Designing Privacy by Design IoT Applications
Research Programme

Designing Privacy by Design IoT Applications

(2018-2022)
Privacy Parrot Privacy Patterns GDPR UX Design Software Engineering
Internet of Things (IoT) Human Computer Interaction (HCI) Software Engineering (SE) Privacy (P)

Project Overview

IoT applications require both software and hardware to cooperate across multiple nodes with different capabilities, creating complexity that often causes privacy considerations to be overlooked during development. Regulations such as GDPR demand privacy by design, yet developers of IoT systems frequently lack practical tools and methodologies to embed privacy thinking from the earliest stages of the software lifecycle. This project develops an interactive design methodology to integrate privacy-preserving techniques into IoT application development. The research creates PRIVACY PARROT, an interactive collaborative tool designed for use by business analysts, requirements engineers, UX designers, and software engineers. The tool provides a library of privacy patterns that map common IoT data flows to appropriate mitigation strategies, enabling teams to reason about privacy risks during requirements gathering and architectural design.

The project reviews existing design notations and tools for capturing non-functional requirements, then co-designs a privacy-aware IoT methodology through workshops. Industry practitioners and academic partners including PETRAS, My Data Fix, and Obeo contribute expertise to ensure that the resulting methodology addresses real-world development challenges and integrates smoothly into existing workflows.

Evaluation studies assess the tool’s effectiveness in enhancing engineers’ privacy knowledge and awareness. The findings demonstrate that structured privacy guidance during design leads to more privacy-considerate IoT applications across both regulated and unregulated domains, providing evidence that early-stage privacy tooling can meaningfully improve outcomes for end users.

Demo

Team

Partners

Repositories

Outcomes

Journal

Designing Privacy-Aware IoT Applications for Unregulated Domains

Nada Alhirabi, Stephanie Beaumont, Omer Rana, and Charith Perera,

ACM Transactions on Internet of Things (TIOT), Volume 5, Issue 2, Article No: 11, 1-32, 2024

Journal

PARROT: Interactive Privacy-Aware Internet of Things Application Design Tool

Nada Alhirabi, Stephanie Beaumont, Jose Tomas Llanos, Dulani Meedeniya, Omer Rana, and Charith Perera,

In Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies (IMWUT), Volume 7, Issue 1(1), pp 1–37, March, 2023

Conference

PARROT: Privacy by Design Tool for Internet of Things

Nada Alhirabi, Omer Rana, and Charith Perera,

In Proceedings of the 2022 IEEE/ACM Seventh International Conference on Internet-of-Things Design and Implementation (IoTDI) 2022, pp. 107-108

Conference

Privacy-Patterns for IoT Application Developers

Nada Alhirabi, Stephanie Beaumont, Omer Rana, and Charith Perera,

In Adjunct Proceedings of the 2022 ACM International Joint Conference on Pervasive and Ubiquitous Computing (UbiComp/ISWC '22), Association for Computing Machinery, New York, NY, USA, 7–9

Journal

Security and Privacy Requirements for the Internet of Things: A Survey

Nada Alhirabi, Omer Rana, Charith Perera,

ACM Transactions on Internet of Things (TIOT), Volume 2, Issue 1(6), February 2021 (37)