RFID Privacy panel contribution 1

Transcription

1 RFID Privacy panel contribution 1 OECD, Paris [1] Disclaimer: Any opinions expressed in this presentation are the author s own and do not reflect necessarily the position of the European Commission Florent Frederix October 5, 2005

2 European Commission & RFID DG Justice, Liberty and Security: Data privacy issues DG Research: Industrial applications DG Information Society and Media: R&D tech.,appl. Spectrum issues DG Enterprise: Standardisation DG Energy and Transport: Logistics, transport, car identif. DG Taxation and Customs Union Cross-border supply chain security Joint Research Center: Societal studies DG Education and Culture: Culture, education DG Competition: Open market, IPR DG Environment: DG External Relations Intergovernmental contacts Secretariat-General: The Reflection Group invites different stakeholders (technology companies, supply chain and logistics organisations, national registries etc.) in order to obtain a concise picture.

3 Topics of discussion RFID applications Research and Development Interoperability and Standards Radio spectrum RFID governance Protection of Personal Data and Privacy Other policy issues

4 Other policy issues IPR free standards Intellectual property rights Intergovernmental agreements Health Environment Identity theft Ethical aspects of RFID implants Labor practices and RFID

5 International dimension Challenge: Interoperability among RFID tags and readers at global (worldwide) level Uniform standards for sensor-network technologies Some Applications Green lane & express shipments Enforced security for the shipment of goods

6

7 Some questions What is the role of technological solutions? Role of industry self-regulation? (code of conduct) Is existing privacy and data protection legislation adequate?

8 Privacy RFID data linked to personal data e.g. link with payment of credit card -> privacy implication RFID used to store personal data e.g. travel pass -> record of individual travel RFID tracking without traditional identifiers e.g. RFID coins to operate shopping carts Source: Working document in 2005 on data protection issues related to RFID technology by European Commission recalling of basic principles for data protection set out in EU directives in 1995 and 2002 guidance for RFID technology manufacturers to design privacy compliant technology and for standardization bodies public consultation from January 18 to March 31, 2005

9 Article 29 working party Mandate by article 30 of the 1995 directive on personal data protection Consists of data privacy officers of different member states Wrote down opinion on RFID in 2004 Document published and included in handout

10 Next steps Continuous innovation discussion not closed Maybe more sectorial opinions of article 29 group More holistic approach Interservice group

11

12 Institution & organizations European Commission Data protection Working party 29 (representatives of all Member States' national data protection authorities) Interservice RFID Reflection Group DG JLS DG TAXUD DG ENTR DG TREN DG INFSO DG RTD JRC DG DG Frequency spectrum management by CEPT (45 countries) and EU Member States - Transfer into national regulations Standards CEN, CENELEC and ETSI GS-1 for EAN & UPC bar codes Supply chain security Expert group from Member states authorities, TAXUD, JRC, US Customs and Border Protection Research European research framework programme (FP6) National research programmes, Internat. co-operat..

13 florent.frederix