IBM Addresses RFID Privacy

IBM Addresses RFID Privacy published in Internetnews By Susan Kuchinskas

Radio frequency identification (RFID) technology promises to speed supply chain operations by automating the tracking of goods. But its potential to track people has privacy advocates crying foul.

IBM's privacy practice, launched on Tuesday, aims to help businesses avoid privacy fallout.

"RFID is a mechanism to capture information, so the issue becomes, 'What information are people capturing?'" said Cal Slemp, vice president of security and privacy services for IBM Global Services. "Are they sensitive to what they're capturing? Are they also sensitive to regulations around the world?"

IBM broadened its security practice to include privacy seven years ago; the company has a chief privacy officer and about 3,500 specialists in offices around the world. Practitioners provide information on local and international privacy laws, as well as the principles of the Organisation for Economic Co-operation and Development.

Now, the privacy practice specifically includes an RFID component, which is offered to customers as an option during RFID engagements.

IBM Global Services RFID clients don't see grave risks to privacy, Slemp said, but most are aware of the issues. Sometimes, organizations start gathering data through techniques like RFID, but they haven't thought of all the things they're capturing," Slemp said.

The privacy practice will help them plan and be conscious of the effects of tracking goods on those who ultimately buy those goods.

A privacy engagement might include assessment, design and implementation of RFID technology in a way that maximizes consumer privacy. Consultants also will help develop corporate policies and design principles for RFID, as well as communication, employee education and awareness programs.

Slemp said the RFID privacy issue is especially acute for global companies, because laws and standards differ from country to country