ITPRO

Printed from www.itpro.co.uk

Register to receive our regular email newsletter at http://www.itpro.co.uk/registration.

The newsletter contains links to our latest IT news, product reviews, features and how-to guides, plus special offers and competitions.

Skip to navigation

    ICO spells out correct use of RFID

The information watchdog wants to be sure that organisations using RFID don't disrespect the Data Protection Act

By Maggie Holland, 29 Sep 2006 at 12:49

Businesses must ensure complete transparency in their use of radio frequency identification (RFID) technology, including telling people how to disarm the tags, according to guidance from the Information Commissioner's Office (ICO).

The UK watchdog is worried about how this new technology will impact on people's privacy and has issued two pieces of guidance to alleviate such fears and ensure that organisation adhere to common standards.

Although they are still in relative infancy, RFID tags are being used in a number of sectors to improve supply chain efficiency and operational efficiency.

Despite the obvious benefits those involved in RFID trials have experienced thus far, the ICO is concerned that issues will occur when the technology starts to extend beyond today's realms.

Suggested applications for RFID in the short or longer term include monitoring staff and implanting tags under the skin for certain access scenarios. This may lead to either the tag itself or a connecting database holding information about the individual.

If personal data is collected, the organisation responsible must tell people that this is the case and what it will be used for, in addition to detailing how to disable the tags if this information is warranted. Furthermore, the data must not be held for longer than necessary.

"Some RFID applications will necessarily involve the collection and storage of personal information, but this should not be a cause for concern as long as the principles of data protection are upheld and fully understood by those using the technology," said assistant commissioner Phil Jones.

"The Data Protection Act is there to protect people's personal information and to

ensure that where such data is collected and stored it is done so in line with the Act - namely, that individuals are informed, that information is accurate and up-to-date, and that it is held securely, for specific purposes and not kept longer than is necessary. The principles of the Act should ensure that this technology can be used to full effect without breaching people's privacy rights."

Email to a friend

Print this page

Social Bookmark this article: What is this?

Be the first to comment on this article

You need to Login or Register to comment.

advertisement

    Latest Internet Reviews

Lexmark X560n

Rating: 5

This well featured multifunction printer is designed to be the office workhorse. Does it meet with Simon Williams' approval? Read on to find out.

Read more

 
advertisement

    Latest News Videos in Internet

Video: Q&A with Easynet Connect's Chris Stening

Play Video: Q&A with Easynet Connect's Chris Stening   Play

IT PRO spoke to Chris Stening, managing director of Easynet’s SME division, about whether ISPs are giving businesses the service they deserve.

 

    White papers

Want more background on today's hottest IT trends?

Visit IT PRO's white paper library for more on virtualisation, encryption and other topics.

    Register for IT PRO

You'll get exclusive member benefits including free white papers, downloads, Webinars and weekly newsletters full of the latest IT PRO news, reviews, insight and expertise.

Advertisement