Radio-Frequency Identification (RFID) is an identification system commonly used in retail stores. It relies on a small chip—implanted in a tag—that can record and store data such as a serial number, price or purchase record.
RFID tags can be attached to a large variety of individual items including merchandise, shipping containers and vehicles. They then use electronic scanners to read and track these tags.
On this page
- Uses of RFID technology
- RFID technology privacy challenges
- Electronic Product Code guidelines for RFID
Uses of RFID technology
You've almost certainly encountered RFID technology in your life. RFID tags may be found in a variety of items, like:
- credit cards with a tap-to-pay option
- some mobile phones and smart devices
- library books
- medical supplies and devices
- automobile tracking and ignition keys
- automatic toll-collection devices placed in the vehicles of frequent users
- Canadian ePassport
- hotel key cards
- microchip implants for pets
RFID tags have an individual identification code offering tracking capabilities beyond those of traditional printed barcodes. Each item can have its own RFID tag and carry a unique identity code. A company will therefore be able to track individual items throughout the supply chain. Not all electronic tags on retail goods are RFID tags. They may instead be radio frequency (RF) tags primarily used for security purposes. These do not have unique identification numbers and do not store data or allow linkages to other databases.
For more information, check out the Radio Frequency Identification (RFID) Technology web page by the Office of the Privacy Commissioner of Canada (OPC).
RFID technology privacy challenges
RFID technology may pose consumer privacy challenges. Canada's privacy legislation protects your privacy rights. This protection applies to any existing or future RFID applications that hold or link to your personal information.
Be aware of the privacy concerns listed below:
- An RFID tag can be tiny and located where you can't see it. This feature can make it hard for you to know if a store uses the technology.
- You can't tell by looking at an RFID tag whether it is still communicating its data or has been turned off. In theory, a tag can continue to be read after a product is paid for and taken from the store.
- The potential exists for a computer system to link this product data with personal information linked to a credit, debit or loyalty card. Therefore, a retailer could get a detailed profile of your buying habits.
Under the federal Personal Information Protection and Electronic Documents Act (PIPEDA), there are ground rules that govern how organizations may collect, use or disclose personal information gained in the course of commercial activities.
Electronic Product Code guidelines for RFID
Adopted in January 2005, Canadian Electronic Product Code (EPC) voluntary public policy guidelines have several rules for businesses that use EPC/RFID tags on consumer products. The guidelines state that consumers should:
- be told when EPC/RFID technology is being used
- have the choice of allowing the tag to remain activated or of turning it off and disposing of it after purchase
- have control over the information that the business' computer system retains about them
Since RFID is still a relatively new technology, some consumers might not know how it works. Consumers who have questions about RFID should not hesitate to ask their retailers for more information about how they use this technology.
To report a concern related to possible mishandling of personal information, contact the Office of the Privacy Commissioner of Canada.