iTeh StandardsiTeh Standards
EURUSD
Your shopping cart is empty.
CEN

CEN/TR 16673:2014

(Main)

Information technology - RFID privacy impact assessment analysis for specific sectors

Information technology - RFID privacy impact assessment analysis for specific sectors

The scope of this Technical Report is to use the RFID PIA Framework as the basis for exploring issues with four major sectors involved with RFID:
—   libraries;
—   retail;
—   e-Ticketing, toll roads, fee collection, events management;
—   banking and financial services.
After specific sector research and consolidation of the results of industry workshops and seminars that take place in several EU Member States, this Technical Report will identify the characteristics that need to be taken into consideration by operators of RFID systems in the example sectors. In addition it will provide advice to operators in the sector on significant variants both in terms of technology and application data. This will enable the appropriate risk factors to be taken into account.
Based on the synthesis of the applications in the chosen sectors, this Technical Report will also identify a set of factors relevant to specific RFID technologies and features that will need to be taken into account in preparing a Privacy and Data Protection Impact Assessment for many RFID applications.

Informationstechnik - Verfahren zur Datenschutzfolgenabschätzung (PIA) von RFID für spezifische Sektoren

Technologies de l’information - Évaluation d'impact sur la vie privée des applications RFID dans des secteurs spécifiques

Informacijska tehnologija - Ocenjevanje vpliva RFID na zasebnost za določene sektorje

Področje uporabe tega tehničnega poročila je uporaba ogrodja ocenjevanja vpliva RFID na zasebnost kot osnovo za raziskovanje težav v štirih glavnih sektorjih, ki upravljajo z RFID: - knjižnice; - maloprodaja; - elektronska prodaja kart, pobiranje cestnin, pobiranje pristojbin, upravljanje dogodkov; - bančne in finančne storitve. Po raziskavi določenega sektorja in konsolidaciji rezultatov industrijskih delavnic in seminarjev, ki se odvijajo v več državah članicah EU, bo to tehnično poročilo določilo lastnosti, ki jih morajo upoštevati izvajalci sistemov RFID v podanih sektorjih. Poleg tega bo zagotovilo nasvete za izvajalce v sektorjih o pomembnih različicah tako na področju tehnologije kot tudi uporabe podatkov. To bo omogočilo upoštevanje ustreznih dejavnikov tveganja. Na podlagi sinteze uporabe v izbranih sektorjih bo to tehnično poročilo določilo tudi niz dejavnikov, ki so pomembni za posamezne tehnologije RFID in lastnosti, ki jih ni treba upoštevati pri pripravi ocene vpliva na zasebnost in varnost podatkov za številne uporabe RFID.

General Information

Status
Published
Publication Date
03-Jun-2014
ICS
35.240.60 - IT applications in transport
Technical Committee
CEN/TC 225 - AIDC technologies
Drafting Committee
CEN/TC 225 - AIDC technologies
Current Stage
6060 - Definitive text made available (DAV) - Publishing
Start Date
04-Jun-2014
Due Date
25-Feb-2014
Completion Date
04-Jun-2014
Mandate
M/436 - Standardisation mandate to the European Standardisation Organisation CEN, CENELEC and ETSI in the field of information and communication technologies applied to Radio Frequency Identification (RFID) and systems
Ref Project
SIST-TP CEN/TR 16673:2014 - Information technology - RFID privacy impact assessment analysis for specific sectors

Buy Standard

TP CEN/TR 16673:2014TP CEN/TR 16673:2014
PreviousNext
Technical report
TP CEN/TR 16673:2014
English language
38 pages
sale 10% off
Preview
sale 10% off
Preview
e-Library read for
1 day
TP CEN/TR 16673:2014TP CEN/TR 16673:2014
PreviousNext
Technical report
TP CEN/TR 16673:2014
English language
38 pages
sale 10% off
Preview
sale 10% off
Preview
e-Library read for
1 day

Standards Content (Sample)


