RFID NEXUS - Where Privacy and Technology Coexists

Identifiability in RFID

2011-02-17T05:14:00.000-08:00

My abstract on "Identifiability in RFID" has been accepted for the forthcoming British Irish Law, Education and Technology Association (BILETA) 2011 Conference.

Abstract:

By 2011-2013, Radio Frequency Identification (RFID) is expected to grow at a Compound Annual Growth Rate (CAGR) of 17 percent. Globally, it is predicted that the Asia-Pacific region will witness the highest growth in terms of revenue. Europe and North America will gradually focus to improving their business processes with the RFID technology. The world’s second largest economy, China, has had deployed major and large scale RFID applications in her Beijing Olympics 2008 and the World Expo 2010 at Shanghai. It is predicted that from 2007 to 2011, the market size of RFID deployment in China shall be 17.83 percent of CAGR.

Against these backgrounds, it could be seen that RFID deployment and business is handsomely expeditious. Nonetheless, the data protection and privacy’s response on RFID is still crawling for an outreach. In the world’s data protection and privacy laws today, there are still dividing demography that segmented the application of data protection and privacy laws. Such application is influenced by different principles and approaches mainly the OECD Guidelines on Privacy, the European Union Data Protection Directive 95/46/EC, the APEC Privacy Principles, the United States Safe Harbor principles and respective national laws’ data protection and privacy laws, piecemeal and sector specific legislation. Broadly, the applications of these laws are not straight forward as it has its defined complexities, challenges and adoptions. Specifically, attempts have been made to address data protection and privacy concerns in RFID. This paper, in particular, attempts to go back to the basic principles of identifiability within the context of RFID. It analyses what constitute identifiability in RFID, if, there is an involvement of a person or many persons that collect, process, aggregate, manage, retain and expunge such data within an RFID application. The concept of identifiability will be appraised by referring to the European Union Data Protection Directive 95/46/EC.

In order to achieve the above, this paper is divided into 3 sections. The first section will briefly narrate the genealogy of RFID and how it develops to being a commoditised technology today. The second section analyses the summarised consultations that have had taken place within the Article 29 Data Protection Working Party and to what extend it has achieved the desired levels of outcome. Section three will then look into the meaning of data processor, controller and third party from the context of RFID. The discussion will then extend to the crux of the issue: identifiability. It outlines these fundamental questions; what, why, who, when and how identifiability is regarded as a fundamental concept in RFID, data protection and privacy.

Keywords: RFID. Data protection and privacy. European Union Directive 95/46/EC. Article 29 Data Protection Working Party.

2010 - The Year of Data Protection and Privacy in Malaysia!

2010-12-23T11:08:00.000-08:00

2010 is a year of technology laws' hope in Malaysia.

I remain with the above statement due to this chief reason: The Personal and Data Protection (PDP) Act 2010 was gazetted on April 2010. As I write, the proposed Data Protection Commissioner's Office is still being planned. Rumours learned that it may be in place by the first (1st) quarter of 2011. This development means a lot to Malaysia in many ways. Three pointers of assertion are submitted. First, the PDP Act enables everyone (individuals) and stakeholders to collect, handle, manage, process, retain, share and expunge data in a responsible and compliant manner. Second, the PDP has pushed Malaysia (indirectly) to recognise 'informational privacy' as rights - although the incentive and motivation of this Act governs commercial transactions only. Third, the PDP will also trigger possible amendments or revisions of peacemeal legislations that contained the words "privacy" in Malaysian statutes.

The PDP Act (although, a very new law, to Malaysians) is a testimony of Malaysia in getting herself ready to be on board as par as others. In the Asia Pacific contours, Malaysia is the second (2nd) country, after Hong Kong having her own data protection and privacy legislation. Other countries' legislation are based on sectorial-specific and code/voluntary approaches. As some may have known, the global's privacy and data protection laws are generally motivated by these: The European Data Protection Directive 95/46/EC, American Safe Harbor approach, OECD Guidelines, APEC Privacy Principles, Industrial and technological approaches.

Besides the PDP, interesting developments that have taken place are the observations of Malaysian court judges on privacy protection. There are two cases that glanced through (generally) on this.

First, in Ultra Dimension Sdn Bhd v Kook Wei Kuan [2004] 5 CLJ 285, Justice Faiza Thamby Chik observed: "...English common law does not recognise the privacy rights; therefore invasion of privacy rights does not give right to a cause of action. Since English common law, pursuant to Section 3 of the Civil Law Act 1950, is applicable in Malaysia, privacy rights which is not recognised under English Law is accordingly not recognised under Malaysian Law.." However, in an interesting case of Dr Bernadine Malini Martin v MPH Magazine Sdn. Bhd. & Ors [2010] 1 LNS 694, Justice Hishamudin observed: "...it is unfortunate for the plaintiff, that the law of this country, as it stands presently, does not make an invasion of privacy as an actionable wrongdoing (it is actionable under the law of some other jurisdictions, for example, in the United States)..."

These observations, seem to be interesting in one way; mainly that Malaysians are getting to recognising their privacy rights. Adding to this, there were headlines on Malaysian national dailies during the third (3rd) quarter of 2010, which highlighted the complaints of a mobile phone customer of a leading Government-linked telecommunications company. The complainant claimed that the mobile service provider did not secure her consent in sharing her confidential data that is retained in the database. Thus, it breaches certain aspects of her data confidentiality. When the case was brought to press, thus far, and to date, my research suggests that there's no "hard push" by, and from, consumer groups or organisations in issuing such statements representing consumer's rights. What more, in privacy!

After the PDP Act was passed, there were many trainings and workshops that took place mostly in Kuala Lumpur. Stakeholders and public were very much concerned how the Act would be affected and applied in their daily life and transactions. My observations from these eagerness are twofold. Firstly, practitioners, academics and consultants should collaborate to disseminate the basic principles first. Which means, besides explaining or paraphrasing the sections in the PDP Act, it's fundamentally focal to enlighten the public what these terminologies mean: data, personal data, privacy, informational privacy, the applications in daily life and the applications in commercial transactions. Secondly, after diffusing the meanings and differences in clarity, we must be able to explain clearly and coherently selected case by case basis from different perspectives. These observations, in my humble opinion, may take a longer time to witness its maturity. Nonetheless, the practitioners, academics, consultants and researchers who are experts in this subject matter, must collectively offer the appropriate theoretical foundation to the Malaysian public. I am calling for a collective responsibility to disseminate a meaningful comprehension on this (for the purpose of nation building).

From the business strategy perspective, the PDP Act will provide potential opportunities in terms of 'commodotisation'. Technology companies may strategise to call their Research & Development (R&D) team to write a particular system that may be customised for their existing clients and potential clients. In other words, such systems now, should have certain checklists on privacy impact assessment. Also, privacy by design approach. Whatever perspectives of opportunities that Malaysian stakeholders (whether from business or consultancy) come from, it is indispensable for them to understand the basics. Then, move on to the next level of understanding (whether they have clearly understood what privacy and data protection is?).

And why I claim 2010 is the year of data protection and privacy in Malaysia?

The answer lies onto Malaysians' hands and minds. The Malaysians' Legislative and Executives (politicians) deserve a pat. The abstract and outlines of the laws have been exposed. Now, we will witness the implementation and enforcement (in anticipation) - which will be the subsequent chapters of how the laws will grow, develop and mature.

RFID is still "hot"

2010-12-23T07:49:00.000-08:00

After almost fifteenth (15th) month of research, I have had reached to a preliminary analysis that RFID is still a hot topic.

Much of the progress and developments in RFID are surrounded by commercial and technological incentives. It is arguably a "commodotised technology". The world today, by way of economy's segregation, (The United States of America, The Euro zone and the emerging markets) have deployed RFID applications in many ways. Mostly, give benefits and yielded dividends to large companies and organisations which have the budget. Although recession took place in 2010 and silently taking place (to date) in some continents, the prediction on RFID applications' deployable expansion remains bullish.

Interestingly, the European Union is very active to map a possible roadmap for RFID and its growth by 2020. The East Asia technological leaders - South Korea, Taiwan and Japan - by far, have been leading the game (in terms of the deployment). China, had handsomely deployed her RFID applications in the most spectacular Olympic games of 2008 in Beijing (through the enabled RFID ticket applications). It is predicted that London 2012, will anticipate to deploy the similar move. Not only deploying selected RFID applications, but also to potentially extend the technological infrastructure capacity through cloud computing (the Cloud).

Much of the global's progress in RFID is still segmented through the continents. Several issues are still being discussed at the higher level (means: policy, strategy and government). Three (3) issues are of relevance; firstly, interoperability. Secondly, standardisation and thirdly, data protection and privacy. Of course, there are other contributing and pressing issues that may add to the list. Nonetheless, by way of priority, the aforementioned issues are of significance that demand urging progress.

In the leading RFID Journal and other RFID Service Providers' write ups and marketing collateral's - they have had marketed sophisticated RFID applications to its existing customers and potential customers. The features seem to be appealing especially to the stakeholders that have benefited from its applications. These groups are merely tagged as the RFID-proponent. To the contrary, RFID-opponent seems to be quite quiet to demand for more awareness of this technology. Back 2002-2006, the push by public policy and civil liberties' groups in the US were so powerful. Now, the voices are less being heard. Maybe (arguendo), this is due to the other pressing issues that canvassed the US today. The developments in the European Union (EU) are largely still, at a higher level. In review of the EU's efforts, there is minimal progress that takes place. The recent one is the Article 29 Data Protection Working Party in relation to the Privacy Impact Assessment's response by the industries and stakeholders with regards to RFID. Although the responses seem to be a turning point for such a progress, however, it is submitted that much needs to be done not only at the EU level, but also, between and amongst the 27 Member States.

Across Asia; China, India, South Korea, Taiwan, Japan, Malaysia and Singapore have had gradually deployed and realised the importance of RFID. Out of these countries, taking Malaysia as example, the Malaysian Communications and Multimedia Commission (MCMC) has had issued an RFID survey to the stakeholders. Upon perusing the survey, it is adduced that it aims to gauge the technical understanding and perceptions only towards RFID, but lacks the data protection and privacy bit. Perhaps, MCMC would be able to issue another round of survey that touches the stakeholders' perceptions on RFID, Data Protection and Privacy.

