Dear Chairman Simons and Under Secretary Copan:
In the midst of holiday season throughout Upstate New York and across the country, I write to express my deep concerns regarding the security of one of the most popular gifts of the year: "smart TVs".
In November, as a pre-holiday advisory to customers, the Federal Bureau of Investigations (FBI) warned consumers about the potential security threats posed by using smart TVs, which can connect to the Internet, collect data on users, and are often equipped with a variety of features, including microphones and cameras. TV manufacturers, app developers, and hackers can gain access to critical data that smart TVs collect on users. Similarly, the National Institute of Standards and Technology (NIST) recognized the risk posed by unsecured internet-connected devices and recently released a draft of recommended security features that the industry follow to improve the security of these devices.
Of particular concern regarding smart TVs is the collection and storage of user's data. These devices sometimes collect large amounts of information about consumers, ranging from an individual's viewing habits to video and audio recordings. This data is collected by both smart TV manufactures as well as affiliated software application developers. Because these devices can connect to the internet, bad actors have the ability to hack these devices and gain unauthorized access to consumer data, especially when that data is not properly secured with the proper safeguards. If a hacker can gain access to one device on a user's home network, there is also a risk that they can access and compromise other devices on the network. A successful hacker could then surreptitiously turn off devices like refrigerators, switch on cameras and microphones, and remotely spy on a home without a consumer's knowledge. The risk increases with the more connected devices a consumer owns.
Accordingly, to protect American homes from these potential threats, I request that the Federal Trade Commission (FTC) immediately open an investigation into the data protection and security of smart TVs by TV manufacturers and software application developers. I also request that the FTC develop and issue recommendations, for the production of secure smart TVs to address these security concerns. Last, I request that NIST provide an update to Congress on any feedback received during its recent public comment period for its security feature recommendations for smart TVs.
As popularity for these devices increase it is imperative that consumer data is safeguarded. Thank you for your attention to this important matter.