DPE-2026-0022

Meetinterval dat aanwezigheid verraadt

Een apparaat rapporteert zo vaak en zo herkenbaar dat de reeks laat zien wanneer het huis leeg is.

Familie
Telemetrie
Status
actief
Geldt voor
iot, firmware, network-device

Wat er gebeurt

A device that measures something in a building sends a timestamped series to a remote service, each record carrying a permanent device identifier. The interval is fine, typically minutes, and the series is kept. The stated function, such as showing yield or consumption in an application, would work at a far coarser interval and without a permanent identifier per record.

Waarom het ertoe doet

Consumption and production at a five-minute resolution is a presence calendar. Waking, leaving, returning, holidays and an empty house are readable straight from the curve, by anyone holding the series, for as long as they hold it. The occupants never see the series, cannot change the interval, and did not buy a presence sensor.

Veelvoorkomende oorzaken

  • a fixed upload interval in the firmware, chosen for the vendor's dashboard rather than for the owner
  • a permanent serial included in every record, so the series is a per-household history rather than an aggregate
  • the series retained indefinitely because storage is cheap and no retention was configured

Dit is het níet

A device contacting a server with no function behind it is Device telemetry without function. Here the reporting has a function; what makes it this entry is the granularity, the permanent identifier per record, and the recipient being someone other than the party delivering the service the owner contracted for.

Hoe je het vaststelt

Indicator

A capture at the gateway shows a timestamped measurement series leaving the device at an interval fine enough that daily presence patterns are readable from the curve, each record carrying a stable device identifier, addressed to a party other than the one delivering the contracted service. State the observed interval and why that interval supports the inference, rather than relying on a threshold: fifteen minutes is where occupancy becomes readable in published work on consumption curves, and a finer interval makes the inference stronger rather than differently true. Interval, identifier and recipient are all readable from the capture.

Methode

network-observed

Kwaliteit van de detectie

85 van 100

De grenzen van deze bevinding

Wat dit patroon zou weerleggen

  • The recipient is the party delivering the metered service, and the interval follows from that service or from a regulated metering function.met de hand te toetsende bevinding krijgt een ander patroon
  • The records carry no stable identifier and cannot be assembled into a per-device series.met de hand te toetsende bevinding vervalt
  • The owner can set the interval, and the observed interval was chosen rather than imposed.met de hand te toetsende bevinding wordt zwakker
  • The series is aggregated before transmission, so no fine-grained curve leaves the building.met de hand te toetsende bevinding vervalt

Wat dit patroon níet vaststelt

  • harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
  • severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
  • unlawfulness; that is for a supervisory authority or a court
  • intent; a fault is usually a build decision, not a plan
  • absence: not finding it in one capture is not evidence that it is not there

Reproduceren

  • manualMETHOD.mdno dedicated reproduction exists yet; follow the general method and the indicator above

Juridisch kader

Bepalingen

eu-gdpr-5-1-ceu-gdpr-6-1-aeu-gdpr-44

Veelgehoorde tegenwerpingen

It is technical measurement data, not personal data.

It is measurement data about one building, tied to one device, held as a history. Presence and absence of the people in it are derivable from that series, which is what makes it data about them.

The user wants to see it in the app.

Then the interval serves the display, and the display is the test: whether the fine series has to leave the building, and whether it has to be kept, are separate questions from whether it is shown.

Nobody analyses it that way.

The finding is that the data supports it and is held by a party the occupants have no relationship with. What is done with it today is not a property of the data.

Geldt wanneer

to-processing

Aangetroffen in

De onderzoeken waarin dit patroon gemeten is.

Verwante patronen

← alle patronen