As issues on RFID are still hot, I predict these will emerge in 2011:

1) That the EU's RFID progress will take its aggressive mode once the review of the European Commission's Data Protection Directive has completed. This means, once the revised European Directive 95/46/EC takes place, the Article 29 Working Party and related Directives will take RFID into a more serious tone/level;

2) That the RFID's standardisation and interoperability needs active involvement not only from the EU level, but also other international organisations such as the International Telecommunications Union (ITU). This prediction is based on the possibility that Mobile-RFID will boom and penetrate the market on gradual growth (by 2020); and

3) That the RFID's discussion from the perspectives of data protection and privacy are still important. Although there are such RFID technical guidance, codes, regulations and best practices, but, the efforts need to be beefed up. Especially, when the booming of cloud computing business takes place. This means data that are retained and kept in the RFID Service Provider or a Data Controller's server may also be parked and retained in the Cloud. Hence, issues of data protection, privacy and contractual liabilities may also arise.

RFID indeed, is still relevant and a "hot" topic, and will promise more progress in 2011 and the years ahead!

Call for public consultation: Strategy to strengthen EU Data Protection rules

2010-12-14T08:16:00.000-08:00

On 4 November 2011, the European Commission has issued its call for public consultation in relation to its data protection rules. The call is retrievable HERE. Deadline for interested stakeholders to submit their views is on 15 January 2011. I will submit my proposal (for consideration) individually and also as a collective proposal under the banner of the Data Protection & Open Society Project's Oxford Centre for Socio-Legal Studies. On 2 December 2010, a total of 6 researchers brainstormed to reach certain consensus. Overall, the solicited views have been taken into account and the draft would be expected to be ready by end of December 2010 or early January 2011. Updates will follow suit when the time comes.

Visiting Researcher in Oxford

2010-12-14T06:11:00.000-08:00

For the forthcoming 2011, I will be a visiting researcher in the esteemed Data Protection & Open Society Project (DPOS), at the Oxford University's Centre for Socio-Legal Studies. My visiting research status will be from 14 February 2011 - 4 April 2011. Further details on the DPOS are reachable HERE.

Forthcoming publication

2010-12-14T04:31:00.000-08:00

I presented a paper on: "Cursing the Cloud (or) Controlling the Cloud. Briefly, this paper (generally) appraises the move by Microsoft in relation to the Cloud. In detail, it touches on the level of adequacy of data protection from the perspectives of the European Data Protection Directive 95/46/EC and Safe Harbor. It also extends the concern or adequacy to non EEA countries (where the level of adequacy) is still underdeveloped, immature and emerging. This paper also proffers a potential hypothetical model which is called as Cloud Compliant Strategy (CCS). The CCS aims to develop a theoretical base / framework that is usable to specific continents and market economies: particularly, the US, the Europe Zone and the emerging markets. Although the CCS is still at its embryonic stage, I endeavour to extend this in my next paper.

In the meantime, this paper has been published in: Kierkegaard & Kierkegaard (eds), Private Law: Rights, Duties and Conflicts (2010) ISBN: 978-87-991385-8-6 at pp 158-171. This paper will also be published in the Computer Law & Security Review's forthcoming 2011 publication.

In the interest of knowledge sharing, my paper is retrievable HERE. Such potential citation on this article is also appreciated (by letting me know through my e-mail: n o r i s w a d i [at] g m a i l . c o m.

Alas, for those who are keen to research related legal issues surrounding the Cloud, do visit this SITE. This project is undertaken by Queen Mary University of London (QMUL), branded as: QMUL Cloud Legal Project.

Article 29 Data Protection Working Party on RFID (in response to the Industry's proposal)

2010-09-27T10:08:00.000-07:00

The Article 29 Data Protection Working Party on RFID has issued their Opinion 5/2010 in relation to the industry proposal for a Privacy Data Protection Impact Assessment Framework for RFID Applications. It's retrievable here.

Briefly, the Article 29 Data Protection Working Party does not endorse (technically: rejected) the proposed response from the industry mainly due to the absence of a CLEAR privacy and data protection approach in it's proposed framework. Besides, the Working Party opined that a rigorous consultation phases with stakeholders are of relevance - as to determine the viability - of the proposed framework. The industry proposal, in a way, failed to address the same. In particular, the issue of tag deactivation in the retail sector needs a much more coherent and clarity explanation. Overall, the proposal failed to address the concerns on transparency of RFID usage ("information and transparency on RFID use") and the emphasis on "security and privacy by design".

Cloud Security Summit

2010-08-24T02:09:00.000-07:00

I confirm to attend the forthcoming Cloud Security Summit.

As part and parcel of my data protection and privacy research. This will be useful from the context of cloud computing. Currently, I am examining to what extend, and how RFID (being the Internet of Things) may be able to integrate within a cloud computing environment - whether, it only applies in front-end, middleware or bank-end applications. If exists, how shall be the privacy impact assessment applies and how data protection is being controlled. Technology seems to be integrated from one end to the other end, hence, laws, regulations and policies (arguably) should be able to adopt this too.

I hope to be able to secure some insights for such a "legal integration answer"

Keywords in my research:

Data, Privacy, RFID, Cloud Computing, Privacy Impact Assessment and Security.

Cursing the Cloud (or) Controlling the Cloud?

2010-08-13T09:29:00.000-07:00

On March 2010, I presented on "Cloud Computing Got Talent! - A Nemesis to Data Protection?". Further to the presentation, I have been developing substantial comments, feedbacks and detailed analysis from various stakeholders. To share these, I will be presenting the Version 2, titled: "Cursing the Cloud (or) Controlling the Cloud?". The abstract is readable here. It could be retrievable HERE. This paper will be presented in the forthcoming Fifth (5th) International Conference on Legal, Security and Privacy Issues in IT at Barcelona, Spain.

Information Technology Law - The Law and Society by Andrew Murray (Selected Chapter Reviews)

2010-06-14T12:55:00.000-07:00

I was at Hammicks Legal Bookshops in Lincoln's Inn with a Professor from Malaysia. My eyes zoomed onto a newly published book: "Information Technology Law: The Law and Society" (Oxford, 2010), by Andrew Murray.

Andrew Murray is a Reader in the Law Department, London School of Economics and Political Science. He is teaching, researching and supervising students of various levels (undergraduates and postgraduate research) in areas of technology laws, intellectual property, media laws policies and regulations.

The chief motivation in buying this book was due to his writings on; PART VI PRIVACY IN THE INFORMATION SOCIETY.

Prior to reading the latter religiously, Andrew Murray's introductory works on PART I INFORMATION AND SOCIETY has given an impeccable insights to the many taxonomies relating to bits, network of networks and digitisation and society (information, convergence and cross border challenge of information law) by inferring to laws and regulations as the backbone. Whilst Andrew's style of writing is akin to story telling, he has never failed to mesmerise his analysis referencing to many comparative literatures - ranging from the United States of America selected states' jurisdictions and in between, to interweaving it with socio-economic aspects, incentives and social sciences' approaches.

This is the Key difference of Andrew's book as compared to the previous IT Law book authors that have had taken precedence, such as Professor Ian Lloyd's, David Bainbridge's, Chris Reed and John Angel's. The another key difference that distinguishes Andrew's writing is through the incorporation of pictorial diagrams, highlights, examples, case studies and further reading lists, in which, the look and feel runs away from typical black letter treatises! This gives indepth clarity to readers who may not come from a legal background. What makes it more innovative is its guidance to the online resource centre that could be retrievable vide:

http://www.oxfordtextbooks.co.uk/orc/murray

which also extends regular audio updates, web links, flashcard glossary of key items and a link to an IT law blog. This approach, in my speculative opinion, will become a hype and precedence for any forthcoming legal publications. Welcome to the Web 3.0!

Whilst PART 1 touched mainly on taxonomies and grounded theories, there is slightly an untouched area when it comes to other leading jurisdictions' technology evolution that may comparatively be relevant; such as Germany, France, and East Asia (Japan, Taiwan and South Korea). On the one hand, arguably, Andrew's focus of analysis is largely based on the UK and the USA leading authors and perspectives. That, in particular, carries invaluable anecdotes of theories and practices. On the other hand, arguably, a fair balance could also be inferred to the non-UK and USA invaluable anecdotes of theories and practices. Such comparative balancing between these two maybe worth mentioning. If the latter materialises, PART 1 looks beyond immaculate.

I escaped reading most of the substantive parts and spent three (3) working days to read PART VI. In comparing the previous IT Law book authors, Andrew has enticed and enlightened me with constructive ideas and useful cross referencing. The Chapter on Data Protection has been addressed precisely clear without detailed paraphrasing of Sections of the UK Data Protection Act 1998. The coverage and analysis of the history, progress and trails are explained on pragmatic approach, instead of, arguing and attempting to emphasize on pure legal reasonings of the Act. Chapter 19 on Data and personal privacy, nevertheless, falls short on certain composition that readers deserve to be educated. Primarily, on the RFID tracking section.

Arguendo (assuming), Andrew's intention to illustrate the technology is naturally motivated by the previous data protection chapter, I, however and persuasively opine, a brief technical illustration on what consists RFID might be useful to be illustrated. This, from my observation, shall provide broader comprehension to a first timer who needs to know what is RFID all about. The only, impressive findings, that may warrant me to further expand my research relates to Andrew's footnote number 65 on page 514: CAGARAS (read as: Coordination And Support Action for Global RFID-related Activities and Standardisation). That compels me to gauge and analyse; to what extend shall the (present) British Government perceives and reacts upon.

Andrew has further written a section on Data retention and identity; by highlighting the Code of Practice on Location Services. He has also highlighted the types of Data to be retained. Much of these analysis and cursory discussions on this section stemmed out from media laws' viewpoints - where, convergence in mobile communications technology, being made as a strong reference. The attempt is slightly brief and arguably, as a reader and a Doctoral researcher, I implore more from this section. As mitigation, Andrew has satisfied me with his foregoing conclusions by ending these:-

"...The law cannot keep pace with technological development; it always lags some months or years behind. The internet of things is coming; we will become part of the network. What is not clear is whether this will give us greater or less freedom."

