RFID

The consumers’ scenarios

Emilie Barrau

ANEC General Assembly

Brussels

1 June 2007

Radio Frequency IDentification

RFID is a technology that allows automatic identification and data capture by using radio frequencies. It needs 3 elements: a tag, a reader and an antenna.

©

http

://w

ww

.rfi

dcon

sult

atio

n.eu

/men

u/1

Radio Frequency IDentification

RFID what?

Very little consumer awareness 77% are not aware of RFID (Capgemini, 2004) Little contact with consumers – B2B use

A technology still under development…

…Yet, already used Implementation decision before full trials take place Security issues raised for years: e.g. passports already

cracked

TODAY

We already live in a surveillance society

TOMORROW ??

RFID policy at European level

Commission workshops: May – October 2006

Commission online consultation: Summer 2006

Commission communication: March 2007

Commission experts groups: started 29 May 2007

Recommendation: end of 2007

Communication on Ambient Intelligence: end 2008

ANEC – BEUC joint position paper

Scenario I: The ‘Glass consumer’

Scenario II: Security flows

Scenario III: Impacts on the health and the environment

Scenario IV: The economic impact

Scenario V: The use of RFID standards

SCENARIO I: THE ‘GLASS CONSUMER’

1. Right to know

2. Right to choose

3. Respect and enforcement of existing rules

RIGHT TO KNOW

Transparency & accountability

Clear and intelligible information: On site information Labelling Balanced information campaigns

Awareness raising of sellers, manufacturers and technicians

=> Informed choice

RIGHT TO CHOOSE

Anonymity

Consent on personal data being collecting

Possibility to deactivate or remove the tag (“sure kill”)

=> Consumer control

Respect and enforcement of existing rules

European regulatory framework

EU Data Protection Directive 1995/46/EC E-privacy Directive 2002/58/EC

Reflection on further regulatory actions

Recommendation on privacy and security Codes of conduct/guidelines as complements

SCENARIO II: SECURITY FLOWS

Options are still open

END USER CONTROL OF THE TECHNOLOGY

Privacy and security by design

Privacy Enhancing Technologies (PETs)

Privacy Impact Assessments (PIAs)

Security Impact Assessments (SIAs)

Conclusion

“Industry should expend less efforts on fighting new regulations and more on

involving stakeholders in the assessment and management of risks to privacy,

identity, trust, security and inclusiveness”.

from the Safeguards in a World of Ambient Intelligence (SWAMI) report, 2006

The European Consumers Organisation Bureau Européen des Unions de Consommateurs

Avenue de Tervueren, 36 -1040 Bruxelles Tel: 0032 2 743 15 90 - Fax: 0032 2 740 28 02

Email: eba@beuc.eu www.beuc.eu

Thank you for your attention!