Smart homes, private homes? An empirical study of technology researchers’ perceptions of ethical issues in developing smart-home health technologies
© The Author(s). 2017
Received: 7 November 2016
Accepted: 21 March 2017
Published: 4 April 2017
Smart-home technologies, comprising environmental sensors, wearables and video are attracting interest in home healthcare delivery. Development of such technology is usually justified on the basis of the technology’s potential to increase the autonomy of people living with long-term conditions. Studies of the ethics of smart-homes raise concerns about privacy, consent, social isolation and equity of access. Few studies have investigated the ethical perspectives of smart-home engineers themselves. By exploring the views of engineering researchers in a large smart-home project, we sought to contribute to dialogue between ethics and the engineering community.
Either face-to-face or using Skype, we conducted in-depth qualitative interviews with 20 early- and mid-career smart-home researchers from a multi-centre smart-home project, who were asked to describe their own experience and to reflect more broadly about ethical considerations that relate to smart-home design. With participants’ consent, interviews were audio-recorded, transcribed and analysed using a thematic approach.
Two overarching themes emerged: in ‘Privacy’, researchers indicated that they paid close attention to negative consequences of potential unauthorised information sharing in their current work. However, when discussing broader issues in smart-home design beyond the confines of their immediate project, researchers considered physical privacy to a lesser extent, even though physical privacy may manifest in emotive concerns about being watched or monitored. In ‘Choice’, researchers indicated they often saw provision of choice to end-users as a solution to ethical dilemmas. While researchers indicated that choices of end-users may need to be restricted for technological reasons, ethical standpoints that restrict choice were usually assumed and embedded in design.
The tractability of informational privacy may explain the greater attention that is paid to it. However, concerns about physical privacy may reduce acceptability of smart-home technologies to future end-users. While attention to choice suggests links with privacy, this may misidentify the sources of privacy and risk unjustly burdening end-users with problems that they cannot resolve. Separating considerations of choice and privacy may result in more satisfactory treatment of both. Finally, through our engagement with researchers as participants this study demonstrates the relevance of (bio)ethics as a critical partner to smart-home engineering.
KeywordsChoice Engineering ethics Empirical ethics Health technology Privacy Qualitative research Research ethics Smart-home Ubiquitous computing
Smart-home technologies—technologies that interact with the home occupier to remotely automate utilities and appliances—exact interest in a range of domains. While the concept of smart-homes has existed since the 1960s , the creation of inexpensive wireless devices and powerful computers means that many observers see smart-homes as an idea whose time has come [2, 3]. Interest in smart-homes extends beyond automation for convenience  to healthcare applications for older people . A review of technology by Tamura  describes using sensors on doors, furniture and appliances, wearable devices and video cameras. Such devices can make physiological measurements, detect activity and inactivity, falls and other accidents. Combined, the information from such devices can track health related routines of smart-home occupants by monitoring their patterns of daily living.
While more studies of smart-homes are focused on the possibilities of data collection  than its ethical limits, research has tried to understand the ethical implications of smart-home and related health technologies. These studies commonly raise concerns about privacy, but also suggest consent, social isolation  and equity of access [9, 10] are major areas of concern. End-users have been observed to allow their privacy to be compromised if they perceive sufficient personal benefits, which some scholars claim is a fair trade of privacy for increased autonomy [11–13]. Others complain such a compromise neither fosters end-user autonomy nor avoids serious moral harms to personal agency [14, 15]. For example Brown and Adams  argue that pervasively observed and monitored individuals will find themselves pressured to alter behaviours in line with particular conceptions of health. While such arguments can appeal to popular notions of personal responsibility, there are good arguments to suggest health and ill-health are normative concepts;  what is normal health varies from one time or place to another—consider, for instance, debates about criminal responsibility and mental illness,  or changes in attitude toward the status of homosexuality as a health aberration . There are numerous instances germane to smart-homes where provision of a diagnosis brings ethical considerations to the fore. For instance, a diagnosis of dementia raises questions about autonomy, and the suggestion that an accident is a ‘fall’ is a label that may imply frailty and decline. Whether ethical concepts common to bioethics are the most appropriate for discussion of new engineering technologies is the subject of some debate. Distinctive ethical frameworks have arisen in the field of engineering. Floridi has influentially argued that much of bioethical reasoning is “biocentric” and favours an ontological approach to ethics that gives moral consideration to data entities on bases other than whether or not they are biologically alive . His view is not universally embraced,  although the need for new forms of ethics that are fit for an age of intelligent machines is widely discussed .
These rich dialogues identify numerous ethical issues that may be germane to smart home health technologies, but is largely missing the views of those engineers who work in smart-home research. Orr’s  fascinating ethnography of the working lives of photocopier technicians notwithstanding, studies that probe the views and opinions of the engineering community are a relatively slim volume in academic literature, particularly studies of ethical issues [23–25]. Nonetheless their views may be important for a number of reasons. Smart-home researchers play a key role in the inception and implementation of new technologies, and their ethical perspectives may be expected to influence the way ethical problems are responded to. Within a general context this informs a description of the approach of engineering scholars to ethical issues which may directly inform pedagogical or governance perspectives. This task fits within our own empirical bioethics perspective. We are a group of researchers from a variety of academic disciplines, the majority of whom have experience of conducting qualitative studies in order to stimulate (bio-)ethical dialogue about practical situations. Such dialogue may contribute insights useful both to theoretical and practical perspectives. More specifically, these insights might be critically analysed to explore both the problems that are identified and the efficacy of the solutions that are offered to them. While empirical ethics has a rich methodological tradition,  the current project takes the relatively modest approach of offering (bio)ethical reflection on the results of a qualitative study we undertook with smart-home engineers. Such an approach, in line with current attempts to foster responsible research and innovation at a European level,  aims to contribute to existing dialogue between applied ethicists (including those within our own bioethics community) and the engineering community. The intention is that this will contribute to the ethical rigor of the solutions developed in this area.
