Smart-device privacy notices for guests and families
Provide privacy information through routes that family members and guests can reach without the account holder’s login. Combine an accessible device interface with a public notice, and test when people encounter it as collection starts. Make these checks part of the supplier brief with Cambridge China Bridge.
Start with everyone whose information is processed
ICO guidance says privacy information must reach all potential users whose information you will process, whether or not the product was designed for shared use. It also recommends alternative routes for people who have no account or do not want one. An account holder’s set-up screen alone leaves those people without a usable route.
Before requesting samples, map family members, guests, additional account holders and people captured by microphones or cameras. For each group, record what information the product processes and where they could encounter the notice. Keep the separate security documentation checks in our connectable-products guide.
Specify a route beyond the owner’s app
ICO identifies the product’s screen or speaker, the accompanying app’s store page and a prominent notice beside the product listing as possible routes. Choose a combination that fits actual use. A guest already standing beside a device may never visit its sales listing.
Ask for privacy information that opens without registration or the owner’s password. On a shared screen, give it a recognisable menu entry. For a speaker, request a discoverable spoken explanation and a public address for fuller information. For a device without a screen, consider a visible label directing people to the notice.
Make the message understandable at the right moment
ICO says privacy information must be concise, transparent, intelligible and easily accessible, using clear and plain language. It must be provided when personal information is collected from the person concerned. Its guidance also recommends considering later moments when additional processing starts.
Write a short entry message explaining what is collected, why, and where to find fuller information. Put it where a shared user can encounter it when using the relevant function. Ask the supplier to demonstrate what happens when recording or a new feature starts. Treat lights and sounds as prompts to an explanation, rather than relying on an unexplained indicator.
Separate access to notices from control of settings
ICO recommends making privacy information easy to find for every account holder, including additional users. It also recommends reminders showing connected access and integrations, alongside records of who accessed the product and which function they used.
Ask the supplier to demonstrate an additional account and an account-free visitor separately. Check whether each can read the explanation without being granted administrator access. Record which settings each role can change, and whether the interface explains those limits. Avoid exposing the owner’s private recordings or account details merely to make the notice accessible.
Working out your own order? Send us the product on WhatsApp and we reply the same working day: WhatsApp us
Turn the factory brief into an acceptance check
Put the agreed notice text, access routes, user roles and collection triggers into the sample brief. Name who maintains the device message, app wording and public notice. Use our firmware and software approval guide to connect the demonstrated behaviour to the version you approve.
Test the sample as a guest with no account and as an additional user. Record the steps, visible or spoken message, notice destination and any login barrier. Repeat the affected checks after changes to software or processing. Include this evidence in the inspection brief. Cambridge China Bridge’s staff in China can use the agreed brief when checking factory samples.
Frequently asked questions
Do smart-device guests need privacy notices?
Yes, where their information is processed. ICO guidance covers all potential users whose information you process, including people without an account.
Is a privacy notice in the owner’s app enough?
Check whether other users can actually reach it. ICO recommends alternative routes for people without accounts, including the device interface and prominent product-listing information.
How can a smart speaker explain privacy?
Ask for a discoverable spoken explanation and an accessible public notice with fuller information. Test it as a visitor who cannot open the owner’s app.
What should I ask the Chinese factory to demonstrate?
Ask for guest and additional-user journeys on the agreed software version, including notice access without login, messages when collection starts and the limits of each user’s controls.