Cyber: Everyday Tech, Hidden Risks: Cyber security and data protection – webinar recording

This webinar explored the hidden cyber security and data protection risks associated with everyday technology in social care, including smart devices, messaging apps, video calls and wearable technology, and shared practical steps for using them safely and responsibly.

Speakers:

  • Emma Nichols – Consultant, ECN Consulting
  • Christopher Ede – Care Technologist , Brandon Trust
  • Alice Dunning – Research Fellow, University of Sheffield
  • Sam Cattell – Technical Cyber Lead, Digital Care Hub
  • Katie Thorn – Director of Innovation, Digital Care Hub

This webinar was held on 15 October 2026, and is part of Cyber Digital Care in Focus month.

Download a PDF of the presentation 

Download a transcript of the webinar

View a recording below, and scroll down for a summary of key messages and useful links.

 

 Key messages

Technology should always start with the person, reflecting their goals, preferences and circumstances rather than being driven by the device itself. Used well, it can increase independence and inclusion, but this must be balanced with privacy, consent and the rights of others. Because devices, software, suppliers and people’s needs can change, risks and consent should be reviewed regularly. Digital inclusion also requires more than providing a device: people need accessible guidance, reliable connectivity and ongoing support. Providers should also ensure staff use approved, secure work systems, as informal messaging and personal devices can expose sensitive information. 

Key risks identified 

  • Unintended recording and data capture: smart speakers and doorbells may activate unexpectedly, record conversations or retain information without people realising. 
  • Inaccurate or misleading information: devices may misidentify who is speaking, create false alerts or produce timestamps and records that should not be treated as definitive evidence. 
  • Privacy, consent and surveillance: monitoring may affect the person, housemates, visitors and staff, and can become unnecessarily restrictive if it is not proportionate and transparent. 
  • Unclear data ownership and access: it may not be obvious who controls the data, where it is stored, who can view it or what happens when suppliers or software change. 
  • Cyber security weaknesses: default passwords, excessive administrator access, poor privacy settings and missed updates can expose devices and personal information. 
  • Unsafe workplace communication: photographs and messages shared through personal devices or informal groups may reveal sensitive information, download automatically or back up to personal cloud storage. 
  • Digital exclusion: cost, poor connectivity, inaccessible interfaces, complex accounts and limited support can prevent people from using technology safely and confidently. 
  • Over-reliance and service failure: technology may fail, lose supplier support or be used as a substitute for human contact without suitable contingency plans. 

Suggestions for providers implementing everyday technology 

  • Start with the outcome: agree what the person wants to achieve before selecting technology. 
  • Support informed choice: explain consent, privacy and risks in accessible ways, and revisit decisions regularly. 
  • Plan the full setup: consider accounts, passwords, connectivity, updates, maintenance and what happens if the technology fails. 
  • Configure devices securely: review privacy settings, change default passwords and limit administrator access. 
  • Prepare staff: provide training, clear policies and routes for advice. 
  • Review the impact: measure success by the difference the technology makes to the person’s life. 

Suggestions for providers when people or families introduce devices 

  • Respect choice: people and families may choose and install their own technology; understand its purpose without automatically taking control. 
  • Risk assess: consider privacy, recording, data sharing, cyber security, consent, shared spaces and the impact on staff and others. 
  • Make staff aware: record relevant devices in care plans and risk assessments so staff know what is present and how it may affect their work. 
  • Train staff: help them recognise when devices may be listening, recording or sharing information, and what action to take if they identify a concern. 
  • Review regularly: revisit the assessment when a device, setting, software or person’s needs change. 

Links to useful resources