To investigate the views of smart-home researchers, a qualitative interview study (hereafter “the qualitative study”) was undertaken with researchers on a large project (hereafter “the smart-home project”) concerned with the utilisation of smart-home technologies. To maintain the anonymity of participants we do not identify the smart-home project. It is a large, interdisciplinary research collaboration involving more than 80 academics and support staff at several UK universities including early-, mid- and late-career researchers (respectively defined for this study as PhD students and research associates; lecturers and research fellows; and readers and professors). By examining large sets of data for relationships and patterns (data mining) using multiple data sources (data fusion), the smart-home project aims to address a range of health needs, harnessing existing monitoring technologies that can be deployed in the average home, including depth cameras, wearable devices and environmental sensors. The smart-home project aims to install these technologies in tens of homes, using this experience to create a smart-home health platform that is fit for real world purposes.
Ethical approval to conduct the qualitative study of the researchers and to the publication of anonymised quotations was sought and given by the Faculty Research Ethics Committees at the host Universities.
All early and mid-career researchers in the smart-home project with an engineering role in technology development and deployment were eligible for inclusion, including PhD students, research associates, research fellows and lecturers. The study intended to explore perceptions of social and ethical issues in the smart-home research and we sought to understand the views of researchers who were directly involved in the detail of the design and implementation of smart-home health technologies rather than those who are responsible for the project direction as a whole. We therefore invited early- and mid-career researchers to take part. A list of staff members was provided by the smart-home project administrator; the list gave staff roles, position and contact details. Approaches were made to potential participants in waves of recruitment, with the aim of achieving a sample of researchers who specialised in different technologies. In total thirty researchers were approached, of whom twenty consented to be interviewed.
Potential participants were approached by email, by letter or in person and given information about the qualitative study. Potential participants were invited to contact the interviewer (GB) if they were interested in being interviewed or if they did not wish to take part. Unless they indicated otherwise, those who did not respond to the initial approach were re-contacted in later waves of recruitment. Recruitment was continued until thematic saturation was reached, understood as the point at which no new themes are judged by the researchers to be arising from the interviews .
Potential participants were also familiarised with the qualitative study through a range of activities. The chief investigator (RGH) and the interviewer (GB) attended smart-home project meetings and used them as opportunities to publicise the qualitative study. To ensure that potential participants had the chance to be aware of the researcher and the kind of work he did before deciding whether to not to take part, GB spent time working at a desk in the smart-home project offices. Towards the end of the qualitative study GB gave a seminar to smart-home project researchers about his other work in ethics research, and before the final two interviews he led a workshop with smart-home project researchers exploring some ethical considerations relating to smart-home technologies and public health measures.
Potential participants who expressed an interest in being interviewed either met with the interviewer in person or spoke with the interviewer using Skype. The interviewer discussed the qualitative study and what participation would involve with the potential participant and answered any questions. If the potential participant agreed to be interviewed they were asked to sign a consent form, which included consent for the interview to be audio-recorded and consent for extracts from transcriptions of these recordings to be published. Participants were reminded they could withdraw their consent at any time during or after the interview.
Once consent had been provided, a one-to-one, in-depth, semi-structured interview took place. Participants were asked to describe their role and experiences of the smart-home project, and encouraged to offer ethical considerations that they thought germane to broader smart-home design beyond the confines of the immediate project. Areas that seemed pertinent to the qualitative research topic were explored in greater depth. The interview was guided by a topic guide (included in Additional file 1), which indicated major topic areas the interview would explore, and also provided four vignettes, which were designed to facilitate discussion of key topics should they not arise elsewhere in the interview. All participants agreed to have their interview audio-recorded, and these recordings were transcribed by a university approved transcribing service. Transcripts were compared with the interview audio for accuracy and corrections made by the interviewer where necessary.
Twenty participants agreed to be interviewed before thematic saturation was reached. Fifteen of these were men and five were women. Participants were of eight different nationalities including British. Participants included four PhD students, thirteen Research Associates, one Lecturer and two Research Fellows. Seven participants were involved in data mining, data fusion or pattern recognition. The remaining thirteen worked on specific sensors or deployment platforms. Nine participants had spent less than two years working on the project, and the remainder more than two years. Sixteen were from the lead university in the project, with other centres contributing three and one participant(s). Interviews lasted between 52 min and 79 min. Four interviews were conducted by Skype, and the rest were conducted face-to-face.
In publishing these results we are particularly concerned to maximise anonymity of participants. Participant area of expertise is pertinent to the themes, and several quotes are included where this information is given either in the quote or in the discussion. This elevates an already high risk of participant identification within a small research community, even when the usual steps to preserve anonymity, such as pseudonymisation, are taken. Even if widespread identification was impossible, if participants are able to self-identify, this may both undermine the consent that participants have given to have extracts from the interviews published and more generally undermine the confidence of participants in further studies of this type. For this reason, further steps have been taken to increase anonymity; described below.
