A socio-technical ethical process for managing access to smart building data

Smart buildings provide vast amounts of data that can be used to improve building operations and research. Unmanaged access to this data presents inherent risk to the privacy of building occupants as it is subtly related to user behaviours enabling potential monitoring and profiling of occupant movements, behaviours and preferences. This paper describes a Socio-Technical Ethical Process (STEP) to ensure the appropriate levels of data access are in place for different stakeholders while taking into account the 2018 General Data Protectuion Regulation (GDPR) and different occupant privacy preferences. STEP has been developed from use cases co-created around a real life case study by 20 smart building and privacy experts.