Data privacy in IoT is managed through practices such as data encryption, anonymization of personally identifiable information, obtaining user consent for data collection and usage, and compliance with data protection regulations such as GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act).