 |
| Privacy and Data Collection |
- Will governments be able to use RFID to spy on people?
- If companies choose to put RFID tags in clothes and items consumers carry around, such as wallets, and consumers choose not to kill the tags in these items, it might be possible for governments to use RFID tags for surveillance. But they would have to have access to the database of information related to the tags' EPCs, and it would be easy for individuals to avoid being tracked. RFID readers must emit radio waves to read tags. The signals from a reader can easily be detected and blocked.
- In the future, is it possible that a criminal could scan the EPCs on watches, jewelry and other items to choose whom to rob?
- It's not clear whether RFID tags will ever be used on these items. Companies may simply use them in the packaging of these items. People who buy valuable items will also have the option to kill the tag in these items. But if a company did embed a tag in a watch and a consumer chose not to kill the tag, it would be possible to scan the RFID tag on the item from close range (the tag would have to have a very small antenna to be embedded in a watch, which means the read range would be less than a foot). The criminal would have to know that the serial numbers contained on the tags are associated with high-value products.
- What information is stored on RFID tags?
- The tags most companies are planning to use in the supply chain in the short term and in consumer packaging in the long term will contain only an Electronic Product Code. The EPC will be associated with data in online databases. Some information about the item might be accessible to anyone-such as what the product is-but other information, such as where it was made and when-will be accessible only to those whom the manufacturer wants to make the information available to. So Wal-Mart will not have access to data about products sold by Target and vice versa.
- Why are companies so keen to use RFID if it is not to gain more information on consumers?
- RFID could dramatically improve efficiency in the supply chain and reduce waste. If it can reduce the times products are not on the shelf when consumers want to buy they, it could also increase sales.
- Are there laws governing the use of RFID?
- Many existing privacy laws cover the use of data collected by RFID systems, as well as bar codes and other systems. Some U.S. states have enacted or considered enacting new laws dealing with issues particular to RFID, such as the surreptitious scanning of tags by retailers or those with criminal intent. Washington introduced HB 1031 (the Electronic Bill of Rights), imposing rules on how companies could deploy RFID and retain personal information gathered via the technology, but this bill was returned to the House Rules Committee (see Washington's RFID Bill Halted). Michigan has created a payment incentive program to help ameliorate the cost to farmers, while still ensuring that the majority of livestock is tagged. Michigan has mandated the use of RFID tags to identify cattle, and more than a dozen other states have introduced laws limiting attempts to require RFID use for livestock. Wisconsin has no intention to mandate animal identification, but has offered an incentive program similar to Michigan's (see Wisconsin Ups RFID-Adoption Incentives for Cattle Growers). New Hampshire's House of Representatives approved HB-203, requiring warning labels on consumer goods and identity documents containing RFID tags or other tracking devices, as well as regulating the use of RFID for tracking individuals, and establishing a commission on the use of tracking devices in government and business. The bill was sent to the N.H. Senate to be assigned a hearing committee (see N.H. Reps Approve 'Tracking Device' Bill). And California proposed SB 768 (the Identity Information Protection Act of 2006), which would have been the first state bill to address how RFID technology could be used in government identification documents. Calif. Governor Arnold Schwarzenegger, however, vetoed the bill (see Calif. Gov Terminates RFID ID Bill). Most countries outside the United States have not yet passed such laws.
- What kind of data do companies want to collect?
- Companies are interested in using RFID in the supply chain. The main goal is to use it to make sure they have products on the shelves when companies want to buy them. It's envisioned that "smart shelves"—shelves with RFID readers in them—will alert staff when inventory is running low. There is also hope that RFID can be used to reduce theft by alerting staff when there is unusual shelf activity—such as when someone grabs a dozen tubes of lipstick or razors.
- What is RFID Journal's position on RFID and privacy?
- Our editorial position is that consumers should be notified when products contain RFID tags and when RFID readers are being used to read tags, such as in a retail store. We believe consumers should have the choice to buy goods without RFID tags or with tags that have been killed, and consumers should be notified about what data is being collected on them and how it should be used. We think this is not only the right thing to do; it is also good business. We believe the key to protecting consumer privacy is education. If consumers understand what RFID is, how it can and can't be used, the benefits it provides and how it could be abused, they will make intelligent choices about what they are willing to accept, and companies will respond to their concerns or risk losing customers.
- Could a criminal build an illegal, high-powered reader and scan all the items in homes to choose which ones to rob?
- That's very unlikely. For a reader to read passive tags through the walls of a home from the street, the power output would have to be so high that the popcorn in the cupboard would start popping. In addition, the criminal would obtain only a string of serial numbers, which might have no meaning unless it were a truly sophisticated criminal with access to EPC databases. And looking in windows would probably be a cheaper and more effective way of figuring out whether there are items in a house worth stealing.
- Will RFID enable companies to keep track of what consumers buy?
- There are very few items with RFID tags in them today, so it is not clear exactly what information companies will collect. But it's likely that any information companies collect using RFID will be similar to what they glean today when consumers buy items using a credit card or a loyalty card. It's envisioned that the packaging of products will have an RFID tag that contains an Electronic Product Code-a unique serial number that identifies the manufacturer, product type and a series of numbers that identifies that unique item. Companies will use this number to track products through the supply chain. It's important to be able to tell one carton of milk from another in the supply chain because they have different expiry dates. But there is little benefit to knowing which specific items customers by. Companies want to know the types of items people buy, so they can sell those customers other items that match their taste. Companies can already get this information from barcodes.
- Can RFID tags be read from satellites?
- Passive RFID tags, the kind companies are talking about using one day on consumer products, can't be read from more than 20 feet or so. Active RFID tags, which use a battery to broadcast a signal and are used on cargo containers and other large assets, could be read from a satellite if there is little RF "noise" (ambient RF energy that causes interference) and the broadcasted signal is powerful enough.
- From how far away can a typical RFID tag be read?
- The distance from which a tag can be read is called its read range. Read range depends on a number of factors, including the frequency of the radio waves uses for tag-reader communication, the size of the tag antenna, the power output of the reader, and whether the tags have a battery to broadcast a signal or gather energy from a reader and merely reflect a weak signal back to the reader. Battery-powered tags typically have a read range of 300 feet (100 meters). These are the kinds of tags used in toll collection systems. High-frequency tags, which are often used in smart cards, have a read range of three feet or less. UHF tags-the kind used on pallets and cases of goods in the supply chain-have a read range of 20 to 30 feet under ideal conditions. If the tags are attached to products with water or metal, the read range can be significantly less. If the size of the UHF antenna is reduced, that will also dramatically reduce the read range. Increasing the power output could increase the range, but most governments restrict the output of readers so that they don't interfere with other RF devices, such as cordless phones.
|
|
|