Doherty Cailbhe, Baldwin Maximus, Lambe Rory, Altini Marco, Caulfield Brian
School of Public Health, Physiotherapy and Sports Science, University College Dublin, Dublin, Ireland.
Insight Research Ireland Centre for Data Analytics, University College Dublin, Dublin, Ireland.
NPJ Digit Med. 2025 Jun 14;8(1):363. doi: 10.1038/s41746-025-01757-1.
The widespread adoption of consumer wearable devices has enabled continuous biometric data collection at an unprecedented scale, raising important questions about data privacy, security, and user rights. In this study, we systematically evaluated the privacy policies of 17 leading wearable technology manufacturers using a novel rubric comprising 24 criteria across seven dimensions: transparency, data collection purposes, data minimization, user control and rights, third-party data sharing, data security, and breach notification. High Risk ratings were most frequent for transparency reporting (76%) and vulnerability disclosure (65%), while Low Risk ratings were common for identity policy (94%) and data access (71%). Xiaomi, Wyze, and Huawei had the highest cumulative risk scores, whereas Google, Apple, and Polar ranked lowest. Our findings highlight inconsistencies in data governance across the industry and underscore the need for stronger, sector-specific privacy standards. This living review will track ongoing policy changes and promote accountability in this rapidly evolving domain.
消费型可穿戴设备的广泛采用使得能够以前所未有的规模持续收集生物特征数据,引发了有关数据隐私、安全和用户权利的重要问题。在本研究中,我们使用一种新颖的评估标准系统地评估了17家领先可穿戴技术制造商的隐私政策,该标准涵盖七个维度的24条标准:透明度、数据收集目的、数据最小化、用户控制与权利、第三方数据共享、数据安全和违规通知。透明度报告(76%)和漏洞披露(65%)的高风险评级最为常见,而身份政策(94%)和数据访问(71%)的低风险评级较为普遍。小米、Wyze和华为的累计风险得分最高,而谷歌、苹果和博能的排名最低。我们的研究结果凸显了整个行业数据治理的不一致性,并强调需要更强有力的、针对特定行业的隐私标准。这篇实时综述将跟踪正在进行的政策变化,并促进这一快速发展领域的问责制。