SLOVENSKI STANDARD
01-september-2014
Informacijska tehnologija - Ocenjevanje vpliva RFID na zasebnost za določene
sektorje
Information technology - RFID privacy impact assessment analysis for specific sectors
Informationstechik - Verfahren zur Datenschutzfolgenabschätzung (PIA) von RFID für
spezifische Sektoren
Technologie de l’information - Évaluation de l’impact sur la vie privée de la RFID pour
des secteurs spécifiques
Ta slovenski standard je istoveten z: CEN/TR 16673:2014
ICS:
35.040.50 Tehnike za samodejno Automatic identification and
razpoznavanje in zajem data capture techniques
podatkov
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

TECHNICAL REPORT
CEN/TR 16673
RAPPORT TECHNIQUE
TECHNISCHER BERICHT
June 2014
ICS 35.240.60
English Version
Information technology - RFID privacy impact assessment
analysis for specific sectors
Technologies de l'information - Évaluation d'impact sur la Informationstechnik - Verfahren zur
vie privée des applications RFID dans des secteurs Datenschutzfolgenabschätzung (PIA) von RFID für
spécifiques spezifische Sektoren

This Technical Report was approved by CEN on 20 January 2014. It has been drawn up by the Technical Committee CEN/TC 225.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania,
Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United
Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2014 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN/TR 16673:2014 E
worldwide for CEN national Members.

Contents Page
Foreword .4
Introduction .5
1 Scope .6
2 Terms and definitions .6
3 Symbols and abbreviations .8
4 Brief description of an RFID system .9
4.1 Infrastructure of an RFID system .9
4.2 Components of an RFID system .9
4.2.1 Transponder/Tag.9
4.2.2 RFID reader or writer . 10
4.2.3 Backend system. 10
4.3 Characteristics of RFID technology compared to other data capture techniques . 10
5 Privacy concept in RFID-based applications . 11
5.1 Interaction between data protection, data security and privacy . 11
5.2 Data protection . 12
5.3 Data security . 13
5.4 Privacy . 13
5.5 General privacy risks . 13
5.6 Challenges for a privacy concept in context with RFID. 14
5.7 Need for transparency . 15
6 Library sector overview . 15
6.1 Aspects of the library sector . 15
6.2 RFID technology overview . 16
6.3 Applications and parties involved . 17
6.4 Privacy considerations . 18
6.4.1 Privacy of possession . 18
6.4.2 Privacy of personal data in the central system . 18
6.4.3 The impact of NFC-enabled phones . 19
6.5 Prospects for PIA templates . 19
7 Retail sector overview . 20
7.1 Aspects of the retail sector . 20
7.2 RFID Technology Overview . 21
7.3 Applications and parties involved . 21
7.3.1 General . 21
7.3.2 Use of RFID in retail logistics . 21
7.3.3 The role of the solution provider . 22
7.3.4 Impact of RFID technology for the consumer . 22
7.4 Privacy considerations . 23
7.5 Technological prospects for privacy enhancements. 25
8 Transport sector overview . 25
8.1 Aspects of the transport sector . 25
8.2 RFID Technology Overview . 25
8.3 Applications and parties involved . 26
8.3.1 General . 26
8.3.2 Types of tickets, features and characteristics . 26
8.3.3 Characteristics of automatic fare calculation. 27
8.3.4 Sales channels and their impact on the products . 27
8.4 Privacy considerations . 29
8.5 Other applications not covered in detail . 29
8.5.1 General . 29
8.5.2 Toll roads and fee collection using RFID . 29
8.5.3 Event management using RFID . 30
9 Banking and financial services sector overview . 30
9.1 Aspects of the finance sector . 30
9.2 RFID Technology Overview . 31
9.2.1 General . 31
9.2.2 Contactless payment cards . 32
9.2.3 NFC based payment by mobile phones . 32
9.2.4 Micro-tags or stick-on-tags . 32
9.3 Applications and parties involved . 32
9.4 Privacy considerations . 32
9.4.1 General . 32
9.4.2 Security of contactless payment cards . 33
9.4.3 Organisations . 33
9.4.4 Impact of privacy in the banking and finance sector . 34
9.4.5 Vulnerabilities . 34
9.4.6 Transparency, consumer information, commercial confidentiality and security . 35
9.4.7 Implications for the PIA . 35
10 Conclusion and recommendations . 36
10.1 Diversity of RFID based applications . 36
10.2 Benefits of and recommendation for sector or application specific templates . 36
10.3 Recommendation for a general approach to PIA . 37
Bibliography . 38

