What has the EU done to ensure the privacy of its citizens in an RFID environment?
The Directive on the protection of personal data (95/46/EC) offers a legal framework for the processing of personal data, saying that a person must freely give specific consent and be informed before their personal information is processed. The Directive on privacy and electronic communications (2002/58/EC) requires EU Member States to ensure confidentiality of the communications by prohibiting unlawful interception and surveillance of personal information unless the users concerned have given their consent (<> href=”http://europa.eu/rapid/pressReleasesAction.do?reference=IP/09/571&format=HTML&aged=0&language=EN&guiLanguage=en”>IP/09/571). In its proposals for reform of the EU telecoms, the Commission has included a clarification that public communications networks supporting RFID and similar devices are covered by the Directive on privacy and electronic communications. These Directives are complemented by a Recommendation published today that interprets them by providing guidance on h