WASHINGTON-Many federal agencies planning to use radio frequency identification technology have not addressed legal issues such as privacy and security, according to a new report by the Government Accountability Office.
A bipartisan group of lawmakers had asked government auditors to query two dozen federal agencies about their RFID plans and potential legal issues with the technology. Of that total, 16 agencies responded to the GAO survey. Only one agency of the 16 flagged legal issues connected with RFID implementation. Those issues included protecting an individual’s right to privacy and tracking sensitive documents and evidence.
“Several security and privacy issues are associated with federal and commercial use of RFID technology,” said GAO. “The security of tags and databases raises important considerations related to the confidentiality, integrity, and availability of the data on the tags, in the databases, and in how this information is being protected. Tools and practices to address these security issues, such as compliance with the Federal Information Security Management Act of 2002 and employing encryption and authentication technologies, can help agencies achieve a stronger security posture.”
In the commercial sector where retail giant Wal-Mart is driving RFID to improve supply chain management, industry groups have pledged to take steps to disclose use of the technology and to protect consumer privacy. In that respect, industry appears ahead of the federal government in safeguarding personal privacy.
Still, some privacy advocates and state lawmakers are not convinced those efforts are good enough. Various states are pressing ahead with legislation to mandate privacy protections for individuals.
Last month, the California Senate passed a bill prohibiting state and local governments from implanting RFID chips in driver’s licenses and other identification documents.
