JRC Brussels workshop, October 28, Directorate General Information Society and Media

Transcription

1 European Commission RFID follow up policy JRC Brussels workshop, October 28, 2009 Florent Frederix Head of Sector European Commission Directorate General Information Society and Media This document does not necessarily reflect any official position of the Commission

2 The Future The International dimension Cluster of Research projects Innovative RFID Pilots RFID recommendation action plan

3 The international dimension Share best practices/conferences OECD (2005, 2009) RFID/USN South Korea (October 2007) Exchanges with China (MOST 2006, CESI 2009) FTC / DoC / DoD conferences ( ) Exchanges with Japan (METI ) Enhanced co-operation EU-US RFID lighthouse project (2008) Co-operation agreement with METI Japan Partnership of standards organisations under GRIFS project (EU / US / Japan / China / South Korea / ) International dimension End

4 The RFID lighthouse initiative International dimension

5 The RFID lighthouse project History The 2007 EU-US summit Activities under the RFID Lighthouse initiative Grants reserved under framework 7 call 5 Part of larger concerted international effort International dimension

6 What was the EU-US 2007 summit? We, the leaders of the European Union and the United States of America, met today in Washington to deepen our strategic partnership. This partnership is based on common values, in particular on the deeply shared conviction that peace, prosperity and human development depend upon the protection of individual liberty, human rights, the rule of law, economic freedom, energy security, environmental protection and the growth of strong, democratic societies. Consistent with our commitment to work together to advance our shared values and interests, we have today: Adopted a framework on transatlantic economic integration which lays a long-term foundation for building a stronger and more integrated transatlantic economy, in particular by fostering cooperation to reduce regulatory burdens and accelerating work on key lighthouse projects in the areas of intellectual property rights, secure trade, investment, financial markets, and innovation. International dimension

7 Purpose of the EU-US 2007 Summit Believing that deeper transatlantic economic integration and growth will benefit our citizens and the competitiveness of our economies, will have global benefits, will facilitate market access for third countries and will encourage other countries to adopt the transatlantic economic model of respect for property rights, openness to investment, transparency and predictability in regulation, and the value of free markets; Affirming our shared commitment to increase the transparency and efficiency of our economic cooperation and to accelerate the reduction of barriers to international trade and investment; Desiring to improve the effectiveness of existing economic cooperation and to elevate and accelerate existing work to achieve tangible progress; International dimension

8 What is the RFID lighthouse project? We seek to strengthen transatlantic economic integration, with the goal of improving competitiveness and the lives of our people. To that end, this Framework reaffirms a multiyear program of cooperation that emphasizes results and provides accountability Section III: Lighthouse Priority Projects: We have identified in Annex 2 priority growth projects, selected from the existing work program and other programs within the existing transatlantic dialogue, that will significantly enhance transatlantic economic integration Annex 2 D. Innovation and Technology. 2. Develop a joint framework for cooperation on identification and development of best practices for Radio Frequency Identification (RFID) technologies and develop a work plan to promote the interoperability of electronic health record systems; International dimension

9 Political endorsement of the project Signed at Washington DC on this 30th day of April, 2007, in two originals. FOR THE EUROPEAN UNION: Angela Merkel, President of the European Council José Manuel Barroso, President of the European Commission FOR THE UNITED STATES OF AMERICA: George W. Bush, President International dimension Reference: 9100/07 (Presse 96) 8

10 RFID Lighthouse initiative activities Exchanges of best practices EU-US symposiums Dedicated workshops / conferences Joint pilot projects Addressing EU-US economic integration RFID (at large) technology based International dimension

11 Grants reserved under Fp7 call 5 Objective ICT : Internet of Things and Enterprise environments c) International co-operation and co-ordination RFID: Exchange of best practices from field trials or the deployment of pilot projects as well as collaborative pre-normative research aiming at global standards, as part of the 'Lighthouse priority project' decided at the EU-US Transatlantic Economic Council in April Organisation of the European follow-up of this initiative to support the established dialogue. c): CSA: Indicative budget distribution: EUR 2 million International dimension