And I concur no more.

By Noriswadi Ismail
MPhil/PhD Candidate
Institute of Computer and Communications Law
Centre for Commercial Law Studies
School of Law, Queen Mary, University of London

Think Privacy Toolkit for Employees

2010-06-14T10:18:00.000-07:00

The UK Information Commissioner's Office has issued a Toolkit on the above. It is very much useful for organisation and companies to initiate a privacy-friendly environment amongst the employees. This toolkit is considered as best practices (though non-binding), in legal effect, but, it carries the notion of "soft law" approaches.

Forthcoming Workshop: Data Protection & Privacy Law

2010-05-25T09:38:00.000-07:00

I will be conducting a workshop on 29 June 2010.

The details are downloadable HERE.

Selected Issues on Data Protection & Privacy

2010-05-21T08:33:00.000-07:00

Throughout my 3 weeks stint in Malaysia, I have had presented to four (4) stakeholders namely:-

1) Ahmad Ibrahim Kulliyyah of Laws and Kulliyyah of ICT, International Islamic University Malaysia. Audience: Professors, Senior Academic Fellows and Lecturers. Constructive comments and feedbacks were gauged and are currently being incorporated in my research and chapter writing;

2) Malaysian Institute of Management. Audience: Managers, Lawyers and Directors. Constructive responses were received. The session was recorded and I am awaiting for the DVD;

3) Azmi & Associates. Audience: Pupil-in-Chambers and Associates. Received constructive views on Data Protection & Privacy Strategies & Management. Issue currently researching: what's and where's next after the Malaysian Personal Data Protection Bill shall come into effect. Currently, I am comparing the analysis made by Professor Graham Greenleaf's; and

4) Multimedia University Malaysia. Audience: General Counsel of MMU, Researchers and Lecturers in Law & Business. MBA students. Received excellent feedbacks especially in relation to approaching data protection & privacy issues from cultural paradigm angle, human rights as well as philosophical perspectives. Currently, I am writing the pointers for an article (to be published).

The slides of the above are retrievable HERE. (file: Kulliyyah of ICT Talk 300410)

Malaysia leads ASEAN's data protection & privacy?

2010-04-09T08:29:00.000-07:00

Thanks to my colleague, Sonny Zulhuda of Multimedia University, Malaysia for a comprehensive update on this awaiting news.

The next array of anticipating issues shall be: Implementation & Enforcement. Oh. It's also compliance cost and awareness. Much to be done. But, well done Malaysia! After twelth years of waiting.

So much so, the above map's colour on Malaysia should change it's colour to blue instead of red!

Cloud Computing's Got Talent! - A Nemesis to Data Protection?

2010-03-16T15:47:00.000-07:00

I have just completed my slides on the above. It's viewable HERE

RFID Privacy Law in the US

2010-03-09T08:19:00.000-08:00

The Washington HB1011 is, arguably, and perhaps, a precedent for some. The RFID Journal reports.

In the United States, Nevada, New York, New Hampshire and Virginia are adopting the Washington effort towards a similar motivation. Comparatively, UK and EU RFID Technical guidance via the Information Commissioner's Office and the Article 29 Working Party should relook into some of the provisions in those States. Maybe, UK and EU could learn something from the US. Or, alternatively, inferring to the Canadian approach, may also lead to something insightful.

By and large, personally, I would anticipate that in few years time, a review will take place in the UK and EU on this matter. The latter may also correspond the latest ICO report on "Privacy Dividend". Alas, it's not that too late for recognising RFID as a dividend of the Internet of Things!

Image source: Google Images

New release by ICO: The Privacy Dividend Report

2010-03-08T17:19:00.000-08:00

I am pleased to share the recent release of Information Commissioner's Office literature on: The Privacy Dividend Report. It will be interesting to note the findings. Hopefully, potential headways could be linked towards commercial interests and technologists' motivation. Three (3) observations came in mind. First, how can RFID fits in the setting of a balanced or return of dividend (if any)? Second, whether proactive privacy protection is an indirect translation of a privacy code for technology? Third, will the business case being sustainable should more sophisticated Privacy Enhancing Technologies (PETs) come into being? I will only be able to answer once analysed and substantiated it.

Image Source: ICO Website (Cover Report of The Privacy Dividend Report)

RFID is not bad? But, the intention matters?

2010-02-24T03:15:00.000-08:00

I read this article between the lines.

There were several observations that popped out. First, the writer's position in RFID deployment is linked towards the political landscape of his home country. Second, maybe, the writer should be able to understand the brief taxonomy of RFID applications in-depthly. Third, the writer maybe, could also extract whether the nationals of his home country regard RFID as a threat or a bad innovation? I think, on this point, intention matters. Oh, by looking into his profile religiously, I sense that he is running for an important post in his home country. If elected, maybe brainy technology, legal abd public policy advisers should educate him on RFID and other related issues against the country's backdrop.

Image source: Google (illustration: an RFID Car Key)

Identity Theft Test - a gateway to profiling

2010-02-18T07:55:00.000-08:00

I am so impressed with the designed online Identity Theft Self-Assessment Test that was devised by the Norwegian Data Inspectorate. Do attempt the test HERE. Identity theft could happen everywhere, whether online and offline. It's a gateway to profiling the authencity of a person/user/pseudonym and any parties who are deemed to be an under cover person. Zooming into the lens of an RFID environment, I am unsure whether the test would provide the necessary controls in view of the Privacy Enhancing Technologies (PeTs). Maybe it is a different element altogether. Nevertheless, it is best to recommend this test to consumers and customers of all industries (via their websites), especially service-based and consumer-based businesses. Then, it would provide added value, useful diffusion and dissemination so that the message will reach them ideally well.

RFID in McDonald's (Japan)

2010-02-11T09:59:00.000-08:00

This YouTube video features how a customer could utilise his/her Mobile-RFID in a McDonald's restaurant. What constitutes the capability? They are:-

i) Mobile-RFID (some Japanese models have embedded RFID chip inside their mobile phones)
ii) Subscription with the Internet Service Provider (via the line subscriber) - Wifi/3G/4G/5G enabled - only in Japan; and
iii) Reader (normally, attached in front of the cashier).

And the customer will get his/her order without queuing during the peak hours!

Pondering: What are the data protection and privacy issues that could be anticipated here?

Image source: Google Images.

South Korea & RFID

2010-02-10T11:47:00.000-08:00

I have been keeping in touch with the South Korea RFID progress for the past five (5) months of my research. Today, by accident, I have stumbled upon the translated version of their Articles / Provisions in relation to RFID Privacy Protection Guideline (Republic of Korea). It is interesting to note that the guideline's coverage is quite concise. If one is to dissect the Articles, I wonder whether it achieves the adequacy protection terms under the Directive 95/46/EC. In the interim, it may not reach the adequacy level of protection, arguendo, taking into account the detailed analysis of compliance checklist by the Directive.

(Image Source: Google Images) - A marketing campaign (integrating RFID capability) via credit card at a Petrol Station somewhere in Korea.

Mobile-RFID Cloud Computing in East Asia

2010-02-05T09:20:00.000-08:00

This blog aptly mentioned the Mobile Cloud Computing environment that will be tested and trialled in South Korea by 2014. In my research, I have also looked into Mobile-RFID and Near Field Communications (NFC) that is known as pairing technology. Mobile-RFID environment is quite new in certain countries. But, Japan and South Korea are already on track. Now, South Korea, or maybe, Japan too, are looking into the possibility to extend it to cloud computing. I anticipate that should such plan takes place, security and data privacy issues will be more sophisticated. On one hand, these countries are too advanced (comparably to others). On the other hand, in my humble opinion, the EU and US need to collectively agree on a certain reformation within their states' or federal's legislation and how to respond to the South Korea and Japan's progress. A trilateral data protection initiative between US-Europe-Asia maybe a good start? So much so, public policy lobbying is much needed.

In the meantime, I am sharing an image (imported from Google images) - copyright by Gartner on what's holding cloud computing back. Maybe another point that should be stressed upon in that image is on - data privacy, security and retention - or in a trendy way - Information Governance on the cloud!

Cloud Computing and RFID - Data privacy at stake?

2010-02-04T10:34:00.000-08:00

In the midst of refining my research, I have stumbled upon this interesting write up that generally narrates about cloud computing. Most of the issues discussed were on data privacy, security and less on liability. The regime was largely focusing on the United States. There are also several interesting discussions that have taken place. One of them, lately, is Microsoft's proposal towards potential legislative reform on cloud computing. The proposal seems to be intuitive, yet, needs added substance. Especially, how, the third (3rd) countries and other continents / regimes response towards the reform. It would be very much interesting to witness what shall be the legal impact of a service provider based in the US, which is outsourced by a company in a country (within South East Asia contour) where both countries have had not reached the adequate data protection under the EU data protection standards (EC 95/46 Directive). In corresponding to that, the company manages RFID deployment for its client / customer (which is a governmental agency). Question: How cloud computing liabilities respond? And how the data protection laws apply? And when to draw the technical compliance, information security and risks between these? It needs some brainstorming and rethink.

Maybe, as a start. Johnathan Zittrain of Harvard Law School's article on: "Lost In The Cloud" is a recommended casual reading.

Image source: Google. Copyright belongs to the owner. The illustration is for informational purpose only.

MGDC 2010 - A Brief Retrospective

2010-01-28T08:34:00.000-08:00

Last week, (20-21 January 2010), I had the privilege to present a paper on: "Malaysian Data Protection Bill; Some Useful Headways from the United Kingdom (UK) and the European Union (EU)" at the Malaysia-Glasgow Doctoral Colloquium. My 20 minutes presentation was scheduled at the Social Science Stream parallel session 4.

My presentation slides are viewable HERE.

