RFID Technology: When innovation brings along data protection challenges...

20
RFID Technology: When innovation brings along data protection challenges [email protected] www.icri.b e Eleni Kosta ICRI – K.U.Leuven

Transcript of RFID Technology: When innovation brings along data protection challenges...

Page 1: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

RFID Technology: When innovation brings along

data protection challenges

[email protected]

www.icri.be

Eleni KostaICRI – K.U.Leuven

Page 2: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

RFID Applications

Logistics

Recycling and waste management

Passports

Libraries

Newborn armbands

Prisoners tagging

VIP Clubs

[email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

Page 3: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

[email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

Are there privacy risks in all the aforementioned

applications?

Page 4: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

[email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

Page 5: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

What are “personal data”?

“Personal data” shall mean any information relating to an identified or identifiable natural person.

[email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

Page 6: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

When do data protection issues arise?

RFID tags contain personal data

RFID tags can be linked to a natural person

[email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

Page 7: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

RFID Applications

Logistics

Recycling and waste management

Passports

Libraries

Newborn armbands

Prisoners tagging

VIP Clubs

[email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

Page 8: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

RFID Applications

Logistics

Recycling and waste management

Libraries

Newborn armbands

Prisoners tagging

VIP Clubs

Passports

[email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

Page 9: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

[email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

What about retail sector?

Page 10: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

Privacy threats

Continuous link between tag and object holder of the object, e.g. “shopper’s profile”

Linking with personal data, such as credit card details or loyalty cards

Consumer anonymity? Creation of databases Profiling

[email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

Page 11: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

Privacy threats

Direct marketing when entering an areaLocation & Tracking (via the tagged objects)Easy surveillance No transparency Lack of user control

[email protected]

www.icri.be

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

Page 12: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

Industry?

[email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

Page 13: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

[email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

Page 14: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

You don’t need this!!

[email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

Page 15: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

What should industry do?

Collect the data for a specified purpose

Use only the absolutely necessary data

Keep the data accurate and up to date

Delete the data when they are not needed any more

Information to the consumer About their rightsAbout the tagsAbout the readers

[email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

Page 16: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

Information

Like ‘speed camera signs’…

[email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

Page 17: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

…we could have signs like

[email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

RFID READER

Information

Page 18: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

Applicability of the ePrivacy directive

? Publicly available electronic communications services

? Public communications network

FIDIS Project:

www.fidis.net [email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

Page 19: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

Solutions

De-activation mechanisms: Kill command OR enable/disable mechanism

Standardisation initiatives for the minimisation of the collection and use of c

Passwords in tagsEncryption Shielding of tags

[email protected]

E. Kosta: “RFID Technology: When innovation brings along data protection challenges”

www.icri.be

Page 20: RFID Technology: When innovation brings along data protection challenges dariusz.rozanski@szczesliwice.net  Eleni Kosta ICRI – K.U.Leuven.

Name:

Surname:

Company:

Phone:

E-mail:

Eleni

Kosta

ICRI – K.U.Leuven

+30 16 32 07 74

[email protected]

[email protected]

www.icri.be