Smart devices are becoming more and more popular in UK households. The fact that they can interact with individuals in their homes, for example by showing a video on a smart TV, displaying an image on a smart assistant, or playing a sound on the smart speaker, makes them the most likely next frontier for organisations to communicate to the public. These messages could potentially be tailored to the audience's demographics or preferences, which is made even more possible with the data collected from users via a widening range of smart devices. Public authorities and civil society organisations are among those who will show potential interest in leveraging these new communicative channels to deliver messages that are of public importance, ranging from public health matters to climate change issues. While some members of the public will have an interest in receiving these messages via smart devices (or even actively subscribing to some of those organisations), there will be likely concerns around the use of these new technologies, such as privacy, security and agency. At the moment, while there has been emerging research suggesting public concerns about related technologies (for example, online targeting), it is not clear how these concerns may play out in the smart home environment, or under what conditions such practices can be acceptable. Evidence is currently lacking to inform policymaking or production of specific guidelines. Focusing on public communications allows us to explore the potential public interests in personalised smart messaging (unlike commercial advertising, where mostly private interests are involved) while avoiding what has been proved highly sensitive and controversial (such as political microtargeting). The Internet of Tactical Engagement (IoTE) project will therefore investigate the attitudes of the public towards public authorities and civil society organisations using smart home products to message users. The project will involve stakeholders, including public authorities, civil society organisations and policymakers, to capture their understandings of the current landscape and the prospect of smart engagement. A series of situational scenarios will then be created as a means to engage with the public and to gain insights into their perceptions of these new developments. This will provide the necessary evidence for organisations to consider how to utilise the new technological possibilities in ways acceptable and trustworthy to smart product users, and for policymakers to decide whether further safeguards will be needed in anticipation of this new reality.

Lifelogging and self-quantifying used to be niche areas for athletes, people with certain medical conditions, and those with the time, money, and motivation to use expensive specialist equipment to monitor themselves. Now the technology for ordinary people to track and analyze many aspects of their lives is becoming both affordable and invisible, requiring little effort or expense to collect. There are many business models based on mining the so-called 'digital exhaust' of people's online activity to provide apparently free services. The fact that so many more people are now able to automatically log so many aspects of their lives (beyond which web pages they visited) is creating opportunities for new business models to actually provide services for the people generating the data. For example, some people may wish to sell their data for cash rather than give it away, some may wish to donate it to worthy scientific causes, such as health research, while others may wish to share data only in a non-identifying aggregated form or perhaps not at all. Lifelogging data can range from relatively benign (such as number of keystrokes typed in a day) to the highly personal (such as the emotional arousal state) and the ways in which the data is shared may be highly nuanced. This project seeks to understand how the privacy and sharing requirements vary across different demographic groups and to build a sharing and privacy infrastructure specifically designed for lifelogging data.

Vision: In this fellowship, I aim to address a major challenge in the adoption of user-centred privacy-enhancing technologies: Can we leverage novel architectures to provide private, trusted, personalised, and dynamically- configurable models on consumer devices to cater for heterogenous environments and user requirements? Importantly, such properties must provide assurances for the data integrity and model authenticity/trustworthiness, while respecting the privacy of the individuals taking part in training and improving such models. Innovation and adoption in this space require collaborations between device manufacturers, platform providers, network operators, regulators, and the users. The objectives of this fellowship will take us far beyond the status-quo, one-size-fits-all solutions, providing a framework for personalised, trustworthy, and confidential edge computing, with ability to respect dynamic policies, in particular when dealing with sensitive models and data from the consumer Internet of Things (IoT) devices. In this fellowship, I aim to address these challenges by designing and evaluating an ecosystem where analytics from, and interaction with, consumer IoT devices can happen with trust in the model and authenticity, while enabling auditing and personalisation, hence pushing today's boundaries on all-or-nothing privacy and enabling new economic models. This approach requires designing for capabilities beyond the current trusted memory and processing limitations of the devices, and a cooperative dialogue and ecosystem involving service providers, ISPs, regulators, device manufacturers, and the end users. By designing our framework around the latest architectural and security features in edge devices, before they become commercially available, we provision for Model Privacy and a User-Centred IoT ecosystem, where service providers can have trust in the authenticity, attestability, and trustworthiness of the valuable models running on user devices, without the users having to reveal sensitive personal information to these cloud-based centralised systems. This approach will enable advanced and sensitive edge-based analytics to be performed, without jeopardising the individuals' privacy. Importantly, we aim to integrate mechanisms for data authenticity and attestation into our proposed framework, to enable trust in models and the data used by them. Such privacy-preserving technologies have the capacity to enable new form of sensitive analytics, without sharing raw data and thereby providing legal balancing capabilities that might enable certain sensitive (or currently unlawful) data analysis.

Despite being asked to "agree" constantly to terms of service, we do not currently have "meaningful consent." It is unclear whether having simple and meaningful consent mechanisms would change business fundamentally or enhance new kinds of economics around personal data sharing. Since consent is deemed necessary and part of a social contract for fairness, however, without meaningful consent, that social contract is effectively broken and the best intent of our laws undermined. Our research challenges to address this gap are interdisciplinary: meaningful consent has implications for transforming current digital economy data practices; change will require potentially new business models, and certainly new forms of interaction to highlight policy without over burdening citizens as we go about our business. We have set out a vision to achieve an understanding of meaningful consent through a combination of interdisciplinary expert and citizen activities to deliver useful policy, business and technology guidelines.