It was the inaugural colloquium, jointly hosted by the Glasgow-based Universities; University of Strathclyde, University of Glasgow and Glasgow Caledonian University. The colloquium was sponsored by the Ministry of Higher Education, some benefactors and sponsors of the Universities. Overall, it was a well-managed one, albeit, the first time, such a Malaysian postgraduate research colloquium took place in Scotland. Congratulations to the resources and all who were involved with this colloquium directly and indirectly.

During the presentation, I have shared:-

1. The current Data Protection Bill's position in Malaysia - that will be potentially to undergo a third (3rd) reading in the Parliament.

2. The Executive Summary of my research and the link with my PhD research in RFID, data protection and privacy in the UK and EU.

3. Literature Review and Research Methodology (content analysis, data analysis and observations)

4. Research Limitation.

5. Substantial issues under the Malaysian Bill: Governance, Corporate Binding Rules, Enforcement, Application of the Bill only to commercial and private sectors - not the State and the Government, Dissemination, Diffusion and Standard of adequacy protection.

6. Cross references to issues and challenges posed by the UK and EU by responding to the potential issues under item number 5 above.

7. A way forward for Malaysia.

8. What's next in my research.

The above are related substantial pointers that I have had presented. In the interest of time, I managed to complete the presentation and called for more questions and discussions. It was exceedingly an eye opener to have had witnessed interactive members of the audience that were very much interested to share their insights and opinions on data protection and privacy. The reviewer (panel) had provided useful comments too. I was asked four (4) questions. But, I have selected two (2) leading questions (not in verbatim, but have been proof edited by myself) that captured my next stage of research, as follows:-

Question 1: Whether should there be an extension of data protection and privacy from the perspective of pyschology and the professionals in this area ? (as the questioner is an expert from one of the local universities in Malaysia).

Answer: Yes. However, the notion of data protection and privacy was not yet embedded as a culture, generally, in Malaysia. However, some professions have been abiding with the confidentiality clauses in relation to the client's confidentiality alike of lawyers and doctors. However, at times, there is a tendency for one to share the information and prying a client's privacy to someone that they trust in a relationship (like to their spouses, families or siblings). The intrusion and prying indirectly happened without knowing the condition that the more one speaks and talks about their works, the higher, his or her client's privacy is intruded. However, for the time being, it is also best to propose a code of conduct or code of ethics that may self-regulate any professions whilst awaiting the Bill's translation to be transformed into a Law, restrospectively. If there are such codes, not only to the aforementioned professionals, but to all, a harmonised application should be adopted by looking into the spirit and motivation of data protection bill.

Question 2: What do you think about the current MyKad ID, wondering whether are there any data protection and privacy issues that may potentially arise?

Answer: MyKad ID has been developed through and by different service providers and platforms. Thus, there are several and selected deployed technologies embedded. However, the issues that may arise is whether; what would be the security risks of the respective parties when it comes to issues of data protection and privacy breach. Taking an example of four (4) different companies, having deployed four (4) different platforms, in a MyKad deployment. The important notion is whether all companies are able to share the collective risks in the event there shall be security and data breach. In the absence of data protection legislation, I may argue that the technology and controls prevail (like encryption and other security technology methods and standards). However, should the Data Protection Bill be a reality, the respective parties should make a compliance checklist in accommodating the data protection and privacy priorities. So much so, in this context, the technical liabilities of data protection and privacy apply.

Besides the two (2) questions above, the Reviewer has commented on my research methodology and proposed a feasible alternative as to ensure the research should be mapped for a PhD research as opposed to a Post Doctoral research. The similar sentiment was also mooted out by a PhD colleague (also a Presenter) from Warwick Institute of Education. His insightful comments, observations and views motivated me to revisit and relook my research coherently pragmatic. A mouthful thanks for the inspiration.

There are also three (3) questions that were posed by some of the presenters in relation to the retrospective effect of the Malaysian Data Protection Bill towards the banking industries. A presenter of Durham asked me the latter. I aptly responded that banking industries should be able to anticipate the compliance costs as to make themselves compliant and relevant. Road shows, awareness and diffusion are the key towards that. Issues of governance, resource, implementation and enforcement should also be prioritised.

A different presenter of Durham asked me about Radio Frequency Identification Technology (RFID) by inferring to the United States' recent surveillance limbo. I briefly responded that when it comes to surveillance issues, there are mixed responses, especially when it comes to RFID. It used to be a military technology. Now, it is a commercialised technology. Yet, the world (one day) will witness the ambient intelligence (Ai) communications that are surrounded by objects and things communicable via RFID chips. It maybe harmful and prying one's privacy if there are no controls. It may also be useful for our daily lives' activities. It may depend on how one looks at a particular RFID technology. It goes back to purpose. He, then, passed the remark: "...we are living in an Orwellian world" - during the introductory part of his presentation, by relating to my presentation topic earlier. I might partly agree.

A presenter of Glasgow Caledonian asked: how RFID technology works, the interrelationship within an RFID environment. Within my knowledge, reading and exposure, I shared with her the generic illustration on the RFID tag categories - active and passive. It is depending upon the frequency usage of the tags, database management and notification to the stakeholders/consumers (I have cited the examples of some leading retailers in the UK that have deployed RFID). I hope my brief technological explanation to her was succintly clear.

After one (1) week of analysing my paper. I have made some improvements to my current works (research and writing). This paper, shall be submitted to the Malaysian Government and stakeholders by June 2010. For a long term strategy and plan, I will cite this paper in one of the PhD chapters (under the Data Protection and Privacy Chapter).

Thank you very much indeed for the experience, networking, discussions and opportunities. I look forward to attending my next paper presentation in BILETA 2010, to be held at the University of Vienna.

Respectfully reported.

Noriswadi Ismail
MPhil/PhD Candidate
Institute of Computer and Communications Law
Centre for Commercial Law Studies
School of Law, Queen Mary, University of London

Happy Data Privacy Day!

2010-01-28T06:02:00.000-08:00

I am taking this opportunity to greet a very Happy Data Privacy Day. 28 January every year, is the designated date for such a must-to-celebrate Data Privacy day not only in the United States, but also in some parts of the world - Canada, Australia and some European Union countries too. Stakeholders representing the corporate organisations, universities, Information Commissioners' Office, Privacy Commissioners and all have joint this celebration with its collective mission in data protection and privacy. Detailed history of its birth, the reports of 2008 and 2009 are respectively readable here. In a related development, I have just discovered a Privacy Project website that focuses their discussions, research and consultations in the area of data protection privacy as well. It will be quite fascinating to gauge the progress of these efforts, not only at the United States' level, but also, at the global level.

Security, At What Cost - A study by RAND

2010-01-28T05:11:00.000-08:00

Thanks to Dr. Ian Brown for posting this quantitative research / study by RAND on the above. I will map it based on the lense of RFID in my research.

RFID SEC 2010 Asia

2010-01-28T04:31:00.000-08:00

Singapore Management University will be hosting the RFID SEC 2010 on February 2010. Do peek the details.

Technology Predictions for 2010 - GPS and RFID

2010-01-25T10:37:00.000-08:00

These predictions are interesting. We will see and await the next eleven (11) months of translation - whether it hit, or otherwise.

Cloud-based RFID; A privacy crawler?

2010-01-25T10:24:00.000-08:00

It is always about the cost factor for companies. But, it maybe partly due to technology trend as well. In Australia, the proposition to design a cloud-based RFID was mooted. I am unsure whether the idea has been translated into a proof of concept. If it has, it maybe a privacy crawler, especially, at this point of time - where people around the world has been advocating on cloud computing's chief issues: security, data protection and privacy.

RFID interoperability within healthcare

2010-01-14T11:38:00.000-08:00

This American healthcare solutions' commentator views that RFID will be linking its deployment to other predicted technology growth. It's very interesting to look into the top ten (10) predictions of the healthcare IT trends:-

Electronic Medical Records (EMRs) will gain momentum

Personal Health Records (PHRs) earn legitimacy

Cost containment is a paramount

Alternative care delivery models emerge

War waged on Medicare fraud

Increased focus on outbreak preparedness

Patient safety initiatives intensify

Healthcare professionals in short supply

Storage and business continuity concerns abound

Physician groups join healthcare systems

As cliche' as it sounds, predictions may hit and it may not hit. If one is to bring RFID within one of these predictions, stakeholders should also consider the privacy impact assessment and its respective informational privacy responses.

RFID Cluster in Songdo Korea

2010-01-14T11:21:00.000-08:00

In an ambitious move and plan, Songdo, a city in Korea will be an enabled-RFID-city. The Korea IT Times reports. In the absence of such primary English literature on RFID, I am unsure whether Korea has a strong data protection / privacy laws (if any). Or, whether the country has a guideline, code or any piecemeal legislation that is related to informational privacy. It would be very much interesting to gauge certain discovery on this matter. Having said that, I anticipate and predict that Korea needs to address informational privacy issues vis-a'-vis RFID from various spectrum and viewpoints. Wondering whether the Songdo RFID development is taking a gradual and progressive phase.

RFID & NFC pairs for Digital Monies' evolution?

2010-01-08T10:06:00.000-08:00

What sparks the move on having digital monies in place? I have reached into varying contexts and views after reading this. One of the contributing factors, amongst others, is also due to the evolution of Near Field Communications (known as NFC). In my RFID research and reading, I have come across how NFC has been developed as a standard for technology applications.

Thus, whilst pre-empting and anticipating the NFC hype, many technology companies lobbied to get engaged with its development globally. In South Korea and Japan, NFC applications within mobile phones have taken place as early as 2002 (trial stage). Today, some locations are deployed with readers that are read-enabled with NFC, and of course, with the integration of RFID chip. Concurrently, my research and reading have ideally outlined that the pairing of such technology - NFC and RFID will transform consumers and users' convenient almost to perfection. My thought hit and affirmed it. As the commentator suggested, by 2020, one shall gradually witness the usage of cash to reach the stage of extinction. It's interesting to see how possible the prediction of a cashless consumer shall be. Today, we have been using Debit cards and Credit cards. PanPal, on the other hand, seems to lead the cashless environment intermediary convincingly acceptable by its customers and users via online (secured, fast and cashless).

