RFID for London Olympics 2012?

Suddenly, Olympics came into mind. Beijing 2008 was a huge success, in many ways. It also includes the deployed RFID infrastructure during the Olympics. Main reasons were largely on security and surveillance. I personally think London 2012 may emulate the Beijing's success if painstaking caution is put in place. Despite the mixed views on its potential deployment and privacy concerns, I anticipate, there shall be some reactions by the Information Commissioner's Office to respond.

My predictions for London Olympics 2012 surrounding RFID, data protection and privacy are:-

i) Tapping the RFID investment: The ruling Government shall invest considerably large on security and surveillance. RFID and other biometrics technology will take place gradually;

ii) Road show on RFID: The Information Commissioner's Office shall play active roles for public notification and awareness. If possible, guidance on related RFID devices that will be deployed for London Olympics should be well-informed.

iii) Post Olympics 2012 report on RFID deployment: By having this report, it will instill stakeholders' confidence that this technology has advantages for the British public and the world.

Accepted Abstracts in Quarter 1 of 2010

Happy New Year and welcome to the new decade of 2010!


For the past one month, I have been busy with writing, reading and researching. The results of which, are tremendously engaging. New facts. New discoveries. And new arguments. For the first (1st) quarter of 2010, I will be presenting two (2) papers:-


Conference 1: Malaysia Glasgow Doctoral Colloquium 


Paper 1:-

 Malaysia’s Data Protection Bill; Some Useful Headway From The United Kingdom (UK) And European Union (EU)

Noriswadi Ismail

MPhil/PhD Candidate

The Institute of Computer and Communications Law

The Centre for Commercial Law Studies

School of Law, Queen Mary, University of London

E-mails: n.ismail@qmul.ac.uk, noriswadi@googlemail.com

Profile: http://www.law.qmul.ac.uk/people/research/ismail.html

Abstract

In the nearest future, the Data Protection Act will take place in Malaysia’s legal regime. It is anticipated that there shall be potential compliance costs to be accommodated by the stakeholders. This paper anticipates substantive concerns that Malaysia should learn from the UK and EU. Selected case studies shall be appraised.

Summary

On 8 October 2009, there are series of online and hardcopy of highlights that surrounded data protection concerns, issues and the need for enforcements in Malaysia. Some authors, experts and critiques have rightfully opined that it is about time for Malaysia to be vigorous on this subject matter. Whilst the feedbacks are very much a triangulation, this paper shall anticipate further what and how Malaysia should endlessly learn from the UK and EU on these similar concerns. From the country’s perspective, Malaysia is not far behind from her other Association of South East Asian Nation (ASEAN)’s counterparts in giving the birth of a data protection legislation. Whilst some ASEAN’s member states legal regime are sector-specific based, self-regulatory via other existing legislations and prevalent soft-law approaches, Malaysia has to anticipate series of fundamental issues once the Data Protection Bill is in force.

Appropriately, data protection and privacy involves its actors and stakeholders. Their participation in daily activities, commerce, trade and communications are engaging – be it virtual, physical and in our real lives. Extensive virtual navigation via Web 2.0 sphere has triggered concerns to our lives today and leads to such chilling effects to all countries. Malaysia is not an exception to this effect. Potential strategies must be pre-empted for Malaysia once the Bill will be a gazetted legislation. This paper shall cursorily analyse selected cases and progressive experiences from the UK and EU within different periods of era (from 1990s to 2000 and to date), being the decade of data protection’s maturity in the UK and EU. These cases and experiences are indispensable for Malaysia’s roadmap. The author has personally opted for not paraphrasing the draft Bill or any of the UK and EU Directives. Instead, pragmatic analysis, rationales and reasons will be enlightened to support such assertions and views to support as to why Malaysia should learn from these jurisdictions and regimes.

