Research Article
The Impact of IoT on Personal Data: Identification, Re-identification Risks, and Countermeasures
@INPROCEEDINGS{10.1007/978-3-032-43712-9_17, author={Chun-Hsien Sung}, title={The Impact of IoT on Personal Data: Identification, Re-identification Risks, and Countermeasures}, proceedings={Smart Grid and Internet of Things. 10th EAI International Conference, SGIoT 2026, Taichung, Taiwan, November 21--22, 2026, Proceedings}, proceedings_a={SGIOT}, year={2026}, month={11}, keywords={Identification Re-identification IoT Personal Data Boolean intersections}, doi={10.1007/978-3-032-43712-9_17} }- Chun-Hsien Sung
Year: 2026
The Impact of IoT on Personal Data: Identification, Re-identification Risks, and Countermeasures
SGIOT
Springer
DOI: 10.1007/978-3-032-43712-9_17
Abstract
This paper examines the de-identification provisions within personal data protection laws. With the widespread adoption of Internet of Things (IoT) devices and big data analytics, coupled with advancements in AI computing power, technology now enables deep identification and re-identification of databases. Consequently, under existing de-identification regulations, motivated individuals can still exploit technological means to bypass legal constraints and acquire personal data. Description begins with fundamental legal and technical perspectives to examine how current regulations define ‘personal data’ and to analyze ‘Boolean search’ technologies in data retrieval. It elucidates the regulatory loopholes concerning identification and re-identification that have emerged alongside technological advancements, and subsequently proposes recommended directions for future legal frameworks.