Now,what the future lies on digital monies or digital cash is a significant question that policy makers should anticipate from various viewpoints - technology, legal, regulations, business and social. I may predict that there should be a public consultation or white paper on technology coupling (alike of NFC and RFID) that links towards various aforementioned viewpoints. The call for such a viewpoint should be brainstormed skeletally without further ado.

Germany leads the world's first RFID ID card (by 2010)

2010-01-07T14:44:00.000-08:00

I am so interested with the potential acceptance by stakeholders once the RFID ID card would have been issued. "The Local" Germany News In English reports.

My three (3) chief predictions:-

i) Invidious acceptance: It maybe partly harmful and maybe partly okayed by certain segments. However, awareness and notification on how RFID works should be diffused. It's the primary role of the Data Protection Commissioner to do so;

ii) Controlled surveillance: potential cases on terrorism will be inhibited and minimised in that sense. Border control shall be beefed up and percentage of illegal immigrant cases maybe plummeted;

iii) Periodic updates: Maybe, it's best for the Data Protection Commissioner through their higher level representation to be able to voluntarily update the status of post implementation to the Article 29 Working Party and the RFID consultative group. This may provide useful guidance and case study on the effectiveness of implementation and how well Germany manages their stakeholders' perception.

The EU Data Protection Review - What's Next?

2010-01-06T08:24:00.000-08:00

I have read, religiously, and between the lines on "The Review of EU Data Protection Law" - both the technical report and the summary report.

There are flows of anticipating questions emerged, as I was reading it. Nevertheless, I think, it's best to put the crux of the concerns at a later stage in my proposed written paper (or hopefully, a publication, by end of 2010). My impression after reading these reports are partly mixed. The positive and ambitious part was the timeframe taken by the commissioned Consultants in addressing the interviewees' responses, which I think, may lead to certain ideas - on who's who to approach in my research. The uncertain part is the effectiveness of post-report or review pursuant to the recommendations that have been put forward. Most, or largely, are all practicable and insightful constructive. I duly hope the national EU Member States have adopted, at least, some of it or at least, the minimum implementation.

Congratulations to the Consultants for the thorough works, in depth analysis, research, study and recommendations.

Note: In a related development, the work on The Future Of Privacy was released on December 2009. Special thanks to Hunton & Williams for the dissemination via their blog.

RFID for London Olympics 2012?

2010-01-05T10:26:00.000-08:00

Suddenly, Olympics came into mind. Beijing 2008 was a huge success, in many ways. It also includes the deployed RFID infrastructure during the Olympics. Main reasons were largely on security and surveillance. I personally think London 2012 may emulate the Beijing's success if painstaking caution is put in place. Despite the mixed views on its potential deployment and privacy concerns, I anticipate, there shall be some reactions by the Information Commissioner's Office to respond.

My predictions for London Olympics 2012 surrounding RFID, data protection and privacy are:-

i) Tapping the RFID investment: The ruling Government shall invest considerably large on security and surveillance. RFID and other biometrics technology will take place gradually;

ii) Road show on RFID: The Information Commissioner's Office shall play active roles for public notification and awareness. If possible, guidance on related RFID devices that will be deployed for London Olympics should be well-informed.

iii) Post Olympics 2012 report on RFID deployment: By having this report, it will instill stakeholders' confidence that this technology has advantages for the British public and the world.

Accepted Abstracts in Quarter 1 of 2010

2010-01-04T10:46:00.000-08:00

Happy New Year and welcome to the new decade of 2010!

For the past one month, I have been busy with writing, reading and researching. The results of which, are tremendously engaging. New facts. New discoveries. And new arguments. For the first (1st) quarter of 2010, I will be presenting two (2) papers:-

Conference 1: Malaysia Glasgow Doctoral Colloquium

Paper 1:-

Malaysia’s Data Protection Bill; Some Useful Headway From The United Kingdom (UK) And European Union (EU)

Noriswadi Ismail

MPhil/PhD Candidate

The Institute of Computer and Communications Law

The Centre for Commercial Law Studies

School of Law, Queen Mary, University of London

E-mails: n.ismail@qmul.ac.uk, noriswadi@googlemail.com

Profile: http://www.law.qmul.ac.uk/people/research/ismail.html

Abstract

In the nearest future, the Data Protection Act will take place in Malaysia’s legal regime. It is anticipated that there shall be potential compliance costs to be accommodated by the stakeholders. This paper anticipates substantive concerns that Malaysia should learn from the UK and EU. Selected case studies shall be appraised.

Summary

On 8 October 2009, there are series of online and hardcopy of highlights that surrounded data protection concerns, issues and the need for enforcements in Malaysia. Some authors, experts and critiques have rightfully opined that it is about time for Malaysia to be vigorous on this subject matter. Whilst the feedbacks are very much a triangulation, this paper shall anticipate further what and how Malaysia should endlessly learn from the UK and EU on these similar concerns. From the country’s perspective, Malaysia is not far behind from her other Association of South East Asian Nation (ASEAN)’s counterparts in giving the birth of a data protection legislation. Whilst some ASEAN’s member states legal regime are sector-specific based, self-regulatory via other existing legislations and prevalent soft-law approaches, Malaysia has to anticipate series of fundamental issues once the Data Protection Bill is in force.

Appropriately, data protection and privacy involves its actors and stakeholders. Their participation in daily activities, commerce, trade and communications are engaging – be it virtual, physical and in our real lives. Extensive virtual navigation via Web 2.0 sphere has triggered concerns to our lives today and leads to such chilling effects to all countries. Malaysia is not an exception to this effect. Potential strategies must be pre-empted for Malaysia once the Bill will be a gazetted legislation. This paper shall cursorily analyse selected cases and progressive experiences from the UK and EU within different periods of era (from 1990s to 2000 and to date), being the decade of data protection’s maturity in the UK and EU. These cases and experiences are indispensable for Malaysia’s roadmap. The author has personally opted for not paraphrasing the draft Bill or any of the UK and EU Directives. Instead, pragmatic analysis, rationales and reasons will be enlightened to support such assertions and views to support as to why Malaysia should learn from these jurisdictions and regimes.

Arguably, there are three main terms of reference that are substantiated towards this paper. First, as Malaysia is very new to this peace of legislation, a thorough overview should be inferred to disseminating potential data protection issues to the stakeholders. This is to gauge a clear apprehension on its inter-relationship with various actors and stakeholders. In this paper, the actors and stakeholders are referred to any individuals and the roles may interchangeably apply. Second, as Malaysia’s government has its own preferred approaches to focusing and retaining it’s governmental data via other existing legislation, the author shall appraise the broad analysis of the UK Freedom of Information Act 2000, that, in a way, relates and cross refers to certain intersection of data protection concerns. Third, as Malaysia has targeted 6% of annual Gross Domestic Product (GDP) by 2020, it is undeniably paramount that the growth contribution factors are derived from domestic and international trades and investments. Due to the latter, the exchanges of data, data retention, security and trans border data flows will be aggressive or maybe uncontrollable. – if due care and diligent of data protection is not adopted seriously Thus, it needs special painstaking attention by the actors and stakeholders in dealing with different data protection approaches, principles and enforcements with and amongst Malaysia’s trading partner. All of these references shall be discussed via the UK and EU’s actors and stakeholders’ experiences.

Conclusion

This paper shall be concluded via proposing a data protection strategy roadmap to Malaysian actors and stakeholders. It is hoped that the future Data Protection Commissioner or the equivalent Privacy Commissioner will be able to consider the rationales of such an adoption for Malaysia in a localised context and setting. In the second part of the conclusion, the author shall suggest proposed regional and international collaboration, networks and diffusion that relates to data protection at the regional and international foray.

Keywords: Data Protection. Privacy. Malaysia. United Kingdom. European Union.

References

Books

Chris Reed (ed), Reed and Angel: Computer Law (5th rev OUP, Oxford 2003) 417-453.

Ian J. Lloyd, Information Technology Law (OUP, Oxford 2008) 3-180.

Ian Walden, Computer Crimes and Digital Investigations (OUP, Oxford 2007).

Rosemary Jay and Angus Hamilton, Data Protection Law and Practice, (Sweet & Maxwell, 1999).

Ruth Boardman and Richard Morgan, Data Protection Strategy, (Sweet & Maxwell, 1st Edition, 2003).

Websites

Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data accessed 9 November 2009.

Review of EU Data Protection Directive: Summary < http://www.ico.gov.uk/upload/documents/library/data_protection/detailed_specialist_guides/review_of_eu_dp_directive_summary.pdf> accessed 9 November 2009.

Conference 2: BILETA 2010

Paper:-

Mobile Radio Frequency Identification Technology (Mobile-RFID);

where is privacy?

___________________________________________________________________

By Noriswadi Ismail

MPhil/PhD Candidate

The Institute of Computer and Communications Law

The Centre for Commercial Law Studies

School of Law, Queen Mary, University of London

E-mails: noriswadi@googlemail.com, n.ismail@qmul.ac.uk

Profile: http://www.law.qmul.ac.uk/people/research/ismail.html

Blog: http://the-rfid-nexus.blogspot.com

Abstract

i2010 is aimed towards the European Information Society for growth and employment. There shall also be priorities for new strategy for European information society (2010-2015). These ambitious aims are part and parcel of the digitalizing Europe vision for the next 5 years. One of the significant growths in this sphere is Mobile Commerce (M-Commerce) and Radio Frequency Identification Technology (RFID). Mobile Commerce or technically termed as M-Commerce has been deployed widely by mobile operators in their present business models. In the United Kingdom (UK) and Europe, stakeholders and consumers have had a mixed bag of responses on its effectiveness, quality of service, functionalities and liabilities. As M-Commerce evolves, Radio Frequency Identification Technology (RFID) has been put into trials within the M-Commerce environment. The main motivation is purely on convenience to the stakeholders and consumers – as the top priority list. Nevertheless, there are two main concerns surrounding this trials and deployment. First, it may spark the issue of data surveillance in a greater context. And second, it may question the issue of privacy in a broader context. This paper shall narrate potential challenges that shall be faced by mobile operators based on these concerns. Careful substantiated reasons are also outlined. At a generic level, this paper shall also touch documented trials on Mobile-RFID in selected East Asian Countries as cross border and comparative analysis. At a specific level, it shall appraise the Mobile-RFID trials and developments and proposing potential considerations within the ambit of data protection and privacy concerns in Mobile-RFID that are prevalent to the existing consultative member states of the European Union.