Arguably, there are three main terms of reference that are substantiated towards this paper. First, as Malaysia is very new to this peace of legislation, a thorough overview should be inferred to disseminating potential data protection issues to the stakeholders. This is to gauge a clear apprehension on its inter-relationship with various actors and stakeholders. In this paper, the actors and stakeholders are referred to any individuals and the roles may interchangeably apply. Second, as Malaysia’s government has its own preferred approaches to focusing and retaining it’s governmental data via other existing legislation, the author shall appraise the broad analysis of the UK Freedom of Information Act 2000, that, in a way, relates and cross refers to certain intersection of data protection concerns. Third, as Malaysia has targeted 6% of annual Gross Domestic Product (GDP) by 2020, it is undeniably paramount that the growth contribution factors are derived from domestic and international trades and investments. Due to the latter, the exchanges of data, data retention, security and trans border data flows will be aggressive or maybe uncontrollable. – if due care and diligent of data protection is not adopted seriously Thus, it needs special painstaking attention by the actors and stakeholders in dealing with different data protection approaches, principles and enforcements with and amongst Malaysia’s trading partner. All of these references shall be discussed via the UK and EU’s actors and stakeholders’ experiences.

Conclusion

This paper shall be concluded via proposing a data protection strategy roadmap to Malaysian actors and stakeholders. It is hoped that the future Data Protection Commissioner or the equivalent Privacy Commissioner will be able to consider the rationales of such an adoption for Malaysia in a localised context and setting. In the second part of the conclusion, the author shall suggest proposed regional and international collaboration, networks and diffusion that relates to data protection at the regional and international foray.

Keywords: Data Protection. Privacy. Malaysia. United Kingdom. European Union.

References

Books

Chris Reed (ed), Reed and Angel: Computer Law (5th rev OUP, Oxford 2003) 417-453.

Ian J. Lloyd, Information Technology Law (OUP, Oxford 2008) 3-180.

Ian Walden, Computer Crimes and Digital Investigations (OUP, Oxford 2007).

Rosemary Jay and Angus Hamilton, Data Protection Law and Practice, (Sweet & Maxwell, 1999).

Ruth Boardman and Richard Morgan, Data Protection Strategy, (Sweet & Maxwell, 1st Edition, 2003).

Websites

Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data accessed 9 November 2009.

Review of EU Data Protection Directive: Summary < http://www.ico.gov.uk/upload/documents/library/data_protection/detailed_specialist_guides/review_of_eu_dp_directive_summary.pdf> accessed 9 November 2009.

Conference 2: BILETA 2010

Paper:-

Mobile Radio Frequency Identification Technology (Mobile-RFID);

where is privacy?

___________________________________________________________________

By Noriswadi Ismail

MPhil/PhD Candidate

The Institute of Computer and Communications Law

The Centre for Commercial Law Studies

School of Law, Queen Mary, University of London

E-mails: noriswadi@googlemail.com, n.ismail@qmul.ac.uk

Profile: http://www.law.qmul.ac.uk/people/research/ismail.html

Blog: http://the-rfid-nexus.blogspot.com

Abstract

i2010 is aimed towards the European Information Society for growth and employment. There shall also be priorities for new strategy for European information society (2010-2015). These ambitious aims are part and parcel of the digitalizing Europe vision for the next 5 years. One of the significant growths in this sphere is Mobile Commerce (M-Commerce) and Radio Frequency Identification Technology (RFID). Mobile Commerce or technically termed as M-Commerce has been deployed widely by mobile operators in their present business models. In the United Kingdom (UK) and Europe, stakeholders and consumers have had a mixed bag of responses on its effectiveness, quality of service, functionalities and liabilities. As M-Commerce evolves, Radio Frequency Identification Technology (RFID) has been put into trials within the M-Commerce environment. The main motivation is purely on convenience to the stakeholders and consumers – as the top priority list. Nevertheless, there are two main concerns surrounding this trials and deployment. First, it may spark the issue of data surveillance in a greater context. And second, it may question the issue of privacy in a broader context. This paper shall narrate potential challenges that shall be faced by mobile operators based on these concerns. Careful substantiated reasons are also outlined. At a generic level, this paper shall also touch documented trials on Mobile-RFID in selected East Asian Countries as cross border and comparative analysis. At a specific level, it shall appraise the Mobile-RFID trials and developments and proposing potential considerations within the ambit of data protection and privacy concerns in Mobile-RFID that are prevalent to the existing consultative member states of the European Union.

