In the News

Congress sees security risk in 'Internet of Things'

Congress sees security risk in 'Internet of Things'

The "Internet of Things" has become the latest big thing on Capitol Hill.

As more Americans connect to the Internet through everything from fitness bracelets to coffee makers, Congress is looking at ways to spur innovation while ensuring that hackers don't exploit the growing number of smart gadgets to steal personal data.

Worried that lawmakers are lagging behind on the rapidly evolving technology, two tech-savvy members of Congress — Reps. Darrell Issa, R-Calif., and Suzan DelBene, D-Wash. — have formed a new Congressional Caucus on the Internet of Things to educate members about the issue.

At the same time, a bipartisan group of four senators has pushed to have the Senate's first-ever hearing on the subject. That hearing, "The Connected World: Examining the Internet of Things," is scheduled for Wednesday before the Senate Commerce, Science and Transportation Committee.

Congress' growing interest in the topic comes as the number of Internet-connected devices tops 25 billion worldwide, according to a new report by the Federal Trade Commission. That number is expected to double in the next five years, according to experts cited by the report.

International Data Corp., a research firm specializing in consumer technology, estimates that Internet-connected devices (not including computers, tablets and smartphones) will generate nearly $9 trillion worldwide by 2020.

"Technology is revolutionizing the way consumers use cars, homes, work spaces and everyday items," said Issa, former chairman of the Consumer Electronics Association. "These devices raise both opportunities and questions about regulatory policy, spectrum space, privacy and more."

The list of Internet-connected things, which is growing by the day, includes baby monitors with sensors that send information to parents' smartphones about their infant's breathing and temperature; thermostats that use sensors, weather forecasts and the activity in a home to control the temperature; and Wi-Fi-enabled coffee makers that can be controlled by a smartphone.

All of this is news to quite a few members of Congress, some of whom can still be seen roaming the halls with flip phones. (Sen. Charles Schumer, D-N.Y., is among the more high-profile flip-phone users, although his staff his quick to point out that he also has an iPad.)

"Part of the reason for our caucus is to inform members about what's going on," said DelBene, who wears an Internet-connected fitness bracelet to work and is a former Microsoft executive and former CEO of a business software company. "The more we educate folks, the more it will help them make informed policy decisions."

Issa and DelBene say the issue is a rare bipartisan one. Both sides agree on the need to protect consumers' privacy as sensitive personal data is sent and received by a growing number of devices. The goal is to prevent cyber criminals from hacking into consumers' data while also protecting the information from the prying eyes of government, employers and insurance companies.

The risk of living in an increasingly wired world was underscored Monday when Sen. Ed Markey, D-Mass., released a report revealing how Americans' computerized cars are vulnerable to being hacked.

"Even as we are more connected than ever in our cars and trucks, our technology systems and data security remain largely unprotected," said Markey, a member of the Senate Commerce panel.

Lawmakers agree that whatever government regulations are proposed to enhance security should not stifle innovation.

"I'm hoping we can accept some basic premises on a bipartisan basis," said Sen. Brian Schatz, D-Hawaii, who pushed for Wednesday's hearing. "Democrats, who are more inclined toward regulation, agree that this should be more private-sector driven. And Republicans, who can be somewhat allergic to regulation, agree that government should have a light touch here but not no touch at all.

A Federal Trade Commission report released late last month said it would be premature for Congress to pass legislation directly tied to the Internet of Things since the technology is evolving so rapidly.

But the FTC recommended that Congress pass a data breach bill that would notify consumers quickly if their personal information has been compromised. President Obama has called for legislation that would require companies to notify consumers of a data breach within 30 days. Congress already has held hearings on the best way to craft a bill.

The commission also called on Congress to pass broad-based privacy legislation that does not single out any specific technology.

"I think we have to be more forward-looking when considering any legislation dealing with technology," DelBene said. "Congress should ... at least keep pace with technological advances."