RFID & Standardisation

2009-12-09T11:39:00.000-08:00

In my research, one of the boundaries that I am looking into is on standardisation of RFID in its frequencies and tags across these jurisdictions: South Korea, Japan, Europe and Asia Pacific. Special cross reference will be made to the United States' contours. Prior to zooming into these countries/continents, Australia has had made a commendable progress last January 2009 on its RFID standardisation. The question that I am pondering (at this juncture), is how and why, to what extent, these standards co-exist with data protection and privacy? It would be particularly engaging if I could look and deal with case-by-case scenarios of RFID applications that are being deployed in various industries as against the background of standards. Maybe IBM or MOTOROLA RFID-based solutions shall provide some general technical guidance.

The awaiting birth?

2009-11-24T04:44:00.000-08:00

After 10 years, Malaysians are awaiting the birth of the Malaysia Personal Data Protection Bill, being an Act, soon. Now, it's in the second and third reading at Parliament. I predict it will be gazetted by end of this year, or perhaps, by the first quarter of 2010. Back in 2002, Professor Dr. Ida Madieha wrote a very interesting article on the Bill, by paraphrasing some of the relevant sections vis-a'-vis issues on e-commerce and privacy.

I fervently hope that the analysis and comments have been taken into consideration by the legislator and consultant. Once the Bill is ready to kick-off, there will be potential compliance costs. It is anticipated that organisations and companies are required to get ready with the potential transformation: internal compliance road shows, compliance costs, strategies and awareness for and to all Malaysian stakeholders on data protection. Particularly, the ICT and banking sectors. It's just the beginning for Malaysians.

Cursorily, a brief overview of other Asia Pacific countries on data protection and privacy is readable here (published by DLA Piper, as at March 2009).

Wondering how the Bill responds to RFID? (in Malaysia).

Tag Broker Model to protect privacy?

2009-11-24T04:01:00.000-08:00

This paper is quite technical to comprehend. Nevertheless, it sounds interesting as to how such a model has been proposed to protect privacy within an RFID enabled setting. Briefly, this article discusses on such a tag broker model approach for an enabled Mobile RFID which is compatible with Near Field Communication (NFC). I am wondering whether is there any literature that touches on data protection and privacy issues in relation to NFC? Reason being: NFC, is an industry standard that results to the technical compatibility and operability, deriving from RFID. Or, maybe, it's a subset of RFID as well? Pondering.

RFID in youtube

2009-11-12T05:57:00.000-08:00

This video is by the Metro group. Easy to be understood by a layman like me. This second video, is also interesting, with additional perspectives by privacy advocates in the US. I personally like this third video - practical and eye opening. This, on another hand, explains about microchip implantation. Medical technology has made this verichip useful as practised by this Harvard Doctor. Essentially, this looks like RFID has started to rule the world. Interestingly, this guy has guided viewer how to remove RFID chip from an Oyster card. That is cool. In the UK, this video looks informative. Themed as Big Brother Is Watching (it has 3 sequels). In a broader context, this video canvasses Britain's surveillance state, in general. Worth to watch.

RFID deployment was put on halt; the Philippine's case study

2009-11-09T12:06:00.000-08:00

RFID, has been said as illegal and expensive. This is what the views that could be adduced from the people. Wondering whether the republic has considered data protection and privacy terms prior to implementation or anticipating the same in the future.

Mobile-RFID; a new hype?

2009-11-09T12:02:00.000-08:00

This is an interesting move by RFID solutions architect; Mobile-RFID is now a hype.

RFID is a virus carrier too!

2009-10-20T11:21:00.000-07:00

All technology has faults and flaws. RFID is no exception.

"Crawling" the Container

2009-10-20T11:18:00.001-07:00

Oracle has shared it's case study on container's movement here. It's technologically impressive.

RFID = Access 2.0 (I like the notion)

2009-10-20T11:15:00.001-07:00

It's interesting to equate RFID = Access 2.0 or perhaps (intriguingly) Ambient Intelligence (AmL = Access 2.0). The brief news explained, in a way.

Library RFID Kiosks

2009-10-20T11:10:00.000-07:00

This is an interesting development on Library RFID Kiosks. , as BBC reported. In East Asia, HeiTech Padu Berhad (Malaysia) has had the prototype to be commercialised in Malaysia. Now, being packaged as it's suite of products.

22nd Schrodinger Lecture

2009-10-16T08:39:00.000-07:00

Imperial College will host the 22nd Schrodinger Lecture. I have made a confirmed reservation to attend. My aim is to study the success and how it sparks other motivations in other areas of technology. The theme is on:

The world's nuclear future: built on material success.

Wallace Lecture at LSE

2009-10-16T08:15:00.000-07:00

Being quite an alien to the European Union's history, I attempt to attend the coming Wallace Lecture at LSE next Monday. I look forward to understand the generic ideas so that it could assist my reading and research. Though not focussing that much on law, at least, there might be certain pointers that could be incorporated within my footnote essays (later).

ICC - The Annual Competition Law and Policy Lecture 2009

2009-10-14T05:11:00.000-07:00

I will be attending this Competition Talk. I think, some of my reading and literature review (in a way), will touch generally on Competition. In the meantime, I will summarise the previous attended talk in Imperial Business School and this one by this Friday.

Thanks Kadir for letting me know on the Competition Talk.

A Talk by ex-IBM's CTO at Imperial Business School (13/10/09, 17:00-18:00)

2009-10-12T15:35:00.000-07:00

I have registered and reserved myself for an interesting talk tomorrow (13 October 2009) at Imperial Business School, to be delivered by:Dr. Irving Wladawsky-Berger, former Chief Technology Officer at IBM,. The topic captivates me to understand how innovation surpasses beyond the time reach and how stakeholders need to be very much responsive. I attempt to anticipate some useful pointers that may surround on issue of technology and regulations (generally). Although it's not a pure legal seminar, I think, it's worthy to look into different perspectives.

The abstract (as totally copied - for notification and educational purpose):

Over the past century, science and technology have been successfully applied to innovation in the industrial sector of the economy, leading to very high productivity and quality, and to the development of highly sophisticated and complex objects like airplanes, skyscrapers and microprocessors.

The services sector comprises between 70 - 80% of the GDP and jobs in advanced economies around the world. Services are ubiquitous across many sectors of the economy, e.g., finance, healthcare, retail, creative industries, business support, education and transportation and logistics. Advances in information technologies have enabled us to bring significant innovation to services and services industries, such as ATMs, reservation systems and supply chain management.

But, we have a long way to go in improving the productivity and quality of services, especially given their large and growing role in advanced, as well as emerging economies. As pointed out in a recent report by the Royal Society (Hidden wealth: the contribution of science to service sector innovation - July 2009), services are not easily visible in the economy, and their nature is not well understood. This makes it difficult for companies, policy makers and universities to support the kind of research and innovation programs in the services sector that have worked so well in the industrial sector.

The seminar will build on the recent Royal Society report. We will explore the differences between "classic" industrial sector innovation and innovation in the services economy. In particular, we will focus on the multi-disciplinary and collaborative nature of services innovation, and the new organizations and leadership structures it requires. We will illustrate the discussion with concrete examples from a variety of industries, including health care, learning, public sector and banking.

IBM Fellowship Awards 2009/2010

2009-10-08T10:04:00.000-07:00

This is an interesting call for IBM Fellowship Awards 2009/2010 applications. Unsure whether interdisciplinary law research in RFID, data protection and privacy like what I am researching is eligible. I e-mailed them today and awaiting their revert. Hopefully, it's an okay.

Summer Internship in Berkman Center, Harvard

2009-10-07T08:00:00.000-07:00

This is the copied version pasted here:-

Summer Internship Program 2010

For 10 weeks each summer The Berkman Center for Internet & Society at Harvard University swings opens the doors of its big yellow house to welcome a new group of smart, talented, energetic full-time interns who are passionate about the Internet, democracy, intellectual property, media, politics, and a slew of other things. The interns team up with great projects like the Citizen Media Law Project, Cooperation, Digital Natives, Internet & Democracy, the OpenNet Initiative, StopBadware.org, and more, where they have an opportunity for deep and substantive involvement in our efforts.

Positions are available with most Berkman projects, and we're looking for people with a variety of interests and skill sets. While certain internships are only available to law students, many projects are looking for students enrolled in other types of programs, including undergraduate, graduate and PhD. programs.

Summer internship positions are full time (35 hours/week), and the summer program runs for 10 weeks from June 1 to August 15. While the positions are paid, please be forewarned that stipends may not be sufficient to cover living expenses in the Boston area. No other benefits are provided, therefore interns must make their own housing, insurance, and transportation arrangements.

The word "awesome" has been thrown around to describe our internships, but don't take our word for it. Zack McCune, a summer intern from 2008, had this to say: "it has been an enchanting summer working at the berkman center for internet & society. everyday, i get to hang out with some of the most brilliant people on the planet. we talk, we write (emails), we blog, we laugh, we play rock band. and when things need to get done, we stay late hyped on free coffee and leftover food. it is a distinct honor to be considered a peer among such excellent people. and i am not just talking about the fellows, staff, and faculty, though they are all outstanding. no, i mean my peers as in my fellow interns, who are almost definitely the ripening next generation of changemakers."

We know what you're thinking. Yes please. I want that. That sounds magical. Did I mention I'm really good at "Rock Band"?
Here's what you should do... To apply for a summer internship position, please send by the Friday, March 5, 2010:

a letter of interest, describing your skills and interests, and indicating the area of research and the Berkman projects in which you have interest;
a current version of your resume;
the contact information for two references (professional or academic)
to Berkman's community coordinator, Becca Tabasky, at rtabasky@cyber.law.harvard.edu

Feel free to be in touch if you have any questions. We look forward to hearing from you!!
Summer Intern Eligibility:* Summer interns are students enrolled in a undergraduate, graduate or PhD program of study.* Summer interns do not have to be affiliated with Harvard University.* We welcome summer interns from universities across the world, however we can not pay international students who have not yet received an undergraduate degree.