No table of participants is given, as details such as occupation, grade and length of time on the smart-home project would lead to recognition. Given the presence of identifying features in some quotes, simple pseudonyms were found to provide inadequate protection of participants’ identities. However, removal of pseudonyms decreased the readability of the paper and, further, may give inadequate reassurance to readers that quotes from a narrow pool of participants did not dominate the discussion. Nor did removing pseudonyms provide easy traceability between the authors when writing the article. Therefore each participant was assigned two possible pseudonyms, which were securely stored on an encrypted keybreaker table. The cluster ensured that quotes from each participant featured no more than twice in this article, allowed traceability and enhanced readability. Name genders reflected the gender balance of researchers on the smart-home project, but gender was assigned at random to decrease researcher identifiability further. Finally we do not give precise or directly identifying details of the smart-home project in the text of this article, although we are aware that it could be identified by other means. This is primarily because we felt that anonymising the study was a sign of good faith to participants, but also because many discussions in the interviews are about considerations that were broader than the project itself and did not directly reflect the solutions that were adopted within the project.
Transcripts were analysed using the method of thematic analysis described by Braun and Clarke . Individual transcripts were read and, using NVivo 10, inductive codes were assigned to portions of text by the first author (GB). A total of twenty per cent of transcripts were independently coded by a second member of the study team (RGH, MM, RH, RtM) and codes were checked for consistency. Inconsistent codes were discussed until consensus was reached. When coding was complete, 37 codes had arisen from the text. Similar codes were then grouped into broader themes, which described concepts or understandings that recurred in many interviews. Text that contributed to these themes was re-read in context to ensure the topics reflected the content of the interviews. Quotes that exemplified these themes were selected, lightly edited for readability and participants given pseudonyms.
Two themes arising from the analysis are discussed here. The first, ‘privacy’, encompassed smart-home project researchers’ discussions about the desirability of personal privacy, the necessity for the privacy of end-users of the technology and the reasons for this. The second theme, ‘choice’ focused on the paradox between solving ethical dilemmas in research by allowing end-users freedom to choose, and the need to ultimately impose ethical judgments that limited end-users’ choices.
the collection, storage, and computerization of information; the dissemination of information about individuals; peeping, following, watching, and photographing individuals; intruding or entering “private” places; eavesdropping, wiretapping, reading of letters; drawing attention to individuals; and forced disclosure of information .
Encouraged to speculate on the problems and possibilities of smart-home technologies, issues germane to privacy arose frequently in the interviews. In particular, smart-home project researchers predominantly characterise privacy as the unbidden sharing of data, rather than as an invasion of personal space.
Julian: if you’ve got a mobile phone, I think people can track you if they really want to. Indeed, I think there are apps where you can, in fact, track your child’s or your partner’s phone, so you do know where they are. Well, that’s “not a big problem”, so I don’t know what is? I’m not too worried about that.
Brian: Actually, Google products are really good. If you use them you get a lot of benefit from having - and actually do I really care about what they’re doing with my data? It’s not like that they’re looking at my data personally.
Margaret: To be honest I think maybe [video researchers] are less sensitive than other people. For video we really want to get that data and we think it is really okay, so if you put it in my home I am okay with it. … I would be okay with [other sensors too].
Sally: I’m a [video researcher] and for years we’ve been videoing each other hopping and walking up and down and I truthfully don’t care if there’s a picture of me doing that in a conference paper at all. There needs to be some balance I think. It’s frustrating as well because I know other research groups don’t do that [gain research approval].
Sally: A lot of people [share location data] all the time but then you can look at people, you can tell what time they leave work, if they’ve left early, you can see where they go afterwards. I think they’re potty to leave that thing running. … I suppose I just don’t want people knowing exactly where I am at what time of the day. …the journey to and from there and the journey from home to work, I don’t want those patterns of my behaviour being public.
Margaret: For me I probably don’t like voice sensors in there to record the environmental voice in it.
Interviewer: So recording speech and so on.
Margaret: Yes, the speech things. It is just a personal [thing] for me. I think somehow it is also difficult to process that data. Sometimes people say something and you don’t really want to process that data. Maybe it is better than having the voice recognition system at home or those constrained environment is probably better for users otherwise they have this and they probably think, “Every single word I say will be recorded.” It will always make them think, “That data has to be recorded should I say something?” They always need to think about this so it will probably affect their life.
Norman: if someone has access to, let’s say, that data, and he sees you made 2,000 steps, it means if you were home, you’re somewhere else now, because you cannot walk 2,000 steps in your home at a single time.
Derek: The reason I don’t like all this data collection is just because I’m a data mining researcher. I know what they can do with the data. … [for example] I can simply use the electricity metering to detect whether someone has played their PlayStation. … [to detect that] this guy is playing video games for the whole night.
Gabriel: I can escape from the entire world, and also from the invigilation.
Dexter: I don’t want a camera in my house … I don’t like the wearable as well. I don’t like it at all. No, I don’t.
Interviewer: For what reason don’t you like it?
Dexter: Because, in the home, I just feel like it’s a constraint, too many constraints.
Interviewer: Right. So it’s aesthetic for you?
Dexter: Yes. I don’t feel comfortable wearing one thing all day. Once you participate you feel that you have to use it.
Aiden: I guess is deeply rooted in the fact that someone has an idea that there is someone on the other side just watching at all times.
These extracts contain the sort of intuitive expressions of discomfort that may arise from being watched or followed, but privacy is most often discussed in terms of information. When invited to speculate beyond their immediate project, researchers clearly see privacy as a major issue in smart-home research, and are alert to the negative consequences of unauthorised sharing of information. This is unsurprising in one sense, because ensuring informational privacy has the appearance of a tractable problem. On the other hand, physical privacy is much more difficult to address. If potential users of smart-home technologies ‘just feel’ uncomfortable with being monitored by the technology, it is unclear if and how a focus on informational privacy could address the problem. This issue shall be explored further in the discussion section.
