consulting on a revised version of guidance on the use of storage and access technologies.