Foreword
This document (CEN/TR 16673:2014) has been prepared by Technical Committee CEN/TC 225 “AIDC
Technologies”, the secretariat of which is held by NEN.
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent
rights. CEN [and/or CENELEC] shall not be held responsible for identifying any or all such patent rights.
This Technical Report is one of a series of related deliverables, which comprise mandate 436 Phase 2. The
other deliverables are:
— EN 16570, Information technology — Notification of RFID — The information sign and additional
information to be provided by operators of RFID application systems
— EN 16571, Information technology — RFID privacy impact assessment process
— EN 16656, Information technology - Radio frequency identification for item management - RFID Emblem
(ISO/IEC 29160:2012, modified)
— CEN/TR 16684, Information technology — Notification of RFID — Additional information to be provided
by operators
— CEN/TS 16685, Information technology — Notification of RFID — The information sign to be displayed in
areas where RFID interrogators are deployed
— CEN/TR 16669, Information technology — Device interface to support ISO/IEC 18000-3 Mode 1
— CEN/TR 16670, Information technology — RFID threat and vulnerability analysis
— CEN/TR 16671, Information technology — Authorisation of mobile phones when used as RFID
interrogators
— CEN/TR 16672, Information technology — Privacy capability features of current RFID technologies
— CEN/TR 16674, Information technology — Analysis of privacy impact assessment methodologies relevant
to RFID
SIST-TP CEN/TR 1667
...


SLOVENSKI STANDARD
01-september-2014
,QIRUPDFLMVNDWHKQRORJLMD2FHQMHYDQMHYSOLYD5),'QD]DVHEQRVW]DGRORþHQH
VHNWRUMH
Information technology - RFID privacy impact assessment analysis for specific sectors
Informationstechik - Verfahren zur Datenschutzfolgenabschätzung (PIA) von RFID für
spezifische Sektoren
Technologie de l’information - Évaluation de l’impact sur la vie privée de la RFID pour
des secteurs spécifiques
Ta slovenski standard je istoveten z: CEN/TR 16673:2014
ICS:
35.020 Informacijska tehnika in Information technology (IT) in
tehnologija na splošno general
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

TECHNICAL REPORT
CEN/TR 16673
RAPPORT TECHNIQUE
TECHNISCHER BERICHT
June 2014
ICS 35.240.60
English Version
Information technology - RFID privacy impact assessment
analysis for specific sectors
Technologies de l'information - Évaluation d'impact sur la Informationstechnik - Verfahren zur
vie privée des applications RFID dans des secteurs Datenschutzfolgenabschätzung (PIA) von RFID für
spécifiques spezifische Sektoren

This Technical Report was approved by CEN on 20 January 2014. It has been drawn up by the Technical Committee CEN/TC 225.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania,
Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United
Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2014 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN/TR 16673:2014 E
worldwide for CEN national Members.