RFID & Standardisation

In my research, one of the boundaries that I am looking into is on standardisation of RFID in its frequencies and tags across these jurisdictions: South Korea, Japan, Europe and Asia Pacific. Special cross reference will be made to the United States' contours. Prior to zooming into these countries/continents, Australia has had made a commendable progress last January 2009 on its RFID standardisation. The question that I am pondering (at this juncture), is how and why, to what extent, these standards co-exist with data protection and privacy? It would be particularly engaging if I could look and deal with case-by-case scenarios of RFID applications that are being deployed in various industries as against the background of standards. Maybe IBM or MOTOROLA RFID-based solutions shall provide some general technical guidance.

The awaiting birth?

After 10 years, Malaysians are awaiting the birth of the Malaysia Personal Data Protection Bill, being an Act, soon. Now, it's in the second and third reading at Parliament. I predict it will be gazetted by end of this year, or perhaps, by the first quarter of 2010. Back in 2002, Professor Dr. Ida Madieha wrote a very interesting article on the Bill, by paraphrasing some of the relevant sections vis-a'-vis issues on e-commerce and privacy.

I fervently hope that the analysis and comments have been taken into consideration by the legislator and consultant. Once the Bill is ready to kick-off, there will be potential compliance costs. It is anticipated that organisations and companies are required to get ready with the potential transformation: internal compliance road shows, compliance costs, strategies and awareness for and to all Malaysian stakeholders on data protection. Particularly, the ICT and banking sectors. It's just the beginning for Malaysians.

Cursorily, a brief overview of other Asia Pacific countries on data protection and privacy is readable here (published by DLA Piper, as at March 2009).

Wondering how the Bill responds to RFID? (in Malaysia).

Tag Broker Model to protect privacy?

This paper is quite technical to comprehend. Nevertheless, it sounds interesting as to how such a model has been proposed to protect privacy within an RFID enabled setting. Briefly, this article discusses on such a tag broker model approach for an enabled Mobile RFID which is compatible with Near Field Communication (NFC). I am wondering whether is there any literature that touches on data protection and privacy issues in relation to NFC? Reason being: NFC, is an industry standard that results to the technical compatibility and operability, deriving from RFID. Or, maybe, it's a subset of RFID as well? Pondering.

RFID in youtube

This video is by the Metro group. Easy to be understood by a layman like me. This second video, is also interesting, with additional perspectives by privacy advocates in the US. I personally like this third video - practical and eye opening. This, on another hand, explains about microchip implantation. Medical technology has made this verichip useful as practised by this Harvard Doctor. Essentially, this looks like RFID has started to rule the world. Interestingly, this guy has guided viewer how to remove RFID chip from an Oyster card. That is cool. In the UK, this video looks informative. Themed as Big Brother Is Watching (it has 3 sequels). In a broader context, this video canvasses Britain's surveillance state, in general. Worth to watch.

RFID deployment was put on halt; the Philippine's case study

RFID, has been said as illegal and expensive. This is what the views that could be adduced from the people. Wondering whether the republic has considered data protection and privacy terms prior to implementation or anticipating the same in the future.

Mobile-RFID; a new hype?

This is an interesting move by RFID solutions architect; Mobile-RFID is now a hype.

RFID is a virus carrier too!

All technology has faults and flaws. RFID is no exception.

"Crawling" the Container

Oracle has shared it's case study on container's movement here. It's technologically impressive.

RFID = Access 2.0 (I like the notion)

It's interesting to equate RFID = Access 2.0 or perhaps (intriguingly) Ambient Intelligence (AmL = Access 2.0). The brief news explained, in a way.

Library RFID Kiosks

This is an interesting development on Library RFID Kiosks. , as BBC reported. In East Asia, HeiTech Padu Berhad (Malaysia) has had the prototype to be commercialised in Malaysia. Now, being packaged as it's suite of products.

22nd Schrodinger Lecture

Imperial College will host the 22nd Schrodinger Lecture. I have made a confirmed reservation to attend. My aim is to study the success and how it sparks other motivations in other areas of technology. The theme is on:

The world's nuclear future: built on material success.

Wallace Lecture at LSE

Being quite an alien to the European Union's history, I attempt to attend the coming Wallace Lecture at LSE next Monday. I look forward to understand the generic ideas so that it could assist my reading and research. Though not focussing that much on law, at least, there might be certain pointers that could be incorporated within my footnote essays (later).

