Abstract
Recent studies claim that RFID transponders containing only an Electronic Product Code (EPC) do not carry person-related data. This paper describes how to use EPCs on RFID transponders to identify individuals and track their consumer habits and locations. In addition, it is shown how these mechanisms can be used to identify social networks. An overview of the relevant legal aspects is given; in particular the article elaborates under what circumstances EPC item level tagging entails the processing of personal data, thus resulting in the applicability of data protection legislation.
Keywords
- Personal Data
- Biometric Identification
- Electronic Product Code
- Consumer Habit
- Privacy Invasion
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.
Chapter PDF
References
ARTICLE 29 Data Protection Working Party: WP 105 — Working document on data protection issues related to RFID technology, 19 January 2005, http://ec.europa.eu/justice_home/fsj/privacy/docs/wpdocs/2005/wp105_en.pdf
ARTICLE 29 Data Protection Working Party: WP 136 — Opinion 4/2007 on the concept of personal data, 20 June 2007, http://ec.europa.eu/justice_home/fsj/privacy/docs/wpdocs/ 2007Avpl36_en.pdf
Judgement of the European Court of Justice C-101/2001of 6.11.2003 (Lindqvist).
EPCglobal: EPCglobal Architecture Framework Final Version, 2005, http://www.epcglobalinc.org/standards/Final-epcglobal-arch-20050701.pdf.
EPCglobal: Electronic Product Code Information Service Frequently Asked Questions, 2007, http://www.epcglobalinc.org/standards/FINAL-EPCIS_FAQ042707.pdf.
Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, 1995, http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri= CELEX:31995L0046:EN:NOT.
Benjamin Fabian, Markus Hansen: Technische Grundlagen des Ubiquitous Computing, in: ULD, HU Berlin: TAUCIS — Technikfolgenabschätzung Ubiquitäres Computing und Informationelle Selbstbestimmung, Studie im Auftrag des BMBF, 2006, https://www. datenschutzzentrum.de/taucis/ita_taucis.pdf.
Eleni Kosta, Michael Vanfleteren: Data Protection legislation, in: FIDIS — Future of Identity in the Information Society Deliverable 7.7: RFID, Profiling, and AmI, 2006, http://fidis.net/fileadmin/fidis/deliverables/fidis-wp7-del7.7.RFID_Profiling_AMI.pdf.
Bernd Holznagel, Mareike Bonnekoh: Rechtliche Dimensionen der Radiofrequenz-Identifikation, Untersuchung im Auftrag des Informationsforums RFID, 2006, http://www.info-rfid.de/downloads/rfid_rechtsgutachten.pdf.
Andreas Pfitzmann: Biometrics — how to put to use and how not at all?, Talk at ISC 2005, 2005, http://dud.inf.tu-dresden.de/literatur/Duesseldorf2005.10.27Biometrics.pdf.
EPCglobal Public Policy Steering Committee: Frequently Asked Questions on Guidelines on EPC for Consumer Products, no date given, http://www.epcglobalinc.org/public/ppsc_faq/.
EPCglobal Public Policy Steering Committee: Fact Sheet Electronic Product Code — An Overview, no date given, http://www.epcglobalinc.org/public/ppsc_factsheets/epc_overview.
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2008 IFIP International Federation for Information Processing
About this paper
Cite this paper
Hansen, M., Meissner, S. (2008). Identification and Tracking of Individuals and Social Networks using the Electronic Product Code on RFID Tags. In: Fischer-Hübner, S., Duquenoy, P., Zuccato, A., Martucci, L. (eds) The Future of Identity in the Information Society. Privacy and Identity 2007. IFIP — The International Federation for Information Processing, vol 262. Springer, Boston, MA. https://doi.org/10.1007/978-0-387-79026-8_10
Download citation
DOI: https://doi.org/10.1007/978-0-387-79026-8_10
Publisher Name: Springer, Boston, MA
Print ISBN: 978-1-4419-4629-4
Online ISBN: 978-0-387-79026-8
eBook Packages: Computer ScienceComputer Science (R0)