Privacy is a concept that appears to be linked to notions of consent, so it is unsurprising that ‘choice’ emerges as a second major theme in the interviews. Researchers often appeal to end-user choice to solve the ethical dilemmas inherent in ensuring privacy (and beyond). However a commitment to end-user choice does not sit comfortably with researchers’ roles in defining the boundaries of these choices. Researchers’ discussion of their own choices, which implies certain moral standpoints, and how these might influence—or even constrain—the choices the end-users made, sometimes sharply contradict commitment to end-user choice.
Angela: We provide this, and the end-users should choose about their home, what data they would like to provide. Like GPS is available on my phone, but I can turn it off. When I want some service based on that, I turn it on.
Frank: [how to solve data storage issues] depends on the people. Some people would prefer to send [data] online and don’t want to see anybody coming into their house and other people would prefer to keep it there and let people in to check it. If people can have a choice, that will be the best plan.
Elsie: Some users might not even want the camera in their home, so we can’t put the whole thing in their homes. I think that really depends on what the user wants. If they said okay then we are happy to put it in.
Oliver: If you have third party children coming into the house obviously their guardian would have to say if this is okay or not. It is very difficult. It will probably have to be then on the [end-user]’s shoulders to bear that burden to tell people and inform people. I think it is really difficult.
Godfrey: [end-users] can say, “I am going to record my own self doing anything I happen to feel like. And I can do that for my own personal ends; whatever those personal ends might happen to me. And that is completely my choice.” And that is legally, if not ethically uncomplicated. The problem becomes when [end-users] have a family and things like that and then you blur the boundaries of what is personal.
Godfrey indicates that the special problems of dealing with the multiple occupants and visitors, who might include children or non-consenting adults, mean that choice is much more dynamic than simply allowing individual end-users to choose their preference. Firstly, since choices needed to be made before the implementation of the system, research choices are potentially a major conduit for researchers’ own value judgements. Secondly, even if there is clear evidence of particular end-user choices, these could not be unrestricted. As detailed in the first theme (‘privacy’), many researchers are concerned that a smart-home environment has hypothetical potential to broadcast data that would damage the end-user if shared in an unrestricted way; as such it is logical that sharing is prevented, even if that prevention brings the choices of end-users and researchers into conflict.
Making research choices
Blake: Well, in research, you make your own choices. You decide whether you use this technique or something else, and so on.
Gwen: …if you have a physical network, you don’t really need to encrypt because you just have a cable between device A and device B. Whereas, if you’re using a wireless link, then you definitely have to encrypt data. That basically slows things down, so an advantage of using a wired link is that you can possibly avoid having to encrypt anything. Therefore, you can increase the speed of your storage system.
Phoebe: The wristband is basically just accelerometer counts of my hands swinging around as I move around. Maybe it’s got location data that coarsely says which room I’m in in my own home, which is pretty meaningless.
Carter: I know for a fact that there’s absolutely, well, nothing they can know about me that I really don’t want them to know. The microphone is not able to record sound or send a sound anywhere else. The accelerometer data is literally just accelerometer data and at the end of the day there’s really only so much you can find out from that. You can’t really find out if someone is doing any specified task.
Interviewer: Presumably you’re collecting this data because clinicians have said that this type of data would be useful?
Florence: Yes. That’s a question for us, as well. In the very beginning, we didn’t know, even though we had a literature review. Many literature said that’s a wearable sensor, so you can use it to detect that kind of activity. Daily activity. But that’s not a strong conclusion to say that we need these sensors, these sensors, and that this list of sensors can give you this list of activity recognition.
Interviewer: So you’re almost collecting data to see what you can find out.
Florence: That’s one of the tasks we need to do. We deploy a list of sensors, to see which one, what list of sensors is actually useful to detect the daily living activity of the user.
Connor: Basically, we are basing our choices on the fact that we think that the [end-users] that volunteer are happy to do that.
Connor’s comment contains an echo of the earlier appeal to end-user choice. Indeed, design choices are not framed as explicitly restrictive of ethical choices, but simply technical decisions. Nonetheless, as stated earlier, allowing end-users to follow their preferences in unrestricted ways is ultimately problematic for some researchers, and leads to discussion of controls on end-user behaviour, although such controls are rarely, if ever, made explicit to end-users.
Influencing end-user choice
Seth: [end-users] shouldn’t have access [to their data]. Because when you look at your own data, you feel like you didn’t do very well.
Austin: But I think the user isn’t necessarily to be the one to decide what data they will share.
Roger: [a smart-home system] would really have to be well thought out to avoid misuse … let’s say that you’re living with your children in such a house that you can monitor their every step. I think that’s not appropriate, or that’s not ethical. You would not want your children to behave good because you’re monitoring them, but you want them to behave in a good way because that’s the right thing to do.
Leon: I think [poor end-user choices are] the concern of the project, yes. I think it’s very difficult to force people. Not only that it might be ethically questionable, but I think it’s technically difficult to force them not to use the system in this way, or that way.
Elliot: I mean, we should still want these people to choose what the right thing is for them on their own free will.
Interviewer: Right, so you want people to make the right choice?
Elliot: We should give the information so they are able to make the right choice.
Elliot’s appeal, framed using the language of information, choice and free-will, closely traces the conceptual language of consent, and emphasises researchers’ reluctance to impose choices overtly on end-users, even where a need to minimise end-user’s choices to ethically acceptable options is asserted.
Choice was a major area of discussion in the interviews. Many researchers suggest that end-user choice might solve ethical dilemmas; indeed, given the preponderance of researchers favouring end-user choice as a way to solve ethical dilemmas, this may suggest a libertarian slant toward their thinking. Nevertheless researchers also indicate that end-user choices can be restricted. Such restriction is almost always done covertly, through design, rather than in ways that might overtly challenge the notion of end-user choice. The values of researchers might be channelled into the basic design choices they make, but the ethical dimension of design was rarely acknowledged. The implications of this and the previous theme are discussed below.
