The Government is aware of reports that some internet-connected children’s toys potentially pose a risk in terms of cybersecurity. As with all internet connected devices, the quality of these products varies.
The cyber security of the UK is a top priority for the Government. Manufacturers of internet-connected devices should ensure those devices have appropriate security measures built in and seek to ensure emerging technologies are secure by default.
These include requiring personal data to be processed fairly and lawfully; to be accurate and up-to-date; not to be kept for longer than is necessary; and to be processed in accordance with the rights of the data subjects under the DPA. Failure to comply with the Act is an offence. Further information about these obligations can be found on the ICO’s website at: