RFID The consumers’ scenarios Emilie Barrau ANEC General Assembly Brussels 1 June 2007

Radio Frequency IDentification RFID is a technology that allows automatic identification and data capture by using radio frequencies. It needs 3 elements: a tag, a reader and an antenna. ©

Radio Frequency IDentification RFID what? Very little consumer awareness  77% are not aware of RFID (Capgemini, 2004)  Little contact with consumers – B2B use A technology still under development… …Yet, already used  Implementation decision before full trials take place  Security issues raised for years: e.g. passports already cracked

TODAY We already live in a surveillance society

TOMORROW ??

RFID policy at European level Commission workshops: May – October 2006 Commission online consultation: Summer 2006 Commission communication: March 2007 Commission experts groups: started 29 May 2007 Recommendation: end of 2007 Communication on Ambient Intelligence: end 2008

ANEC – BEUC joint position paper Scenario I: The ‘Glass consumer’ Scenario II: Security flows Scenario III: Impacts on the health and the environment Scenario IV: The economic impact Scenario V: The use of RFID standards

SCENARIO I: THE ‘GLASS CONSUMER’ 1.Right to know 2.Right to choose 3.Respect and enforcement of existing rules

RIGHT TO KNOW Transparency & accountability Clear and intelligible information:  On site information  Labelling  Balanced information campaigns Awareness raising of sellers, manufacturers and technicians => Informed choice

RIGHT TO CHOOSE Anonymity Consent on personal data being collecting Possibility to deactivate or remove the tag (“sure kill”) => Consumer control

Respect and enforcement of existing rules European regulatory framework  EU Data Protection Directive 1995/46/EC  E-privacy Directive 2002/58/EC Reflection on further regulatory actions  Recommendation on privacy and security  Codes of conduct/guidelines as complements

SCENARIO II: SECURITY FLOWS Options are still open

END USER CONTROL OF THE TECHNOLOGY Privacy and security by design Privacy Enhancing Technologies (PETs) Privacy Impact Assessments (PIAs) Security Impact Assessments (SIAs)

Conclusion “Industry should expend less efforts on fighting new regulations and more on involving stakeholders in the assessment and management of risks to privacy, identity, trust, security and inclusiveness”. from the Safeguards in a World of Ambient Intelligence (SWAMI) report, 2006

The European Consumers Organisation Bureau Européen des Unions de Consommateurs Avenue de Tervueren, Bruxelles Tel: Fax: Thank you for your attention!