Researchers identify privacy as a major concern in the conduct of research, yet tend to see privacy in terms of informational privacy, and only rarely see privacy as physical privacy. Is this focus on data privacy appropriate?
Although some form of respect for privacy is a global societal norm, whether and where privacy can coherently be termed a moral concept is deeply contested , since respect for privacy explicitly places restrictions on enforcing other moral claims. Perhaps because of this contested moral value, moral claims based on privacy are at the heart of many polarised bioethical debates . Philosophical debates about privacy centre on whether privacy is an interest in its own right (and thus is vulnerable to harms), or instead a cluster of other more basic interests, such as property interests and liberty interests . Privacy is clearly addressed in law; in England and Wales, the Article 8 right to respect for privacy and family life of the Human Rights Act 1998, the Data Protection Act 1998 and the Regulation of Investigatory Powers Act 2000 are important contemporary statutory examples. Legal discussion that dates back to the 19th century  indicates the longstanding (though sometimes problematic) place of privacy in culture.
While various typologies of privacy exist, the way that privacy was discussed by smart-home researchers can be seen to follow a division of privacy into ‘physical privacy’—avoiding unwanted sensory access—and ‘informational privacy’—avoiding the misuse of information [35, 36]. In support of such a division, NA Moreham  makes the plausible claim that watching or following a person breaches their privacy even if no information is obtained or circulated. Setting aside the philosophical debates that this claim invites, there is a clear practical implication for those working in this field. Viewing researchers’ discussions of privacy through the lens of informational and physical privacy gives insight into the challenge of developing and delivering home monitoring technology to members of the public. Maintaining informational privacy may appear to be a tractable challenge, given the advanced state of technologies such as encryption. Moreover, by isolating networks from the internet, basing servers in the home and so forth, the researchers had made considerable efforts to reduce the likelihood of unauthorised data sharing. While there is always some possibility of unanticipated data breaches, researchers were concerned to identify and avoid such possibilities.
Researchers saw offering end-user choice as an effective way of addressing ethically sensitive issues, but also acknowledged end-user choices should be restricted in some instances. How much choice should end-users be offered?
Writers often link choice to autonomy, and both healthcare ethics [43, 44] and the ethics of research participation are concerned with patient or participant choice. Some bioethicists reduce most ethical dilemmas to respect for autonomy . They justify this position by referring to a plurality of values and the lack of an overarching moral consensus. However, this position is often guided by libertarian motives and extreme emphasis on individual freedom . In this case, they might argue that, if individual can agree with the intrusion of their life sphere, there is no ethical issue any more. In our study, researchers’ inclination to offer choice to future end-users could be interpreted in two ways. First, as described in the results section, reducing ethical dilemmas to choice could allow smart-home researchers to avoid taking responsibility for ethical decisions. Second, the desire to offer choice may relate to a libertarian approach to end-user choice in which choice is seen as a completely individual process in which no others are (or should be) involved. The first of these is more pragmatic in orientation and the second is a more principled basis for provision of choice. Both possibilities may operate alongside each other, or in an intertwined manner, which accords with research in other contexts. For instance, Mol observed that the rhetoric of autonomous choice in healthcare can be interpreted both as rationale by practitioners to excuse themselves from caring about the patient who makes choices and as principled (we would say libertarian) respect for those patient choices .
The nature of privacy is “one of the most obvious and pressing issues in computer ethics”  and a vexed one in ubiquitous computing . If the researchers in this study largely endorse the thesis that choice can resolve ethical issues (whether for principled or self-serving reasons), it is germane to ask how choice might relate to personal privacy. The close identification of privacy with choice is only reflected in some areas of existing literature, mainly in context of U.S. constitutional law and related academic literature, where privacy has been argued to underpin rights to autonomy . However, many writers have not taken this approach,  for instance, Nissenbaum  argues that personal privacy is measured by degree of access rather than degree of choice. Similarly, Cate suggests, “individual choice is not the same as personal privacy, so focusing laws, regulations and enforcement on the former will not necessarily enhance the latter.” . Cate also argues that a focus on choice allows data collectors to shirk their obligations to maintain privacy, shifting responsibilities in relation to privacy onto the individuals who provide the data. This analysis suggests that an inappropriate focus on choice may also raise social justice concerns. Furthermore, asking end-users to make frequent choices about participation (which we may wish to do in smart homes, with their perpetual monitoring) may place excessive burden on individuals [51, 52]. Other contexts where patients and consumers are routinely presented with choices, such as informed consent documents, terms of credit documents or software terms-of-use contracts have been empirically demonstrated to result in poor exchange and understanding of information . Therefore, offering choice may not be the solution to privacy issues, may place burden on individuals, may not enhance understanding and may raise social justice concerns.
The imperfections in ensuring privacy by providing more choice may be behind the tensions about the role and extent of choice within the interviews. By disconnecting choice from personal privacy we might begin to explore what other benefits and harms flow from choice (a number of which were identified by researchers). Possible benefits may include a feeling of reassurance to end-users that a smart-home system is delivered in a professional manner and the sense that they are able to withdraw if use of the system is burdensome. Possible harms that should be guarded against include giving end-users the ability to monitor others within smart-homes without appropriate consent, disenfranchisement if end-users are given information that they do not understand, and negative impact on end-users if they are provided with access to data about themselves without interpretation and support. These harms could be serious, and may be justifiable reasons for restriction of some choices to end-users. Such restrictions should be monitored to ensure appropriateness and carefully balanced against possible benefit of broader choices, informed by ethical reflection on the meaning of privacy as a widely shared value. By decoupling choice from privacy, the duty to protect the privacy of end-users and third parties is placed more firmly with researchers.