If you have questions about either academic year or summer internships, please contact Becca .
at the email address above.

I think, I have to start planning on this.

BILETA 2010

2009-09-30T11:00:00.000-07:00

Call for papers: BILETA 2010
Hosted by the Faculty of Law, Centre for Legal Informatics (DEICL/SIL), at the University of Vienna, Austria
Theme: “Globalisation, Internet and the Law”

I will submit an abstract soon.

PhD research

2009-09-29T06:42:00.000-07:00

Dear all,

I am now officially registered as a PhD candidate at: Institute of Computer and Communications Law, Centre of Commercial Law Studies, Queen Mary, University of London. My supervisors are: Professor Ian Walden (Lead Supervisor) and Anne Flanagan (Second Supervisor). Will update some of my next discovery on RFID, privacy, technology & surveillance soon.

Cheers
Noris
London

RFID has reached animal tagging in Malaysia!

2009-04-22T07:19:00.000-07:00

Sorry dearly blog, after almost nine (9) months of long absence.

Now, I am reactivating this blog, as frequent and as consistent as I could. By the way, realised that this Blog has reached it's one (1) year old of its existence. Happy too belated birthday. I promise not to making you as an abandoned child anymore. Promise.

Ok, back to official research stuff.

In Malaysia, RFID has now been used for tagging the livestock. Read this interesting stuff here. and here.

Some questions to ponder:-

i) Are there any technical regulations / standards governing RFID in Malaysia?

ii) How about ethical issues at hand [towards animal]? though sounds too far to think, as opposed to human beings, but animals are always a subject matter of experimental behaviour and model, for such a guinea pig technology to be deployed extensively in Malaysia?; and

iii) Will it be a successful deployment?

And time will tell, whether it is and it will...

RFID market prediction

2008-09-29T01:38:00.000-07:00

By 2013, RFID market predicts a hit of almost 9 Billion USD. That is a handsomely lavish. But, I am unsure on the accuracy of the prediction as against / as opposed to the deployment, industry's feedbacks / views and engagement. This article tells on the prediction - unsure whether it's independent or extracted from market research.

RFID and Security

2008-08-31T16:29:00.000-07:00

Sorry for the long absence, again, due to travelling and research.

I would reiterate the ability to focusing on frequent updates, at least, once per week. My KPI, perhaps :) Anyhow, would love to share this:-

In this report, the author has shared his views the impact of security within the RFID environment. Citing other global practises and scenarios as well. Personally, the Oyster Card (issued by Transport for London), attracts me.

RFID development in the EU

2008-07-12T03:03:00.000-07:00

Some useful updates on RFID developments in the EU.

RFID in Hospital- risky?

2008-07-12T02:44:00.000-07:00

It has been almost two (2) months I last blogged.

Same reasons: work, work and work. I have had read many interesting developments on RFID for the past two (2) months. Some of my UK colleague has provided this useful link. It's pretty much daunting to draw the line between patients' safety within a healthcare enviornment. Enjoy reading!

Will update more often and frequent.

Type RFID on EU Central Bank Search Engine

2008-05-05T04:57:00.000-07:00

You will find these results.

RFID to combat counterfeiters?

2008-05-05T04:48:00.000-07:00

RFID has been extensively debated for the past three (3) years by some central banks. Here, you would be able to aptly generalise the mixed responses from the EU. Though not official, but this slight commentary helps to see how it started and what shall be the future.

RFID as a means

2008-05-05T04:41:00.000-07:00

This paper, written by Ross Anderson of Cambridge University, has partially explored RFID in different angles. Worth for a reading and analysis.

Halifax is eyeing on RFID

2008-05-04T01:29:00.001-07:00

This may be posted quite late after five (5) months. But, interesting to consider by strategists and policy makers: Halifax is eyeing on RFID.

RFID, Banking & Privacy

2008-05-04T01:16:00.000-07:00

Bangkok Bank Limited has explored, on generic note, the application of RFID in banking. I am yet to devulge further any potential impact on that. However, a useful reference for any other banks which may want to deploy. Read this.

RFID is cancerious?

2008-04-07T09:59:00.000-07:00

This blog views that RFID implant attracts cancer. I wonder how the reality speaks on it? It would be an interesting research to be substantiated...

RFID Video Commercial

2008-04-07T09:56:00.000-07:00

This is a very interesting RFID Video Commercial from the Netherlands. Unsure who is the producer or copyright owner. But, it's eye opening.

IHS notes on RFID

2008-04-04T02:14:00.000-07:00

IHS has simply noted down some aspects of RFID and its development in the EU here.

Harvard CIO's response on RFID; Via the You Tube

2008-03-31T11:49:00.000-07:00

Watch this.

Enjoy, think and rethink.

Medical Informatics; why RFID?

2008-03-31T11:25:00.000-07:00

This is an interesting medical science book; combining medical informatics and bio informatics which has cursorily touched RFID in general. Only few chapters generally have examined RFID. Nevertheles, a useful starting point of reference to consider in research.

It is a Digital Book.

So much so, you may critically compare this brief article from Harvard's press release, back 2006.

RFID and 21st Century Human Branding?

2008-03-29T12:43:00.000-07:00

I have read with deep interest this article that explores the possibilities and the otherwise. Proves to be so argumentative. Human Branding via RFID? Not bad to consider though...

RFID rival?

2008-03-29T02:36:00.000-07:00

This is a new technology breakthrough; fragile and brittle silicon chips. I have to keep a close eye on its potential. Read this.

Post BILETA 2008; RFID notes of discussion

2008-03-28T14:53:00.001-07:00

These are some of my questions list on post BILETA 2008:-

1) One of the atendees questioned on the definition of "Data Controller" under the EU Directive and how it should be interlinked with RFID; my personal response is that; if it is to be applied within RFID context, it would be a technology specific legislation instead of otherwise;

2) Responses from the audience argued that it's pretty challenging to reach a consensus in defining the provisions of a particular legislation whenever it comes to high and sophisticated technology like RFID. My personal response is that; strong lobbying is the key and again, reformation is the key;

3) Responses from the audience agreed that the RFID issue has gone beyond; on the issue of human rights - criminal tagging. My personal response is that; the technology has crawled and crippled to an unfavourable environment which in return, people just close one (1) eye to accept its deployment;

4) Views from one (1) of the speakers; said that there would be an enormous challenge should a code of conducr to be introduced in RFID deployment usage. My personal response is that, RFID issue will be similarly or a reflection alike of the internet era and debacle. The difference is that, RFId is a physical and technically function as intermmediary. Perhaps, a whistle blower guidance on this may assist? or to inserting potential provision in the technical guidance?;

5) Views from one (1) of the speakers; said that it will be an enormous challenge if privacy assessment to be introduced in RFID. However, she did not reach any option on this. My personal response is that, whilst the technology remains to be soo powerful, however, an integration should be reached at the development stage level and the privacy assessment should be the key of innovation. Yet, this view is dually debatable; and

6) Views from one (1) of the atendees; said that RFID issue should also be cross reference to other prevalent Directives. However, it is my personal view that, the approach will lead to co-regulation of Directives.

As the developments of RFID in the UK and EU has reached a serious stage of discussion, it is however should be noted that; the outcome of the effort should be disseminated to the other states in transition and other continents. It's a global commitment (emphasis added).

RFID videos on You Tube

2008-03-28T12:44:00.000-07:00

This is something worrying people and society nowadays. The internet of things - where a technology like RFID could communicate from one inter layered technology to another, almost anything under the sun. Much has been debated. Enjoy these series of videos, proudly produced by unidentified producers. Copyright on these belong to them.

RFID; Is it sensible for criminals?

2008-03-28T12:36:00.000-07:00

I have had read interesting developments on RFID, especially the interrelationship between criminals and human rights. The UK has gone another step ahead on this; to tag criminals in the prison. This interesting write up has briefed the position. Also, the attempt to tag RFID in exam papers. It seems that this technology has gradually crippled and indirectly accepted - despite of the current debate and public consultation paper being opened to the RFID stakeholders. In which, I am keen to await the outcome.

RFID World Asia 2008

2008-03-28T05:05:00.000-07:00

I am quite late in securing this information. Singapore will be hosting the RFID World Asia 2008 conference. I hope there will be some public policy, regulations and legal developments on this.

BILETA 2008; Technology track (RFID)

2008-03-27T08:19:00.000-07:00

I presentd my paper via the Technology track in BILETA 2008. Had gathered and collated many interesting developments especially in the EU and the UK. The public consultation on RFID. Opinion on RFID on this matters, is of vital move for the future of RFID. As I write, Burkhard Schafer had energetically presented on "The computer says no - computer generated speech and the law of evidence". It's practical, yet and eye opener due to his Artificial Intelligence background.

RFID in aviation

2008-02-25T03:34:00.000-08:00

I have stumbled across this quite new publication (just copy and paste it):
http://www.idtechex.com/products/en/view.asp?productcategoryid=92

Worth to consider for those who intend to deploy RFID in aviation and explore such potentials in RFID aviation related business.

RFID presentation in BILETA 2008

2008-01-29T05:43:00.000-08:00

Ideally, the conference governor of BILETA 2008, has accepted my proposed RFID presentation. They will upload the accepted abstract soon. I will start writing and burning the midnight oil and be an 'owl'. Besides, a colleague of mine from Greece has favoured me to consider a publication for his editorial board (e-journal). I am wondering whether my LLM dissertation fits the bill as it is purely on UK and the EU. Or else, I would contribute an article for the next publication on June 2008. Will update in detail later. On a different development, this Institute in Malaysia, has practically deployed RFID. Read and digest. Wondering how would they control the data internally from privacy invasion?