Contents Page
Foreword .4
Introduction .5
1 Scope .6
2 Terms and definitions .6
3 Symbols and abbreviations .8
4 Brief description of an RFID system .9
4.1 Infrastructure of an RFID system .9
4.2 Components of an RFID system .9
4.2.1 Transponder/Tag.9
4.2.2 RFID reader or writer . 10
4.2.3 Backend system. 10
4.3 Characteristics of RFID technology compared to other data capture techniques . 10
5 Privacy concept in RFID-based applications . 11
5.1 Interaction between data protection, data security and privacy . 11
5.2 Data protection . 12
5.3 Data security . 13
5.4 Privacy . 13
5.5 General privacy risks . 13
5.6 Challenges for a privacy concept in context with RFID. 14
5.7 Need for transparency . 15
6 Library sector overview . 15
6.1 Aspects of the library sector . 15
6.2 RFID technology overview . 16
6.3 Applications and parties involved . 17
6.4 Privacy considerations . 18
6.4.1 Privacy of possession . 18
6.4.2 Privacy of personal data in the central system . 18
6.4.3 The impact of NFC-enabled phones . 19
6.5 Prospects for PIA templates . 19
7 Retail sector overview . 20
7.1 Aspects of the retail sector . 20
7.2 RFID Technology Overview . 21
7.3 Applications and parties involved . 21
7.3.1 General . 21
7.3.2 Use of RFID in retail logistics . 21
7.3.3 The role of the solution provider . 22
7.3.4 Impact of RFID technology for the consumer . 22
7.4 Privacy considerations . 23
7.5 Technological prospects for privacy enhancements. 25
8 Transport sector overview . 25
8.1 Aspects of the transport sector . 25
8.2 RFID Technology Overview . 25
8.3 Applications and parties involved . 26
8.3.1 General . 26
8.3.2 Types of tickets, features and characteristics . 26
8.3.3 Characteristics of automatic fare calculation. 27
8.3.4 Sales channels and their impact on the products . 27
8.4 Privacy considerations . 29
8.5 Other applications not covered in detail . 29
8.5.1 General . 29
8.5.2 Toll roads and fee collection using RFID . 29
8.5.3 Event management using RFID . 30
9 Banking and financial services sector overview . 30
9.1 Aspects of the finance sector . 30
9.2 RFID Technology Overview . 31
9.2.1 General . 31
9.2.2 Contactless payment cards . 32
9.2.3 NFC based payment by mobile phones . 32
9.2.4 Micro-tags or stick-on-tags . 32
9.3 Applications and parties involved . 32
9.4 Privacy considerations . 32
9.4.1 General . 32
9.4.2 Security of contactless payment cards . 33
9.4.3 Organisations . 33
9.4.4 Impact of privacy in the banking and finance sector . 34
9.4.5 Vulnerabilities . 34
9.4.6 Transparency, consumer information, commercial confidentiality and security . 35
9.4.7 Implications for the PIA . 35
10 Conclusion and recommendations . 36
10.1 Diversity of RFID based applications . 36
10.2 Benefits of and recommendation for sector or application specific templates . 36
10.3 Recommendation for a general approach to PIA . 37
Bibliography . 38

Foreword
This document (CEN/TR 16673:2014) has been prepared by Technical Committee CEN/TC 225 “AIDC
Technologies”, the secretariat of which is held by NEN.
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent
rights. CEN [and/or CENELEC] shall not be held responsible for identifying any or all such patent rights.
This Technical Report is one of a series of related deliverables, which comprise mandate 436 Phase 2. The
other deliverables are:
— EN 16570, Information technology — Notification of RFID — The information sign and additional
information to be provided by operators of RFID application systems
— EN 16571, Information technology — RFID privacy impact assessment process
— EN 16656, Information technology - Radio frequency identification for item management - RFID Emblem
(ISO/IEC 29160:2012, modified)
— CEN/TR 16684, Information technology — Notification of RFID — Additional information to be provided
by operators
— CEN/TS 16685, Information technology — Notification of RFID — The information sign to be displayed in
areas where RFID interrogators are deployed
— CEN/TR 16669, Information technology — Device interface to support ISO/IEC 18000-3 Mode 1
— CEN/TR 16670, Information technology — RFID threat and vulnerability analysis
— CEN/TR 16671, Information technology — Authorisation of mobile phones when used as RFID
interrogators
— CEN/TR 16672, Information technology — Privacy capability features of current RFID technologies
— CEN/TR 16674, Information technology — Analysis of privacy impact assessment methodologies relevant
to RFID
CEN/T
...

Questions, Comments and Discussion

Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.

This May Also Interest You

CEN
EN 17230:2020(Main)
Information technology - RFID in rail
SIST EN 17230:2021

The RFID tag location, tag data content and functional requirements have been developed for application on the main line railway networks. Other networks (such as metro) could apply to this document but are outside of its scope.
This document contains:
-   description of the RFID tag installation location;
-   description of the RFID tag data content;
-   description of the functional requirements in relation to the RFID tag track side reading performance.

