Mauro Benetton, director of marketing for the company that bears his name, admits the flap caught him off guard. In March, a group called CASPIAN (Consumers Against Supermarket Privacy Invasion and Numbering) called for a boycott of the Italian apparel company after learning that it planned to use radio frequency identification tags to track its clothing. CASPIAN feared the tagged clothing would enable Benetton Group to surreptitiously gather information on customers' shopping habits. Mauro Benetton says his company isn't backing off its plans to test RFID. But it will take steps to educate the public and give them the option of removing RFID tags.
Then, in July, press reports suggested that privacy advocates forced Wal-Mart Stores Inc. to back off an in-store "smart-shelf" test (see main story). Wal-Mart refused to comment, but no one can say that the company was caught off guard. In fact, it was Wal-Mart that proposed that the Auto-ID Center, a nonprofit RFID research organization, include a "kill" command in its specifications for a universal electronic product code (EPC), so the RFID tags could be permanently disabled at checkout.
The Auto-ID Center has been researching the privacy issue for three years and recently issued a position paper that establishes three bedrock policies all users of EPC technology should follow:
"The companies we are working with all want to do the right thing," says Kevin Ashton, executive director of the Auto-ID Center. "Our primary recommendation is that if you can assure people that they have those three rights, then you are giving them the right to choose, and privacy concerns pretty much go away."
Stephen Keating, executive director of the Privacy Foundation, a nonprofit group in Denver, welcomes the center's proposals. But he says the technology raises some complex issues and problems in implementing policies. "When does the decision [to opt out] occur and how do you implement it?" he asks. "Can I say I want some purchases tracked but not others?"