The Internet of Things to Promote Health in the Workplace

This NRP 77 project looked at the implementation of Internet of Things (IoT) technologies in the workplace, focusing on applications designed to promote the health and safety of employees. The study analysed the legal, ethical and organisational challenges, such as the protection of fundamental rights, data protection and employee trust. To support organisations in the responsible introduction of such technologies, the research team developed a practical method for data privacy impact assessment (PIA).

Chronic overload or unhealthy posture are often related to work. Technical aids such as smart clothing or watches that monitor the health and safety of employees are therefore of interest to employers. The Covid-19 pandemic accelerated the introduction of such Internet of Things technologies in the workplace. The project arose from the need to harmonise technological progress with the protection of human rights, in particular within the framework of the Swiss Federal Act on Data Protection (FADP) and the European General Data Protection Regulation (GDPR).

The aim was to develop actionable insights and tools to address the ethical, legal and practical challenges of introducing IoT technologies in the workplace. This included:

1. Assessing the legal framework for IoT governance
2. Identifying and resolving ethical issues
3. Developing a PIA method to systematically identify risks and promote trust between stakeholders

The design recommendations developed in the project are not only intended to raise awareness among employers and employees about the opportunities and risks of the Internet of Things. They are also meant to provide practical suggestions, for example to curb exaggerated fears. The proposals should help ensure that new technologies such as smart clothing or watches are used for their intended purpose in health promotion.

The project brought two key points to light:

Many stakeholders either did not recognise the sensitive aspects of IoT technologies described in the specialist literature or attached too little relevance to them – for example, that the collection of health data can reinforce social inequalities or undermine interpersonal trust in the workplace. At the same time, they stated that they had inadequate knowledge to make an ethically sound assessment of these technologies. This suggests that people may refrain from making ethical judgements because they do not feel sufficiently competent to do so.

The project also revealed how little clarity there is regarding the data protection situation of health technologies in the workplace.

Three main messages:

1. The use of IoT applications in occupational health and monitoring entails a variety of ethical and legal risks. These risks are interlinked, often difficult to predict and frequently underestimated – which shows how important it is to carefully consider the development and introduction of such technologies.
2. Given the rapid advances in the field of IoT technology, traditional ethical and legal principles often do not suffice. Existing regulations cannot keep pace with technological developments, resulting in significant gaps in oversight and protection.
3. Concrete, context-specific recommendations for action are needed to bridge the gap between ethical and legal principles and their practical application. Such practical guidelines are essential to enable organisations to translate existing knowledge into responsible and compliant action when introducing IoT technologies.

Internet of things for occupational health: Practical, ethical, and legal issues