1. RFID The consumers’ scenarios Emilie Barrau ANEC General Assembly Brussels 1 June 2007

2. Radio Frequency IDentification RFID is a technology that allows automatic identification and data capture by using radio frequencies. It needs 3 elements: a tag, a reader and an antenna. © http://www.rfidconsultation.eu/menu/1http://www.rfidconsultation.eu/menu/1

4. Radio Frequency IDentification RFID what? Very little consumer awareness  77% are not aware of RFID (Capgemini, 2004)  Little contact with consumers – B2B use A technology still under development… …Yet, already used  Implementation decision before full trials take place  Security issues raised for years: e.g. passports already cracked

5. TODAY We already live in a surveillance society

6. TOMORROW ??

7. RFID policy at European level Commission workshops: May – October 2006 Commission online consultation: Summer 2006 Commission communication: March 2007 Commission experts groups: started 29 May 2007 Recommendation: end of 2007 Communication on Ambient Intelligence: end 2008

8. ANEC – BEUC joint position paper Scenario I: The ‘Glass consumer’ Scenario II: Security flows Scenario III: Impacts on the health and the environment Scenario IV: The economic impact Scenario V: The use of RFID standards

9. SCENARIO I: THE ‘GLASS CONSUMER’ 1.Right to know 2.Right to choose 3.Respect and enforcement of existing rules

10. RIGHT TO KNOW Transparency & accountability Clear and intelligible information:  On site information  Labelling  Balanced information campaigns Awareness raising of sellers, manufacturers and technicians => Informed choice

11. RIGHT TO CHOOSE Anonymity Consent on personal data being collecting Possibility to deactivate or remove the tag (“sure kill”) => Consumer control

12. Respect and enforcement of existing rules European regulatory framework  EU Data Protection Directive 1995/46/EC  E-privacy Directive 2002/58/EC Reflection on further regulatory actions  Recommendation on privacy and security  Codes of conduct/guidelines as complements

13. SCENARIO II: SECURITY FLOWS Options are still open

14. END USER CONTROL OF THE TECHNOLOGY Privacy and security by design Privacy Enhancing Technologies (PETs) Privacy Impact Assessments (PIAs) Security Impact Assessments (SIAs)

15. Conclusion “Industry should expend less efforts on fighting new regulations and more on involving stakeholders in the assessment and management of risks to privacy, identity, trust, security and inclusiveness”. from the Safeguards in a World of Ambient Intelligence (SWAMI) report, 2006

16. The European Consumers Organisation Bureau Européen des Unions de Consommateurs Avenue de Tervueren, 36 -1040 Bruxelles Tel: 0032 2 743 15 90 - Fax: 0032 2 740 28 02 Email: eba@beuc.eu www.beuc.eueba@beuc.eu www.beuc.eu Thank you for your attention!