12 Part of a larger concerted effort RFID and Internet of Things Are network technologies Benefit grows with number of users Goods tend to travel around the world International standards International rules compliant applications International dimension

13 Cluster of European Research Projects on RFID and the Internet Of Things Cluster of research projects

14 List of CERP-IoT Projects AMI-4-SME, ASPIRE, BRIDGE, CASAGRAS, CE-RFID, CoBIS, CuteLoop, Dynamite, EU-IFM, EURIDICE, GRIFS, HYDRA, Indisputable Key, isurf, Asuman Dogac LEAPFROG, Lutz Walter PEARS Feasibility, Humberto Moran PRIME, Marit Hansen PrimeLife, Dieter Sommer PROMISE, Dimitris Kiritsis SMART, Kostas Thiveos SMMART, Jean Louis Boucon StoLPaN, András Vilmos SToP, Harald Vogt TraSer, Zsolt Kemeny AITPL Cluster, Markus Rabe + ETP EPoSS, Alessandro Bassi Cluster of research projects

15 Previous 2007/2008 CERP RFID general objectives Facilitate networking of different European RFID and IoT projects expertise, talents, and resources and maximize impact Establish synergies between projects Coordinate research activities and assure coherence of work in Europe Provide expert statements on different topics Cluster of research projects

16 Past CERP 2007 work done CERP Working Paper on future RFID Research Needs CE RFID Standard roadmap (as a key starting document for GRIFS and CASAGRAS) website with login, brochure, flyer, mailing list, collection of projects, workshop and fair participation to promote CERP CERP cluster meetings organization, location and frequency, collaboration room on the website and dissemination of information, yearly Cluster report, liaison with AITPL cluster and ETP EPoSS Cluster of research projects

17 CERP-IoT scope in 2008 New scope toward Internet Of Things IoT Architecture, Security and Privacy, Coding, Naming, Spectrum, harmonized global RFID and IoT standardization... Facilitate international collaboration on RFID and IoT with the support of the European Commissions Cluster of research projects

18 Focus areas 2009 The following focus areas are proposed: Publication of an updated strategic research roadmap Publication of CERP-IoT Cluster book in 2009 Sound contribution in the next high level events and conferences Identification and concrete areas of cooperation (as stated in the each Project DoW Technical Annexes) Reinforcement of network synergies with the EU RFID Thematic Network RFID in Europe, CASAGRAS and GRIFS Cluster of research projects

19 In 2009 (and beyond) CERP-IoT projects Aspire (Open source Middleware for SMEs), CuteLoop (RFID applications with GNSS), Euridice (Intelligent cargos), isurf (Open Source EPC textile clothing), PrimeLife (P&S of RFID systems), HYDRA (Middleware for networked Embedded Systems), ETP EPoSS (Smart system integration at physical devices levels) GRIFS Cluster of research projects

20 ASPIRE : Advanced Sensors and lightweight Programmable middleware for Innovative Rfid Enterprise applications Duration: January 2008 December 2010 Objectives: Aims at facilitating the deployment of RFID solutions at the lowest possible cost Light-weight, intelligent, scalable, open source and privacy friendly middleware Standard- compliant Focusing on different application domains, such as: Cold Chain Management for food and diary products Asset Management for Pharmaceuticals Product Packaging, Tracking and Traceability Significantly lower the SME entry cost barrier and Total Cost of Ownership (TCO) for RFID technology solutions: Free Middleware running on Low-cost hardware Lower effort for managing the infrastructure and developing applications Topics: Requirements Engineering RFID Middleware Infrastructure RFID Middleware Programmability Privacy Protection and Privacy Friendliness Ubiquitous Added-Value Sensing and Low-Cost Readers Integration and Interoperability Cluster of research projects

