Factors influencing user adherence towards privacy standards in the usage of Internet of Things devices in South Africa

Bazanye, Kizito Philip

Factors influencing user adherence towards privacy standards in the usage of Internet of Things devices in South Africa

Master Thesis

2022

Abstract

Background: The Internet of Things (IoT) is considered an essential element of the Fourth Industrial Revolution (4IR). IoT devices are vulnerable to attacks. These vulnerabilities affect all aspects of daily life including retail and home automation interconnected by basic networking. The vulnerable end nodes may be machines, human to machine interactions, and the integration points of human-to-human communication. Problem statement: The onset of the Covid-19 pandemic ushered in increased use of IoT devices. The increased use of IoT devices perpetuated negligent use and therefore cyber-attacks exposed South African IoT users' data harvested through these devices. Purpose of research: The objective of the study is to conceptualise and understand what factors influence IoT device users to adhere to recommended IoT device privacy standards in South Africa. Design/methodology/approach: This qualitative, interpretivist, cross-sectional exploratory research was guided by a three-phase approach using Activity Theory. The ontological stance adopted is subjectivism. The interview questions were derived from the Activity Theory model and themes identified in the literature reviewed. The qualitative data collected from the semistructured interviews was analysed using deductive thematic analysis by linking of elements to the six components of Activity Theory. Findings: The lack of privacy adherence is driven by a lack of trust in IoT devices and service providers as well as convenience and health factors. Additionally, users' personality, awareness and surroundings are major influencers to IoT device privacy standards' adherence. Contribution and implication: This study conceptualises how IoT device privacy standards adherence can further be promoted with the increased adoption of such technologies. Further research may need to examine the specific impact of legislation on users and IoT device privacy. Additionally, the impact of third-party IoT service providers on IoT privacy models in South Africa needs to be investigated.