US civil society organisation, the Electronic Privacy Information Center (EPIC), published a letter sent to the US Congress sub-committee on Manufacturing, Trade, and Consumer Protection, concerning privacy and security of Internet of things (IoT) devices. The letter was sent prior to a hearing of the Consumer Product Safety Commission, arguing that the commission must do more to protect consumers and ensure the security of IoT devices. The letter advised the commission to demand manufacturers, among others, to minimise data collection, to conduct privacy impact assessments, and to use privacy enhancing measures.