Washington State Adopts Second RFID Privacy Law

HB 1011 also provides an exception for inadvertent RFID reads in situations in which an individual or group retrieving data from RFID chips that are not their own—such as those contained in loyalty cards—unintentionally reads another RFID tag, as long as the information is not used or disclosed. Mullen indicates his approval of this exception, which he says "shows that legislators are thinking this through," by considering the likelihood of such inadvertent RFID reads.

Gregoire vetoed a section of the bill that would have required the state's attorney general to make annual recommendations to the legislature regarding any new "potentially invasive technologies," In a public statement, she claimed this section of the bill would have created a financial hardship to the state, noting, "This requirement is unfunded and will require the Attorney General's Office to divert its scarce financial resources away from other higher priority activities. Additionally, a presumptive label as 'personally invasive' may stifle emerging technologies with high potential in the research and commercial fields."

In March 2008, the state passed HB 1031, targeting criminals who might utilize an RFID interrogator to capture information regarding an individual by reading the tags without his or her knowledge (see Washington State Governor Signs Anti-Skimming Law). HB 1031 made it a Class C felony to read data on RFID tags without that person's knowledge and consent, for the purposes of committing fraud, identity theft or other illegal activity.

The two other bills Morris introduced in January were HB 1006 and HB 1044. HB 1006 would have required all RFID-tagged products to bear a universal, clear and conspicuous label—recognizable by the public—to indicate RFID technology is being utilized. Morris says he has dropped this bill because he believes privacy is already properly ensured in HB 1011. "I think what we've adopted here secures privacy," he says, "while at the same time doesn't inhibit commerce."

HB 1044 would have directed the Washington State Information Services Board to develop privacy standards for state agencies employing RFID technology. The bill would have provided the board with oversight regarding the use of radio frequency identification, and whether the technology is the most appropriate solution for a specific application, by state agencies such as the Department of Licensing. Currently, the department provides RFID-enabled driver's licenses intended to be read by interrogators at the Canadian border as an alternative to a passport. Morris says he plans to spend the summer session discussing this bill further with stakeholders before deciding whether to pursue it.

Legislators in the states of Nevada, New York and New Hampshire are currently reviewing bills intended to protect privacy by limiting the use of RFID (Senate Bill 125, Assembly Bill A00276 and House Bill 478, respectively). In Virginia, a similar recent legislative effort, Senate Bill 1255, failed to pass that state's Senate Commerce and Labor Committee.