Privacy in AI and the IoT: The privacy concerns of smart speaker users and the Personal Information Protection Law in China

Abstract

In recent years, the development of Artificial Intelligence (AI) and the Internet of things (IoT) has attracted a lot of attention. One IoT device is the smart speaker that is equipped with an integrated assistant controlled by spoken commands. In the global smart speaker market, Chinese brands account for a significant share. Since smart speakers have a natural advantage when collecting user data in diverse scenarios, privacy and personal information protection have become crucial issues for both smart speaker manufacturers and users in China. This paper applies the socio-technical system (STS) framework to portray the technology subsystem, the industry/market subsystem and the regulators, law/regulation subsystem that are related to smart speakers in China, and how they interact with each other. It also uses focus group discussions to understand the smart speaker users' privacy concerns and the smart speaker industry's implementation of personal information protection. By employing the document analysis method, this study analyzes the laws and regulations related to privacy and personal information protection in the context of AI and the IoT. In particular, the potential impacts of the Personal Information Protection Law (PIPL) on smart speakers are discussed in detail. With its goal of balancing personal information protection and technological development, this paper provides recommendations for the regulatory bodies and the smart speaker industry players in China that can shed light on other countries and regions.