RFID and library

2008-01-29T05:33:00.000-08:00

Sorry for the very long gap and inconsollable absence, as I have been pretty much involved in many R&D discussions lately. Amongst others, are on RFID middleware for the libraries. There are positive moves being led by some of our key people. Industry linkage between the business and universities has also been the central theme of discussion. Many checklist items to strategise and brainstorm. Some useful information on RFID and library in China here. This country is gearing very fast, tenaciously and adamantly. Malaysia nees to catch up. My pick on RFID and library: a phenomenal and promising yet sustainable business (if the partnering and business module is fairly integrated and viable).

RFID visas for foreigners? Oh my...

2007-12-06T04:27:00.000-08:00

Even if I have discovered this pretty much late (after 3 months), realised that Malaysia should revisit the "surveillance" effort to introducing RFID visas for foreigners. It would potentially invite privacy and data protection debates. I hope the foreigners would be able to recognising their data protection and privacy rights. Read this between the line.

RFID in Australia

2007-12-06T04:23:00.000-08:00

It has been quite some time I last blogged. Many things intervened. Anyhow, bumped into this useful website on the recent RFID development in Australia. It would provide some general ideas to exploring potential privacy and data protection issues in Asia Pacific, if any.

Next RFID paper

2007-11-17T08:43:00.000-08:00

It has been almost a month I have not updated this blog.

Reason being; attended my graduation in Scotland. Nevertheless, I have done some general research and observation on RFID in Malaysia lately. I have some interesting development to share with (provided that the materials that I am awaiting would be acceptable for online dissemination). On another note, I am keen to participate and present in the coming BILETA 2008. I would be writing on RFID. The abstract sounds as follows:-

RFID; IS PRIVACY STILL A MAJOR ISSUE IN MALAYSIA?

Noriswadi Ismail LLM (Information Technology & Telecommunications Law) Strathclyde

Group General Counsel/Company Secretary
Vice President, Corporate Services
HeiTech Padu Berhad, Malaysia

Abstract:

Radio Frequency Identification Technology (RFID) is no more a hype. It is now being deployed and tested in various industries throughout the world. The absence of a specific data protection and privacy legislation has led to many unsolved issues. Even though the success of RFID deployment encourages the growth and maturity of an ubiquitous society, it is claimed however, inhibits privacy. This debate has been the major cornerstone of civil liberties. Limited dissemination on RFID is also another key issue. Due to these scenarios, this paper shall explore the present issues that have not been unveiled, argued and debated openly in Malaysia. Three (3) reasons have been outlined. Firstly, the delay of data protection legislation, which in a way, contributes to the issue. Whilst the delay is being regarded as a ‘genuine’ and not a politically motivated one, however, it has taken quite some time for Malaysia to await its outcome and implementation. Secondly, the non-existence of such a regulatory and technical standard of RFID deployment has resulted to diversified approaches and techniques in mitigating data and privacy. This has led to many ICT and RFID middleware companies; being the service provider to deploy RFID with less pre-emptive assessment on data and privacy. Thirdly, the limited dissemination on RFID and data protection knowledge has also contributed to the issue. Whilst endless effort has taken place via the international foray, however, the dissemination reach is far beyond than the desired expectation. In outlining these reasons and issues pedantically, this paper has cross referred to the strategic position and consultation initiated by the European Union, being the general benchmark and balanced reasoning for Malaysia’s potential RFID roadmap.

RFID blood bank in Malaysia

2007-10-20T23:28:00.000-07:00

Perhaps, it was quite an astonishment for certain countries that Malaysia is leading the pack in RFID growth, albeit, the data protection and privacy laws is pending. Public policy engagement in this area should be of a great concern. Indeed, it would not be materialised if there would be limited participation by the stakeholders. The recent development that was jointly developed by Intel and Siemens for an RFID blood bank is noble. Yet, it's generally unsure whether there have been certain pre-emptive risk controls, measures and privacy impact assessment. I believe, certain compliance checklist and best practices have been incorporated. The news are readable here.

Malaysian RFID towards 2020

2007-10-20T22:52:00.000-07:00

Hi blog.

It has been a while I have not been updating this blog due to my one whole month of hibernation for the LLM dissertation and settling down at work with a new position (as the Group General Counsel/Company Secretary, Vice President, Corporate Services).

Now, the dissertation has been passed, marked and finally received its commendable praise. Though I have not secured distinction, the fact that the subject matter is truly challenging. I managed to secure a very good mark. Thanks to the people who have had inspired my RFID research for the past one (1) year.

I will, however, post the contents of the dissertation bit by bit (chapter by chapter) soon. In the meantime, bumped into this. Although it's quite not a new development (in 2004). It would give some general idea, how would Malaysia position her RFID's market growth and potential.

Welcome back Noris! Sorry for the long gap.

RFID and healthcare setting

2007-08-26T13:29:00.000-07:00

This presentation has briefed some privacy implications of RFID in a healthcare setting. I wonder has the follow up being disseminated to the stakeholders.

RFID; a new world order?

2007-08-25T13:20:00.000-07:00

Wow. This article is bravely written and sometimes, providing some shocking yet sensible points to laymen. Not many would be able to comprehend the words between the lines. However, it is a good to appraise the positive aspects of the author's findings.

RFID in the pharmaceutical industry

2007-08-24T13:17:00.000-07:00

This is a good read up for those who are interested to discover the potential deployment, advantages and the foreseaable risk(s) of RFID in the pharmaceutical industry. Brief one and succintly written.

Surveillance freight of RFID

2007-08-23T13:13:00.000-07:00

Interestingly, even if this Article seems to have been published a year ago, it attracts my interest on the writer's udnerstanding. Sometimes, it's good to udnerstanding the technology and the contributions. But, sometimes, it's worthwhile to propose some balanced views on the same. An eye opener to the medical industry.

Call for papers; Internet of things conference - RFID perhaps?

2007-08-21T07:43:00.000-07:00

I have selflessly and deeply read this. It will be held in 2008. I think, I may want to submit a paper on RFID, positioning the Malaysia's perspective or South East Asia (SEA). But, it does not have public policy sector. So much so, I have to abandon the intention.

Must or Should RFID-legislation be Technology Neutral?

2007-08-21T07:29:00.000-07:00

As I am brainstorming and writing the dissertation, Christian Laux's views seem to open my mind. But then, as he said, there is no standard of pervasiveness of technology. A pretty much thin line to illustrate, distinguish and substantiate.

RFID evolution networks by MIT Sloan

2007-08-19T09:13:00.000-07:00

MIT Sloan School of Management initiated this co-joint research on RFID evolution (particularly on networks). Worthy to read and digest, albeit, sounds technical and business like.

RFID is virus'able'?

2007-08-18T07:53:00.000-07:00

This report said RFID is virus'able'. I wonder.

He/She said; RFID is a threat

2007-08-14T07:33:00.000-07:00

Read Doug Mohney's write up on this. The bottom line is; RFID poses threats like the internet does, albeit, the only difference is the technology. It partially makes sense.

Draft version of European RFID Policy Outlook

2007-08-10T03:31:00.000-07:00

This draft version of the European RFID Policy outlook is very, very, very interesting to read. The outlook was the preliminary consultation by the stakeholders (in various occasions and sessions) throughout Europe. It is hoped that some affirmative action would have taken place in months to come. As for Asia and Malaysia, we are unsure where we are heading to?...

RFID Data Management

2007-08-09T13:40:00.001-07:00

Mark Palmer has identified seven (7) principles or may I say, "best practices" of RFID Data Management. I wonder how it would be in practice. Also, another paper that may be considered as novel.

RFID in the automative industry

2007-08-09T03:04:00.000-07:00

Even though it sounds very technical, I think, this paper is worthy to be read. Another progress of RFID. Interestingly, the summary and outlook has given some foregone points on RFID vis-a-vis' the automative industry. Besides, the joint authors of this paper (all of them are from Switzerland), has succintly concluded that the issue of 'standard' will be the 'subject matter of discussion' in years to come when adopting and difussing RFID in the automative industry.

More on RFID

2007-08-06T13:17:00.000-07:00

It would be a superb technological application marrying both; WiFi and RFID. This talk, has briefly outlined the wonderness of it. However, privacy issues are left behind. Sometime in 2004, the Harvard Business School organized this talk, to explore the advantages and dangers of a "smart" barcodes. It's good when they regarded RFID as "the ecosystem of the internet". In another interesting view on the "rights chipped away"; do read this draft opinion by the American Civil Liberties Union of Northern California

Nanaco: RFID emoney system in Japan

2007-08-02T10:06:00.000-07:00

Shin'ichi Konomi has beautifully updated some of the technological progress of RFID in Japan here. Nanaco is the name of the technology - which has been widely deployed in selected Seven Eleven stores. I wonder, and still researching what is Japan's stance on the issue of privacy and data protection on this. Nevertheless, I believe the legislated data protection provisions of Japan, are less matured in terms of its application and implementation. Prove me wrong on this, if anyone wishes to debunk.

RFID conference and dissertation

2007-07-13T04:04:00.000-07:00

My absence is due to many factors. Amongst others, summer break, research for my dissertation, consultancy and work. However, I will never ignore this dearly blog, never.

I missed this conference: EPC Global EPC/RFID Conference 2007, from 11 July to 12 July due to prior obligations. General details on the latter could also be retrieved here. I predict that the RFID growth is getting its momentum. Though sounds very industry focused, however, I would be more than happy to see some move on highlighting privacy issues within RFID.

On a more positive note, my LLM outline dissertation (on RFID) has been approved by the supervisor. It's pretty much challenging, yet refreshing to divulge into substantial legal issues instead of policy and technology growth. I will let you know the development soon.

Active RFID 2006-2016

2007-06-06T16:04:00.000-07:00

This summary analysis on RFID 2006-2016 has cursorily outlined the application of RFID on its growth and potential interfacing capabilities with:-

* WiFi
* WiMax
* Bluetooth
* GPS
* Cellphone
* Infrared
* GSM
* GPRS
* Passive RFID
* ZigBee
* NFC
* DSRC

Potential drammatic growth has also been predicted. Arguably, the question of privacy legitimacy will be a huge gap from the above interfacing technologies. Answers to this are needed.