I only intend to put RFID tags on my products, not in personal employee devices. Do I still need to conduct a privacy and data protection impact assessment?
Yes. RFID applications can become very complex and have consequences, notably for privacy, that were not initially intended. However, the level of detail of your assessment should be proportionate to the risks associated. Privacy and data protection impact assessments can be short if the risk is quickly determined to be insignificant. I am a service company which uses or manages RFID applications for my clients…
