The scope of PD CEN/TR 16673 is to use the RFID PIA Framework as the basis for exploring issues with four major sectors involved with RFID:
After specific sector research and consolidation of the results of industry workshops and seminars that take place in the several EU Member States, PD CEN/TR 16673 will identify the characteristics that need to be taken into consideration by operators of RFID systems in the example sectors.
In addition, PD CEN/TR 16673 will provide advice to operators in the sector on significant variants both in terms of technology and application data.
This will enable the appropriate risk factors to be considered.
PD CEN/TR 16673 on RFID privacy impact assessment analysis is useful for:
RFID is use of electromagnetic radiating waves or reactive field coupling in the radio frequency portion of the spectrum to communicate to or from a tag through a variety of modulation and encoding schemes to uniquely read the identity of a radio frequency tag or other data stored on it. Privacy impact assessment of data becomes important in such a scenario.
In response to the growing deployment of RFID systems in Europe, it was needed to strengthen the basic legal framework safeguarding fundamental values such as health, environment, data protection, privacy, and security.
RFID technology allows for the contactless transmission of data via electromagnetic fields and/or radio waves, which provides following advantages:
PD CEN/TR 16673 is one of eleven deliverables for M/436 Phase 2 of the European Commission. PD CEN/TR 16673 focuses on four major sectors that have several implementations of RFID that currently impact European society. Using these as detailed case studies will assist in addressing the development of the standard on the Privacy Impact Assessment is the more important to provide for transparency and ensure the safeguarding of privacy. To understand how privacy of the individual can be provided for, it is important to look at three aspects, the interaction of which leads to an effective privacy concept.
To safeguard the privacy rights of an individual, the three aspects: data protection, data security and privacy shall be taken into consideration when setting up a RFID-based application.
Based on the synthesis of the applications in the chosen sectors, PD CEN/TR 16673 will identify a set of factors relevant to specific RFID technologies and features that will need to be considered in preparing a Privacy and Data Protection Impact Assessment for many RFID applications.
CEN/TR 16673:2014