21 CuteLoop Customer in the Loop: Using Networked Devices enabled Intelligence for Proactive Customers Integration as Drivers of Integrated Enterprises Duration: February 2008 January 2011 Objectives: Realising an approach for agile coordination in business networks, having customers as key drivers. Enabling distributed asynchronous interaction in an integrated enterprise. Facilitating exchange of knowledge among Large Enterprises, Small and Medium Enterprises and customers. Topics: Facilitating usage of enhanced RFID-based systems and Global Navigation Satellite Systems. Architecture, combining principles from service oriented and event driven architectures. Software agents for distributed and asynchronous interaction. Secure network of interest and trust. Application scenarios from food chain and construction industry. Cluster of research projects

22 GRIFS: Global RFID Interoperability Forum for Standards The Global Interoperability Forum for Standards (GRIFS) is a 2 years (2008 and 2009) Support Action Project funded by the European Commission with the aim to improve collaboration and thereby to maximise the global interoperability of RFID standards. Objectives: Document the standards activities taking place globally on RFID applied to physical items Establish liaisons to disseminate information about the importance of global standards and to align RFID standards development globally Put in place a Global RFID Interoperability forum for Standards (GRIFS), comprising global stakeholders, to ensure continuing close collaboration between standards activities Topics: Global standards Situation analysis Public workshop in Brussels, June 2008 Liaisons with European projects and active role in CERP-IoT Five pilot workshops in Europe, Asia and US Draft Memorandum of Understanding between key RFID standard stakeholders Effective launch and operation of the MoU Cluster of research projects

23 Innovative pilots of RFID Part of the CIP programme 2009 & 2010: 2009 call (4 M ) RFID applications for SMEs 2010 call (12 M ) RFID & IoT applications in Smart cities Innovative RFID pilots

24 Small chips with big potential Recommendation on the implementation of privacy and data protection principles in applications supported by radiofrequency identification 12 th May 2009 (2009) 585 RFID recommendation

25 RFID Policy Mix Charter of Fundamentals Right E-Privacy Directive Data Protection Directive R&TTE Directive Recommendation Self-regulation Codes of Conduct Standardization RFID recommendation

26 OBJECTIVE Promote: a wider take-up of RFID under lawful, ethical, socially and politically acceptable conditions the Internal Market RFID recommendation

27 History (references) WG 29 Working document on data protection issues related to RFID technology Communication: Radio Frequency Identification (RFID) in Europe:steps towards a policy framework The Commission Decision setting up the RFID Expert Group Opinion of the European Economic and Social Committee on Radio Frequency Identification Results of the public online consultation on future RFID Technology Policy European Data Protection Supervisor adopted an opinion Recommendation on the privacy and data protection principles in applications supported by RFID RFID recommendation

28 Operators RFID Recommendation: operator Difference Similarity Data Protection Directive controller RFID recommendation

29 Application RFID Recommendation: application RFID recommendation

30 PIA PIA from the UK Information Commissioner s Privacy Impact Assessment is usefully defined as a process whereby a project's potential privacy issues and risks are identified and examined from the perspectives of all stakeholders, and a search is undertaken for ways to avoid or minimise privacy concerns. Src.: The Information Commissioner's Office (UK) RFID recommendation

31 Information Security why who who RFID applications with implications for the general public, are especially critical with regard to information security and privacy and therefore require specific attention. Member States Operators what what Identify the applications that might raise information security threats with implications for the general public. Develop new schemes i.e. certification. RFID recommendation

32 Information and Transparency on RFID why who if the processing of data is to be fair, the data subject must be in a position to learn of the existence of a processing operation and, where data are collected from him, must be given accurate and full information Operators what Src.: Data Protection Directive Develop and publish information policy for each of their application Use European sign: identity and a point of contact RFID recommendation

33 Information and Transparency on RFID RFID RFID recommendation

34 Information and Transparency on RFID RFID the identity of the operator(s) + a point of contact for more information RFID recommendation

35 Information and Transparency on RFID RFID the identity of the operator(s) + a point of contact for more information Information Policy the identity and address of the operators the purpose of the application what data will be processed by the application? will personal data be processed? will the location of tags be monitored? a summary of the PIA the likely privacy risks (if any) the measures that individuals can take to mitigate these risks RFID recommendation

