DPE-2026-0012

Telemetrie zonder functie

Een apparaat zoekt uit zichzelf contact met servers zonder functie die de eigenaar vroeg.

Familie
Telemetrie
Status
actief
Geldt voor
firmware, iot, network-device, vehicle

Wat er gebeurt

Firmware opens connections to hosts that serve no function the owner asked for: a fixed endpoint contacted at boot, at intervals, or on every state change. The payload may be status, configuration, usage patterns or an identifier of the device or its owner.

Waarom het ertoe doet

The owner bought a device, not a subscription to being observed. Unlike a website there is no browser to inspect it with, no consent dialogue, and often no way to switch it off without breaking the product. The traffic continues for the life of the device, which for a router or a car is a decade.

Veelvoorkomende oorzaken

  • vendor telemetry enabled by default with no setting to disable it
  • chipset SDK contacting the chip maker rather than the device brand
  • update or time service pointed at a fixed host in the vendor's home jurisdiction

Dit is het níet

A firmware update check against the vendor is expected behaviour and not this entry. What distinguishes it is traffic without a function the owner asked for, or a destination that has nothing to do with the product. The destination is a separate axis. Where the finding also states a country, that claim stands or falls on its own evidence and DPE-2026-0027 applies to it. A telemetry flow to a host in the same country is this entry just as much.

Hoe je het vaststelt

Indicator

Outbound connections from the device to hosts that persist when every user-facing function is idle, established from a network capture at the gateway rather than from the device itself.

Methode

network-observed

Kwaliteit van de detectie

90 van 100

De grenzen van deze bevinding

Wat dit patroon zou weerleggen

  • The traffic serves a function the owner enabled, such as remote access or cloud backup.met de hand te toetsende bevinding vervalt
  • The endpoint is a content delivery network fronting a service in another jurisdiction.met de hand te toetsende bevinding krijgt een ander patroonWhere an operator is based says nothing about where the data goes. Establish the destination, not the origin of the company.
  • The connection carries no data beyond what is needed to check for updates.met de hand te toetsende bevinding wordt zwakker
  • The behaviour can be switched off in the interface and was left on.met de hand te toetsende bevinding wordt zwakkerStill relevant if it is on by default, but it changes the finding from cannot to did not.

Wat dit patroon níet vaststelt

  • harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
  • severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
  • unlawfulness; that is for a supervisory authority or a court
  • intent; a fault is usually a build decision, not a plan
  • absence: not finding it in one capture is not evidence that it is not there

Reproduceren

  • manualrepro/DPE-2026-0012/MANUAL.mdconnections to hosts unrelated to any function the owner enabled, while the device sits idle

Juridisch kader

Bepalingen

eu-gdpr-44eu-gdpr-6-1-a

Veelgehoorde tegenwerpingen

This is anonymous diagnostic data.

A device identifier tied to a household is not anonymous, and diagnostics that report usage patterns describe the people using it. Establish what is in the payload before accepting the label.

It is in the terms and conditions.

Consent must be specific and freely given. A term buried in a document accepted once at setup, with no way to refuse and keep the product working, is neither.

The servers belong to our chip supplier, not to us.

The party placing the product on the market chose that component. Responsibility for what a shipped device does is not transferred by subcontracting it.

Geldt wanneer

to-processing

Aangetroffen in

De onderzoeken waarin dit patroon gemeten is.

Verwante patronen

← alle patronen