The study has some limitations. The lead researcher was not a smart-home engineer and thus may have interpreted technical distinctions in a naïve way. However, this naïvety is generally considered an advantage in qualitative research, since the researcher investigates basic assumptions. The participants were early- and mid- career researchers and so the material presented here accurately reflects their views rather than decisions about the smart-home project as a whole, which are not explored within this study. However, the study is intended to reflect on smart-home research in general rather than on particular solutions adopted in a single project. The study only investigates the views of the researchers and not of the end-users, and it will be important to gather the views of end-users to be able to compare the views of users and engineers. We recruited from a single smart-home project, and it is possible that the micro-culture does not reflect experiences in other projects. As study participation was voluntary it is possible that the researchers who took part had particularly keen or specific interest in the topics that the study addressed. Despite this we have confidence in the findings because we encountered diverse opinions and were able to include participants from several institutions. We appreciate that interviewing and thematic analysis are subjective processes, and it is possible that other researchers would have encountered different themes. However, we conducted interviews and analysis until thematic saturation was achieved, and the process of analysis included double coding and deliberative discussions within our experienced multi-disciplinary research group. We therefore suggest that the interpretation presented here is appropriate and germane to the developing research in this area.
Applying smart-home technologies to healthcare applications represents not only a technical, but an ethical, challenge. Ethical analyses of these technologies raise concerns inter alia about loss of privacy, the adequacy of consent and maintaining agency. Exploring the views and experiences of researchers of smart-home technologies brings insights into which ethical issues researchers see as pertinent to their technologies, and the approaches that they take to solve these issues.
Qualitative interviews with researchers in this large, multi-centre smart-home project indicated that privacy and choice were the major areas of ethical focus in the design and implementation of smart-home health technologies. Researchers primarily viewed privacy as a problem of data security, and expended efforts to develop a system that would minimise the exposure of data to the outside world. Laudable as such an approach is, a focus on data privacy may take too little account of the much less tractable problem of ensuring end-users felt that their physical privacy was respected. While actual respect is clearly ethically important, favourable end-user perceptions are essential to public acceptability of new technologies and thus ensuring that their benefits are spread equitably. Even where researchers were able to ensure adequate data privacy, the lack of a commonly agreed concept of privacy could mean that, even with sustained attention, privacy is limited in its solubility as an ethical problem. Essential to developing approaches to these problems will be to continue research with those end-users who both engage, and do not engage, with smart home technologies.
Researchers also indicated considerable efforts in ensuring end-user choice were addressed in the system design. Many saw this as a ready solution that addresses many of the ethical problems involved in maintaining privacy. At the same time, the interviews revealed awareness among researchers of the limitations of this strategy, and despite an overwhelming endorsement of the moral desirability of user choice many researchers discussed elements of design which restricted such choice. Researchers tended to describe these as technical solutions to engineering problems, and did not seem to explore or question the normative assumptions that accompanied them. Researchers overtly discussed restriction of end-user choice in only a few cases and even then, with extensive caveats. This may point to a desire to avoid making ethical choices, but might equally be consistent with a pro-autonomy position. Choice may then, be a way to address ethical issues. Nevertheless, given the pervasiveness of privacy concerns in ubiquitous computing, it is notable that identification of privacy with choice is not a ethically acceptable strategy. Indeed some privacy scholars suggest it misidentifies the sources of privacy and risks the unjust burdening of end-users with a problem that researchers themselves have greater resources to address. Such analysis suggests that considering choice and privacy as separate issues is likely to result in a more satisfactory treatment of both.
Our research aimed to document the perspectives of researchers in a rapidly developing technological field. We intend, through this engagement, to demonstrate that (bio)ethics can be a critical partner to smart-home engineering. We suggest that some of the possible ‘critical’ roles of the ethicist in such a partnership could be to identify the moral issues, to help to resolve them, to point at issues that are intractable or difficult to resolve and to find ethical justifications or express concerns. Such collaboration between ethics and engineering is necessary to develop solutions that are both technologically and ethically robust in an area that is likely to be of increasing importance in healthcare delivery.
- U. S:
The authors thank the study participants who gave generously of their time to take part in this study.
This work was performed with funding from the UK Engineering and Physical Sciences Research Council (EPSRC), EPSRC award no. EP/K031910/1.
Availability of data and materials
The datasets generated and analysed during the current study are not publicly available due to the high risk of identifiability, however they are available to bone fide researchers from the corresponding author on reasonable request.
GB conducted the interviews and administered the study, conducted the thematic analysis of the data and drafted this paper. RH co-supervised the interview study, second coded interview transcripts, commented on the emerging themes and contributed important comments and critical observations to this paper. MM co-supervised the interview study, second coded interview transcripts, commented on the emerging themes and contributed important comments and critical observations to this paper. RM co-supervised the interview study, second coded interview transcripts, commented on the emerging themes and contributed important comments and critical observations to this paper. PF commented on the emerging themes and contributed important comments and critical observations to this paper. RG-H conceived and was chief investigator of the project, led supervision of the interview study, second coded interview transcripts, commented on the emerging themes and contributed important comments and critical observations to this paper. All authors read and approved the manuscript.
