Webtrends Tracking Code
 
UK Home >  OUT-LAW News >  News Archive >  2005 >  April 2005 >  Electronic product codes and RFID: privacy guidance

Electronic Product Codes and RFID: privacy guidance

OUT-LAW News, 19/04/2005
The International Chamber of Commerce ( ICC ) has published guidance on the use of EPC tags, basically RFID tags that follow an industry data standard, to reassure consumers that their privacy will be respected.
Radio Frequency Identification ( RFID ) tags consist of a microchip and a tiny antenna that transmits data from the chip to a reader. The reader is activated whenever the antenna comes into range. The tags and readers can be used to track individual items, cases and pallets as they move from a manufacturer through the supply chain to the end user.
An EPC tag is basically an RFID tag that follows the EPC standard so that its details can be communicated to any EPC reader. Each EPC is divided into numbers that identify the manufacturer, product type and serial number.
The EPC standard has the backing of major companies like Wal-Mart, Procter & Gamble, Unilever and Tesco. Many expect it to be the successor to the ubiquitous barcode.
While there are obvious advantages in using the technology, there are concerns that the tags could also allow businesses and governments to use the devices for surveillance. For while the tags do not contain personally identifiable information, the tag and its location could be linked to information held about an individual in other systems.
The ICC has therefore published guidelines for what it calls the responsible deployment and operation of EPC tags. These state:
  • Use of EPC systems and related technology should be legal, decent, honest and truthful.
  • Notice is essential.
  • Consumer choice is essential, where possible and appropriate.
  • Education is key.
  • Products containing the tags should be labelled and if the tag is contained in the body of the product, details of its location provided.
  • Accurate information as to the collection, use and reason for the collection of personal identifiable data should be given and all data protection laws complied with.
  • EPC users should make public their policies on the use of the data.
  • Personally identifiable data should be protected by security safeguards.
  • Consumers should be given the right to access information held by them and to correct it if necessary.

 

OUT-LAW Recommends

Data Protection training
We offer training courses on Data Protection and Freedom of Information laws

Winner at 2008 Webby Awards

OUT-LAW star: link to the home page
Disclaimer: This was printed from OUT-LAW.COM, a service of international law firm Pinsent Masons. We hope you find this content useful. However, please note that nothing in this document constitutes specific legal advice. You should consult a suitably qualified lawyer on any specific legal problem or matter. Any questions, please email info@out-law.com.