36 RFID in retail (I) Use of a European Sign Retail why who if the processing of data is to be fair, the data subject must be in a position to learn of the existence of a processing operation and, where data are collected from him, must be given accurate and full information Retailers what Src.: Data Protection Directive Inform individuals of the presence of tags in the products how Not specified! RFID recommendation

37 Retail RFID recommendation Examples in retail

38 RFID in retail (II) Tag deactivation Retail why who RFID tags contain unique IDs attached to consumer products: if each tag has a unique ID, such identification can be used for surveillance purposes... Retailers Opt-in what Deactivate or remove at the point of sale the tag unless consumer give their consent. how Src.: EDPS opinion Free of charge Immediately Consumer can verify RFID recommendation

39 RFID in retail (III) Tag deactivation Retail what Deactivation of the tags should be understood as any process that stops those interactions of a tag with its environment which do not require the active involvement of the consumer RFID recommendation

40 RFID in retail (IV) Tag deactivation Retail why who Some PIA will conclude that the application doesn t represent a likely threat to privacy or the protection of personal data Retailers Opt-out what Don t deactivate but make available an easy means to deactivate or remove the tags how Free of charge Immediately & later RFID recommendation

41 RFID in retail (V) Tag deactivation Retail Retailers what if retailers are not operators Default No threat to privacy what what Opt-in Opt-out Retailer has no obligation Operator should determine whether tagged products sold to consumers through retailers who are not operators represent a likely threat to privacy or the protection of personal data, etc RFID recommendation

42 Awareness raising action and R&D Retail why who Awareness RFID technology among the public and SME and spread the trust in this technology All stakeholders what Inform and raise awareness among: Citizens SMEs Support security and privacy by design RFID recommendation

43 Summary of follow up actions Privacy Impact Assessment Security applications Information policy, including signs/logos Retail specific provisions Awareness Raising Research and Development Recommendation follow up

44 RFID recommendation Follow-up what Develop PIA Framework Security applications Development of signs Awareness Raising Research and Development Inform on actions taken who leads? Industry Members States Standardisation Organisations Member States Member States Member States Recommendation follow up

45 RFID recommendation Follow-up what Develop PIA Framework Security applications Development of signs Awareness Raising Research and Development Inform on actions taken who leads? Industry Members States Standardisation Organisations Member States but all are Member States expected to Member States contribute Recommendation follow up

46 RFID Follow-up Commission s role what Develop PIA Framework Security applications Development of signs Awareness Raising Research and Development Inform on actions taken report on the implementation of this Recommendation, its effectiveness and its impact on operators and consumers Recommendation follow up Report on Recommendation

47 RFID Follow-up Commission s role what Develop PIA Framework Security applications Development of signs Awareness Raising Research and Development Inform on actions taken Follow-up with Member States, including through the i2010 Committee and the Article 29 Working Party Recommendation follow up Report on Recommendation

48 RFID Follow-up Commission s role what Develop PIA Framework Security applications Development of signs Awareness Raising Research and Development Inform on actions taken Continue funding research and development efforts through FP7 (and FP8) Recommendation follow up Report on Recommendation

49 RFID Follow-up Commission s role what Develop PIA Framework Security applications Development of signs Awareness Raising Research and Development Inform on actions taken Continue funding innovation activities such as the RACE thematic network and upcoming pilot projects Recommendation follow up Report on Recommendation

50 RFID Follow-up Commission s role what Develop PIA Framework Security applications Development of signs Awareness Raising Research and Development Inform on actions taken Standards mandate is already adopted and includes the development of such signs Recommendation follow up Report on Recommendation

51 RFID Follow-up Commission s role what Develop PIA Framework Security applications Development of signs Awareness Raising Research and Development Inform on actions taken Support Member States to carry the work. Recommendation follow up Report on Recommendation

52 RFID Follow-up Commission s role what Develop PIA Framework Security applications Development of signs Awareness Raising Research and Development Inform on actions taken Closely monitor the development of the framework through regular meetings inviting all interested parties to report on progress made Recommendation follow up Report on Recommendation

53 For more information on IOT and RFID visit the policy pages of the European Commission: Access to an extensive library, events, links and news section