Careers

Experiences

Industries

Offices

Our Firm

Pages

Our People

Updates

Practices

Home - Warner Norcross + Judd LLP

A recent decision by the U.S. Court of Appeals for the Sixth Circuit shed light on theories plaintiffs will use in privacy litigation against owners of Internet of Things (IoT) connected devices.

contentpilot/introduction

Already known in the legal blogosphere as "the butt dialing case," the court's July 21, 2015 opinion in <a href="http://www.ca6.uscourts.gov/opinions.pdf/15a0157p-06.pdf" target="_blank" rel="noreferrer noopener">Huff v. Spaw</a> considered federal eavesdropping claims brought against Carol&nbsp;Spaw,&nbsp;who received--and recorded--an accidentally dialed call. &nbsp;The Sixth Circuit concluded that James Huff,&nbsp;who accidentally made the call, did not have a reasonable expectation of privacy in the conversation, because, accidentally or not, he is the one who placed the call. The person&nbsp;to whom he was speaking, however--his wife, Bertha Huff--did state&nbsp;a valid claim for eavesdropping, because she could not have known under the circumstances that she was being recorded by the phone in her husband's pocket.

core/paragraph

The ramifications of this decision extend far beyond phones. The court's own opinion drew the connection between this holding and IoT devices when it observed that James Huff's claims would have failed for the same reason "if he inadvertently used a webcam to broadcast his in-home activities to ...&nbsp;third parties," citing, of all things, the 1999 movie American Pie. By the same token, of course, Mrs. Huff would have had a claim if someone had watched her in the house because James had left the webcams on. Eavesdropping case law on this point is legion, both here in Michigan and elsewhere, in the context of men who install secret cameras to record, for example, <a href="https://scholar.google.com/scholar_case?case=4119461990554493421&amp;q=eavesdropping+michigan+secret+camera+dressing+room&amp;hl=en&amp;as_sdt=4,23" target="_blank" rel="noreferrer noopener">showers</a>&nbsp;or <a href="https://scholar.google.com/scholar_case?case=18370225821129999110&amp;q=eavesdropping+michigan+secret+camera&amp;hl=en&amp;as_sdt=4,23" target="_blank" rel="noreferrer noopener">sexual encounters.</a>&nbsp;The FTC has likewise <a href="https://www.ftc.gov/enforcement/cases-proceedings/122-3090/trendnet-inc-matter" target="_blank" rel="noreferrer noopener">made clear</a> that intercepting broadcasts from in-home IoT webcams invades the privacy rights of those in the home.

This point was made even clearer to me during the <a href="https://iapp.org/connect/chapters/" target="_blank" rel="noreferrer noopener">IAPP KnowledgeNet</a> meeting I attended yesterday in Detroit on IoT privacy issues. As a group, we considered the implications of that stereotypical IoT device, the connected refrigerator. In this hypothetical, the smart fridge collected every type of data imaginable, including video, user biometrics, and the like. But in discussing the steps that should be taken to obtain user consent to the collection and use of this data, it became clear that typically approaches to obtaining informed consent (i.e., clicking "I Agree" to a privacy policy once) wouldn't fit. That's because it's not just the purchaser of the device or even the owner of the home who uses the fridge. It's also the rest of the family, their houseguests, and any subsequent purchasers of the fridge. Some of these users may be minors, intoxicated, or otherwise incapable of giving consent. &nbsp;In reality, most would not even realize the extent of data being collected. Just like Mrs. Huff, therefore, they may retain a valid expectation of privacy--and the owner of the device may be the one responsible for allowing that privacy to be invaded.

As Shakespeare may have said if he had written <a href="http://nfs.sparknotes.com/tempest/page_188.html" target="_blank" rel="noreferrer noopener">The Tempest</a> today, "Oh brave new world, that has such fridges in 't!"

Augmented Legality

Emerging Media and Technologies

Partner

Brian D. Wassom

Information Technology Transactions

The Internet of Things That Eavesdrop and Invade Privacy

The Warner Norcross + Judd LLP lawyer responsible for the contents of our advertising and this website is managing partner <a href="/people/mark-j-wassink/" aria-label="Mark Wassink">Mark Wassink</a> who can be reached at <a href="mailto:mwassink@wnj.com" aria-label="email Mark Wassink">mwassink@wnj.com</a> or 616.752.2189. Please read our full <a href="/privacy-policy/" aria-label="see privacy policy">privacy policy</a> available on our website.

The Internet of Things That Eavesdrop and Invade Privacy

professionals