1. RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net www.icri.be Eleni Kosta ICRI – K.U.Leuven

2. RFID Applications  Logistics  Recycling and waste management  Passports  Libraries  Newborn armbands  Prisoners tagging  VIP Clubs dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be

3. dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be Are there privacy risks in all the aforementioned applications?

4. dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be

5. What are “personal data”? “Personal data” shall mean any information relating to an identified or identifiable natural person. dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be

6. When do data protection issues arise? RFID tags contain personal data RFID tags can be linked to a natural person dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be

7. RFID Applications  Logistics  Recycling and waste management  Passports  Libraries  Newborn armbands  Prisoners tagging  VIP Clubs dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be

8. RFID Applications  Logistics  Recycling and waste management  Libraries  Newborn armbands  Prisoners tagging  VIP Clubs  Passports dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be

9. dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be What about retail sector?

10. Privacy threats  Continuous link between tag and object  holder of the object, e.g. “shopper’s profile”  Linking with personal data, such as credit card details or loyalty cards  Consumer anonymity?  Creation of databases  Profiling dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be

11. Privacy threats  Direct marketing when entering an area  Location & Tracking (via the tagged objects)  Easy surveillance  No transparency  Lack of user control dariusz.rozanski@szczesliwice.net www.icri.be E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

12. Industry? dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be

13. dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be

14. You don’t need this!! dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be

15. What should industry do?  Collect the data for a specified purpose  Use only the absolutely necessary data  Keep the data accurate and up to date  Delete the data when they are not needed any more  Information to the consumer  About their rights  About the tags  About the readers dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be

16. Information Like ‘speed camera signs’… dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be

17. …we could have signs like dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be RFID READER Information

18. Applicability of the ePrivacy directive ? Publicly available electronic communications services ? Public communications network FIDIS Project: www.fidis.net dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be

19. Solutions  De-activation mechanisms: Kill command OR enable/disable mechanism  Standardisation initiatives for the minimisation of the collection and use of c  Passwords in tags  Encryption  Shielding of tags dariusz.rozanski@szczesliwice.net E. Kosta: “RFID Technology: When innovation brings along data protection challenges” www.icri.be

20. Name: Surname: Company: Phone: E-mail: Eleni Kosta ICRI – K.U.Leuven +30 16 32 07 74 eleni.kosta@law.kuleuven.be dariusz.rozanski@szczesliwice.net www.icri.be