Dr Giles Birchley is a Senior Research Associate in Healthcare Ethics at the Centre for Ethics in Medicine, University of Bristol. Professor Richard Huxtable is Professor of Medical Ethics and Law and Director of the Centre for Ethics in Medicine, University of Bristol. Professor Madeleine Murtagh is Professor of Sociology at Policy, Ethics and Life Sciences at Newcastle Univerity. During the writing of this paper Madeleine was Professor of Social Studies of Health Science at the University of Bristol. Professor Ruud ter Meulen is Emeritus Professor of Medical Ethics at the Centre for Ethics in Medicine, University of Bristol. Professor Peter Flach is Professor of Artificial Intelligence at the Department of Computer Science, University of Bristol. Professor Rachael Gooberman-Hill is Professor of Health and Anthropology in the School of Clinical Sciences, University of Bristol.
Richard Huxtable is an editor of BMC Medical Ethics.
Consent for publication
Study participants consented for anonymised extracts from interviews to be published.
Ethics approval and consent to participate
This study was given a favourable opinion for conduct by the University of Bristol’s Faculty of Engineering’s Research Ethics Committee on the 21st December 2015. The approval reference number is 28101. All participants gave their consent to participate in this study and for extracts from interviews to be published anonymously.
Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.
Open AccessThis article is distributed under the terms of the Creative Commons Attribution 4.0 International License (http://creativecommons.org/licenses/by/4.0/), which permits unrestricted use, distribution, and reproduction in any medium, provided you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons license, and indicate if changes were made. The Creative Commons Public Domain Dedication waiver (http://creativecommons.org/publicdomain/zero/1.0/) applies to the data made available in this article, unless otherwise stated.
- Aldrich F. Smart homes: past, present and future. In: Harper R, editor. Inside the smart home. London: Springer Science & Business Media; 2006. p. 17–62.Google Scholar
- Schnaars S, Thomas G, Irmak C. Predicting the emergence of innovations from technological convergence: lessons from the twentieth century. J Macromarketing. 2008;28(2):157–68.View ArticleGoogle Scholar
- Sterritt R, Nugent C. Autonomic computing and ambient assisted living. In: Seventh IEEE International Conference and Workshops on Engineering of Autonomic and Autonomous Systems. 2010. p. 149–51.Google Scholar
- Doelling K, Shin J, Popa DO. Service robotics for the home. PETRA ’14 Proceedings of the 7th International Conference on PErvasive Technologies Related to Assistive Environments. 2014:1-8.
- Piau A, Campo E, Rumeau P, Vellas B, Nourhashemi F. Aging society and gerontechnology: a solution for an independent living? J Nutr Health Aging. 2014;18(1):97–112.View ArticleGoogle Scholar
- Tamura T. Home geriatric physiological measurements. Physiol Meas. 2012;33(10):R47–65.View ArticleGoogle Scholar
- Fan X, Huang H, Qi S, Luo X, Zeng J, Xie Q, Xie C. Sensing home: a cost-effective design for smart home via heterogeneous wireless networks. Sensors (Basel). 2015;15(12):30270–92.View ArticleGoogle Scholar
- Chung J, Demiris G, Thompson HJ. Ethical considerations regarding the use of smart home technologies for older adults: an integrative review. Annu Rev Nurs Res. 2016;34:155–81.View ArticleGoogle Scholar
- Brown I, Adams AA. The ethical challenges of ubiquitous healthcare. Int Rev Inf Ethics. 2007;8(12):53–60.Google Scholar
- Pimple KD. Principles for the ethical guidance of PICT. In: Pimple K, editor. Emerging Pervasive Information and Communication Technologies (PICT) ethical challenges, opportunities and safeguards. Dortrecht: Springer Netherlands; 2014. p. 209–25.View ArticleGoogle Scholar
- Essen A. The two facets of electronic care surveillance: an exploration of the views of older people who live with monitoring devices. Soc Sci Med (1982). 2008;67(1):128–36.View ArticleGoogle Scholar
- Townsend D, Knoefel F, Goubran R. Privacy versus autonomy: a tradeoff model for smart home monitoring technologies. In: Conference proceedings : Annual International Conference of the IEEE Engineering in Medicine and Biology Society IEEE Engineering in Medicine and Biology Society Annual Conference 2011. 2011. p. 4749–52.View ArticleGoogle Scholar
- Jacelon CS, Hanson A. Older adults’ participation in the development of smart environments: an integrated review of the literature. Geriatr Nurs. 2013;34(2):116–21.View ArticleGoogle Scholar
- Swift AG. Locating ‘agency’ within ubiquitous computing systems. Int Rev Inf Ethics. 2007;8(12):36–41.Google Scholar
- Harvey F. We know where you are. and we’re more and more sure what that means. In: Pimple K, editor. Emerging Pervasive Information and Communication Technologies (PICT) ethical challenges, opportunities and safeguards. Dordrecht: Springer Netherlands; 2014. p. 71–87.View ArticleGoogle Scholar
- Turki AT. On the normativity of the immune system. Med Studies. 2011;3(1):29–39.View ArticleGoogle Scholar
- Waller W. Criminal insanity, diagnosis, and public morality. Wash U Jurisprudence Rev. 2011;4:183–212.Google Scholar
- Smith G, Bartlett A, King M. Treatments of homosexuality in Britain since the 1950s—an oral history: the experience of patients. BMJ. 2004;328(7437):427.View ArticleGoogle Scholar
- Floridi L. On the intrinsic value of information objects and the infosphere. Ethics Inf Technol. 2002;4(4):287–304.View ArticleGoogle Scholar
- Tavani HT. Floridi’s ontological theory of informational privacy: Some implications and challenges. Ethics Inf Technol. 2008;10(2-3):155–66.View ArticleGoogle Scholar
- Gunkel JD. The machine question. Cambridge: The Massachusetts Institute of Technology Press; 2012.Google Scholar
- Orr JE. Talking about machines: an ethnography of a modern job. London: Cornell University Press; 1996.Google Scholar
- Kalpana S, Connelly KH. Ethics and pervasive technologies. Teach Ethics. 2010;11(1):75–85.View ArticleGoogle Scholar
- Kehagia AA, Tairyan K, Federico C, Glover GH, Illes J. More education, less administration: reflections of neuroimagers’ attitudes to ethics through the qualitative looking glass. Sci Eng Ethics. 2012;18(4):775–88.View ArticleGoogle Scholar
- Mecca JT, Gibson C, Giorgini V, Medeiros KE, Mumford MD, Connelly S. Researcher perspectives on conflicts of interest: a qualitative analysis of views from academia. Sci Eng Ethics. 2015;21(4):843–55.View ArticleGoogle Scholar
- Davies R, Ives J, Dunn M. A systematic review of empirical bioethics methodologies. BMC Med Ethics. 2015;16(1):15.View ArticleGoogle Scholar
- The EU Framework Programme for Research and Innovation. [https://ec.europa.eu/programmes/horizon2020/en/h2020-section/responsible-research-innovation]. Accessed 6 Nov 2016.
