Comcast Turns Xfinity WiFi Into a Home Motion Detector
What Happened – Comcast has added “WiFi Motion” to its Xfinity Shield platform, using signal‑strength changes between the gateway and stationary WiFi devices to infer movement inside a home. The feature is opt‑in, free for compatible customers, and can be upgraded with cameras and sensors for $15 /mo.
Why It Matters for Compliance & Audit Readiness
- Motion‑detection data constitute “behavioral” personal information; SOC 2’s Privacy principle requires documented consent, purpose limitation, and retention controls.
- Continuous collection of in‑home presence signals creates a new data‑processing activity that must be reflected in your privacy impact assessments and DSAR procedures.
- Demonstrating that you have a verifiable consent‑management process (e.g., via CookiePLUS) provides audit‑ready evidence for GDPR/CCPA compliance.
Who Is Affected – Residential broadband customers (telecom/ISP sector) and any downstream service providers that integrate Xfinity Wi‑Fi APIs.
Recommended Actions
- Conduct a privacy impact assessment (PIA) for any use of Wi‑Fi‑derived motion data.
- Update consent notices and opt‑in flows to capture explicit user permission for motion‑detection services.
- Map the new data‑processing activity to SOC 2 Privacy controls (CC6.1, CC6.2) and ensure DSAR handling procedures cover motion‑data requests.
- Capture evidence of consent and data‑subject request handling in a continuous‑compliance repository.
Technical Notes – WiFi Motion leverages RF signal attenuation between the Xfinity gateway and selected stationary devices (e.g., smart speakers, thermostats). No cameras are used; the system only reports “motion detected” events. The feature is disabled by default and can be toggled in the Xfinity app. Source: BleepingComputer