RFID Privacy and You
RFID (Radio-Frequency Identification) is a tiny wireless
technology which has the potential to radically transform the
commerce world. It consists of an inexpensive chip, often
smaller than a grain of sand, which can be read up to several
meters away. The hope among retailers, is that the technology
can be used as a next-generation barcode, automating inventory
levels, and thus cutting costs for manufacturers and retailers.
While the technology does offer some potentially remarkable
opportunities, it also raises some concerns with regard to
individual privacy and corporate espionage.
While barcode-type RFID tags are not likely to reach consumers
on a regular basis in the near future, there is little doubt
that with the success of early trials, they eventually will.
Consequently, concerns about privacy infringement with regard to
RFID are important not only in the theoretical sphere, but
increasingly such discussions have vital practical applications.
SPECIFIC PRIVACY CONCERNS
RFID tags differ from conventional barcode tags in a number of
ways. It is these differences that create the benefit of
adopting the technology, while simultaneously creating the
greatest concern over the privacy issues involved. For example,
under today's bar code technology, a pack of Wrigley's Gum sold
in Houston, Texas has the same barcode as a pack sold in New
York City or Ontario. With RFID, however, each pack would have a
unique ID code which could be tied to the purchaser of that gum
when they use an 'item registration system' such as a frequent
shopper card or a credit card.
Continuing with the Gum example, the purchaser could then be
tracked if he/she ever entered that same store again, or perhaps
more frightening, if they entered any other store with RFID
reading capability. Because unlike a barcode, RFID can be read
at a distance of up to a few yards. Meaning that if you enter a
store with a pack of gum in your pocket, the reader can identify
that pack of gum, the time and date you bought it, where you
bought it, and how frequently you come into the store. If you
used a credit card or a frequent shopper card to purchase it,
the manufacturer and store could also tie that information to
your name, address, and email. You could then receive targeted
advertisements by gum companies as you walk down the aisle, or
receive mailings through your e-mail or snail mail about other
products.
As the technology behind RFID advances, the potential for
privacy infringement does as well. A more recent development is
a study which reveals that RFID already has the capability to
determine the distance of a tag from the reader location. With
such technology already available, it is not difficult to
imagine a situation in which retailers could determine the
location of individuals within their store, and thus target
specific advertisements to that customer based upon past
purchases. In effect, that store would be creating a personal
log of your past purchases, your shopping patterns, and
ultimately your behavioral patters. While such information
gathering would be considered intrusive enough by many
consumer's standards, the danger that such information could be
sold to other retailers, (similar to the way such profiles are
currently sold regarding internet commerce), could create
potentially devastating information vulnerabilities. While some
RFID critics have pointed out that the technology could lead to
some sort of corporate 'Big Brother' there is a more widespread
concern that allowing RFID to develop without legal restrictions
will eliminate the possibility for consumers to refuse to give
such information to retailers.
COUNTER-MEASURES
Despite these and other such dangers, however, there are some
steps being taken to mitigate these privacy issues. For example,
a recent proposal would require that all RFID-tagged products be
clearly labeled. This would give consumers the choice to select
products without RFID, or at a minimum to recognize that the
items they select are being tracked. For those unsatisfied with
disclosure, there also exist a growing number of products
designed to limit their exposure to RFID tagged products. One
such product is