- Rapley T. Some pragmatics of data analysis. In: Silverman D, editor. Qualitative research. 3rd ed. London: Sage; 2011. p. 273–90.Google Scholar
- Braun V, Clarke V. Using thematic analysis in psychology. Qual Res Psychol. 2006;3(2):77–101.View ArticleGoogle Scholar
- Schoeman FD. Privacy and social freedom. Cambridge: Cambridge University Press; 1992.View ArticleGoogle Scholar
- Gavison R. Privacy and the limits of law. Yale Law J. 1980;89(3):421–71.View ArticleGoogle Scholar
- Nissenbaum H. Privacy in context: technology, policy, and the integrity of social life. California: Stanford University Press; 2010.Google Scholar
- Thomson J. The right to privacy. Philos Public Aff. 1975;4:295–314.Google Scholar
- Murtagh MJ, Demir I, Jenkings KN, Wallace SE, Murtagh B, Boniol M, Bota M, Laflamme P, Boffetta P, Ferretti V, et al. Securing the data economy: translating privacy and enacting security in the development of DataSHIELD. Public Health Genomics. 2012;15(5):243–53.View ArticleGoogle Scholar
- Allen AL. Coercing privacy. William and Mary Law Rev. 1999;40(3):723–4.Google Scholar
- Moreham NA. Beyond information: physical privacy in english law. Cambridge Law J. 2014;73(2):350–77.View ArticleGoogle Scholar
- Fensli R, Pedersen PE, Gundersen T, Hejlesen O. Sensor acceptance model – measuring patient acceptance of wearable sensors. In: Methods of information in medicine. 2008.Google Scholar
- Chiauzzi E, Rodarte C, DasMahapatra P. Patient-centered activity monitoring in the self-management of chronic health conditions. BMC Med. 2015;13:77.View ArticleGoogle Scholar
- How the science of human behavior change offers the secret to long-term engagement. [http://endeavourpartners.net/assets/Endeavour-Partners-Wearables-and-the-Science-of-Human-Behavior-Change-Part-1-January-20141.pdf]. Accessed 6 Nov 2016.
- Shammas L, Zentek T, von Haaren B, Schlesinger S, Hey S, Rashid A. Home-based system for physical activity monitoring in patients with multiple sclerosis (pilot study). Biomed Eng Online. 2014;13:10.View ArticleGoogle Scholar
- Sandroff BM, Riskin BJ, Agiovlasitis S, Motl RW. Accelerometer cut-points derived during over-ground walking in persons with mild, moderate, and severe multiple sclerosis. J Neurol Sci. 2014;340(1-2):50–7.View ArticleGoogle Scholar
- Ziefle M, Rocker C, Holzinger A. Medical technology in smart homes: exploring the user’s perspective on privacy, intimacy and trust. In: 35th IEEE annual computer software and applications conference workshops. 2011. p. 410–5.View ArticleGoogle Scholar
- Gillon R. Ethics needs principles--four can encompass the rest--and respect for autonomy should be “first among equals”. J Med Ethics. 2003;29(5):307–12.View ArticleGoogle Scholar
- Sandman L, Munthe C. Shared decision-making and patient autonomy. Theor Med Bioeth. 2009;30(4):289–310.View ArticleGoogle Scholar
- Coggon J, Miola J. Autonomy, liberty, and medical decision-making. Camb Law J. 2011;70(3):523–47.View ArticleGoogle Scholar
- Mol A. The logic of care: health and the problem of patient choice. Abingdon: Routledge; 2008.Google Scholar
- Floridi L. The ontological interpretation of informational privacy. Ethics Inf Technol. 2005;7(4):185–200.View ArticleGoogle Scholar
- Langheinrich M. Privacy in ubiquitous computing. In: Krumm J, editor. Ubiquitous computing fundamentals. Florida: Chapman and Hall/CRC; 2010. p. 95–159.Google Scholar
- Cohen J. Regulating intimacy: a new legal paradigm. Princeton: Princeton University Press; 2002.Google Scholar
- Solove D. Understanding privacy. Cambridge: Havard University Press; 2008.Google Scholar
- Cate FH. Protecting privacy in health research: the limits of individual choice. California Law Rev. 2010;98(6):1765–803.Google Scholar
- Reidenberg JR, Russell NC, Callen AJ, Qasir S, Norton TB. Privacy harms and the effectiveness of the notice and choice framework. ISJLP. 2015;2:485–524.Google Scholar
- Ben-Shahar O, Schneider CE. The failure of mandated discourse. Univ. Penn. Law Rev. 2011;159:647–749.Google Scholar