  • Standard
    37 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
EN 16570:2014(Main)
Information technology - Notification of RFID - The information sign and additional information to be provided by operators of RFID application systems
SIST EN 16570:2014

1.1   General
The scope of this EN is to define the requirements for a Common European Notification Signage system to be used by operators of RFID application systems deployed within the EU Member States.
1.2   Objective
The objective of this EN is to provide enterprises, both large and small, with a common and accessible framework for the design and display of RFID notification signs.
In addition to the information placed on the sign, the framework includes the information policy - needed to answer enquiries received from individuals accessing the contact point noted on the sign itself. This minimizes the volume of information written on the sign.
This European Standard defines:
a)   the details of data and graphics that shall be included on the signage;
b)   the presentational requirements for the signage, taking account of the need;
1)   to provide a practical solution given constraints on print technique and print area;
2)   for a consistent common and recognisable signage;
c)   means to support accessibility;
d)   the structure and content of an information policy to meet the informational needs of individuals with respect to RFID privacy.
1.3   Applicability
This EN provides an application-agnostic framework which may be used by all enterprises operating RFID applications in the European Union.

  • Standard
    15 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Standard
    15 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
EN 16571:2014(Main)
Information technology - RFID privacy impact assessment process
SIST EN 16571:2014

This European Standard has been prepared as part of the EU RFID Mandate M/436. It is based on the Privacy and Data Protection Impact Assessment Framework for RFID Applications, which was developed by industry, in collaboration with the civil society, endorsed by Article 29, Data Protection Working Party, and signed by all key stakeholders, including the European Commission, in 2011.
It defines aspects of that framework as normative or informative procedures to enable a common European method for undertaking an RFID PIA.
It provides a standardized set of procedures for developing PIA templates, including tools compatible with the RFID PIA methodology.
In addition, it identifies the conditions that require an existing PIA to be revised, amended, or replaced by a new assessment process.

  • Standard
    103 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Standard
    103 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
EN 16656:2014(Main)
Information technology - Radio frequency identification for item management - RFID Emblem (ISO/IEC 29160:2012, modified)
SIST EN 16656:2014

This European Standard specifies the design and use of the RFID Emblem: an easily identified visual guide that indicates the presence of radio frequency identification (RFID). It does not address location of the RFID Emblem on a label. Specific placement requirements are left to application standards developers.
It also specifies an RFID Index, which can be included in the RFID Emblem and which addresses the complication added by the wide range of RFID tags (frequency, protocol and data structure). The RFID Index is a two-character code that provides specific information about compliant tags and interrogators. Successful reading of RFID tags requires knowledge of the frequency, protocol and data structure information provided by the RFID Index.

  • Standard
    28 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Standard
    28 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
CEN/TS 16685:2014(Main)
Information technology - Notification of RFID - The information sign to be displayed in areas where RFID interrogators are deployed
SIST-TS CEN/TS 16685:2014

This Technical Specification defines:
—   the details of data and graphics that shall be included on the signage;
—   the presentational requirements for the signage, taking account of the need:
—   to provide a practical solution given constraints on print technique and print area;
—   for a consistent common and recognizable signage;
—   means to support accessibility;
—   the structure and content of an information policy to meet the informational needs of individuals with respect to RFID privacy.

  • Technical specification
    14 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Technical specification
    14 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
CEN/TR 16671:2014(Main)
Information technology - Authorization of mobile phones when used as RFID interrogators
SIST-TP CEN/TR 16671:2014

The scope of this Technical Report is to explore developments in the use of mobile phones as RFID interrogators. It uses as a datum the communication protocols developed for near field communication, which have a defined level of security. This Technical Report will explore known developments in the use of mobile phones as RFID interrogators including (but not limited to):
—   extending NFC phone capabilities to read RFID tags compliant with ISO/IEC 15693 and ISO/IEC 18000-3 Mode 1;
—   using mobile phones as interrogators for UHF tags based on ISO/IEC 18000-6 Type C;
—   the development of multi-protocol readers capable of switching between high frequency and UHF.
The objective of the Technical Report is to identify specific characteristics associated with mobile phones being used as interrogators with tags that are primarily intended for other purposes. It will identify some potential threats associated with the technology. It will also identify gaps in the standardization process that might need to be addressed to mitigate against such threats.
To counterbalance any negative implications, the Technical Report also identifies real and potential applications that could lead to an accelerated take-up of RFID and the Internet of Things through mobile phones being used as RFID interrogators by individual citizens and organizations.

