Security and privacy are major concerns for the use and acceptance of the IoT, especially in cases where private, non-aggregated data are concerned. The use of VICINITY Platform combined with secure storage and authorized data transactions respecting GDPR regulations, aims to address privacy challenges of applications. To ensure that the IoT users are fully aware to whom, for which data and what purpose, they give consent to, is the first step for global acceptance IoT applications. Privacy-by-design principles are offered by VICINITY Platform in terms of IoT devices and services privacy agreements (Contracts), strengthened by security features as encryption and use of the XMPP protocol for communications, which is of great importance in today’s eHealth, smart cities and energy IoT applications.