  • Technical report
    43 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Technical report
    43 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
CEN/TR 16672:2014(Main)
Information technology - Privacy capability features of current RFID technologies
SIST-TP CEN/TR 16672:2014

The scope of the Technical Report is to identify technical characteristics of particular RFID air interface protocols that need to be taken into consideration by operators of RFID systems in undertaking their privacy impact assessment. It also provides information for those operators who provide RFID-tagged items that are likely to be read by customers or other organisations.
This Technical Report provides detailed privacy and security characteristics that apply to products that are compliant with specific air interface protocols, and also to variant models that comply with such standards.
The Technical Report also identifies proprietary privacy and security features which have been added to tags, which are problematic of being implemented in open systems which depend on interoperability between different devices. Such proprietary solutions, whilst being technically sound, in fact impede interoperability. The gap analysis thus identified can be used to encourage greater standardization.

  • Technical report
    18 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Technical report
    18 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
CEN/TR 16670:2014(Main)
Information technology - RFID threat and vulnerability analysis
SIST-TP CEN/TR 16670:2014

The scope of the Technical Report is to consider the threats and vulnerabilities associated with specific characteristics of RFID technology in a system comprising:
—   the air interface protocol covering all the common frequencies;
—   the tag including model variants within a technology;
—   the interrogator features for processing the air interface;
—   the interrogator interface to the application.
The Technical Report addresses specific RFID technologies as defined by their air interface specifications. The threats, vulnerabilities, and mitigating methods are presented as a toolkit, enabling the specific characteristics of the RFID technology being used in an application to be taken into consideration. While the focus is on specifications that are standardized, the feature analysis can also be applied to proprietary RFID technologies. This should be possible because some features are common to more than one standardized technology, and it should be possible to map these to proprietary technologies.
Although this Technical Report may be used by any operator, even for a small system, the technical details are better considered by others. In particular the document should be a tool used by RFID system integrators, to improve security aspects using a privacy by design approach. As such it is also highly relevant to operators that are not SME’s, and to industry bodies representing SME members.
Although this Technical Report may be used by any operator, even for a small system, the technical details are better considered by others. In particular the document should be a tool used by RFID system integrators, to improve security aspects using a privacy by design approach. As such it is also highly relevant to operators that are not SME’s, and to industry bodies representing SME members.

  • Technical report
    70 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Technical report
    70 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
CEN/TR 16684:2014(Main)
Information technology - Notification of RFID - Additional information to be provided by operators
SIST-TP CEN/TR 16684:2014

This Technical Report is to assist operators of applications in areas where radio frequency interrogators are deployed, to identify the types of information that are called for in the recommendation.
The Technical Report provides all the current information to assist operators to develop and publish a concise accurate and easy to understand information policy for each of their applications.
The policy should at least include:
—   the identity and address of the operators;
—   the purpose of the application;
—   what data are to be processed by the application, in particular if personal data will be processed, and whether the location of tags will be monitored;
—   a summary of the privacy and data protection impact assessment;
—   the likely privacy risks, if any, relating to the use of tags in the application and the measures that individuals can take to mitigate these risks.

  • Technical report
    34 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Technical report
    34 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
CEN/TR 16669:2014(Main)
Information technology - Device interface to support ISO/IEC 18000-3
SIST-TP CEN/TR 16669:2014

The scope of this Technical Report is to assess the need to develop a Technical Specification to define an interface that provides RFID system control components with low-level access to RFID interrogators for the purpose of optimising RFID data access and control operations.

  • Technical report
    20 pages
    English language
    sale 10% off
    e-Library read for
    1 day