ICC - The Annual Competition Law and Policy Lecture 2009

I will be attending this Competition Talk. I think, some of my reading and literature review (in a way), will touch generally on Competition. In the meantime, I will summarise the previous attended talk in Imperial Business School and this one by this Friday.

Thanks Kadir for letting me know on the Competition Talk.

A Talk by ex-IBM's CTO at Imperial Business School (13/10/09, 17:00-18:00)

I have registered and reserved myself for an interesting talk tomorrow (13 October 2009) at Imperial Business School, to be delivered by:Dr. Irving Wladawsky-Berger, former Chief Technology Officer at IBM,. The topic captivates me to understand how innovation surpasses beyond the time reach and how stakeholders need to be very much responsive. I attempt to anticipate some useful pointers that may surround on issue of technology and regulations (generally). Although it's not a pure legal seminar, I think, it's worthy to look into different perspectives.

The abstract (as totally copied - for notification and educational purpose):

Over the past century, science and technology have been successfully applied to innovation in the industrial sector of the economy, leading to very high productivity and quality, and to the development of highly sophisticated and complex objects like airplanes, skyscrapers and microprocessors.

The services sector comprises between 70 - 80% of the GDP and jobs in advanced economies around the world. Services are ubiquitous across many sectors of the economy, e.g., finance, healthcare, retail, creative industries, business support, education and transportation and logistics. Advances in information technologies have enabled us to bring significant innovation to services and services industries, such as ATMs, reservation systems and supply chain management.

But, we have a long way to go in improving the productivity and quality of services, especially given their large and growing role in advanced, as well as emerging economies. As pointed out in a recent report by the Royal Society (Hidden wealth: the contribution of science to service sector innovation - July 2009), services are not easily visible in the economy, and their nature is not well understood. This makes it difficult for companies, policy makers and universities to support the kind of research and innovation programs in the services sector that have worked so well in the industrial sector.

The seminar will build on the recent Royal Society report. We will explore the differences between "classic" industrial sector innovation and innovation in the services economy. In particular, we will focus on the multi-disciplinary and collaborative nature of services innovation, and the new organizations and leadership structures it requires. We will illustrate the discussion with concrete examples from a variety of industries, including health care, learning, public sector and banking.

IBM Fellowship Awards 2009/2010

This is an interesting call for IBM Fellowship Awards 2009/2010 applications. Unsure whether interdisciplinary law research in RFID, data protection and privacy like what I am researching is eligible. I e-mailed them today and awaiting their revert. Hopefully, it's an okay.

Summer Internship in Berkman Center, Harvard

This is the copied version pasted here:-

Summer Internship Program 2010

For 10 weeks each summer The Berkman Center for Internet & Society at Harvard University swings opens the doors of its big yellow house to welcome a new group of smart, talented, energetic full-time interns who are passionate about the Internet, democracy, intellectual property, media, politics, and a slew of other things. The interns team up with great projects like the Citizen Media Law Project, Cooperation, Digital Natives, Internet & Democracy, the OpenNet Initiative, StopBadware.org, and more, where they have an opportunity for deep and substantive involvement in our efforts.

Positions are available with most Berkman projects, and we're looking for people with a variety of interests and skill sets. While certain internships are only available to law students, many projects are looking for students enrolled in other types of programs, including undergraduate, graduate and PhD. programs.

Summer internship positions are full time (35 hours/week), and the summer program runs for 10 weeks from June 1 to August 15. While the positions are paid, please be forewarned that stipends may not be sufficient to cover living expenses in the Boston area. No other benefits are provided, therefore interns must make their own housing, insurance, and transportation arrangements.

The word "awesome" has been thrown around to describe our internships, but don't take our word for it. Zack McCune, a summer intern from 2008, had this to say: "it has been an enchanting summer working at the berkman center for internet & society. everyday, i get to hang out with some of the most brilliant people on the planet. we talk, we write (emails), we blog, we laugh, we play rock band. and when things need to get done, we stay late hyped on free coffee and leftover food. it is a distinct honor to be considered a peer among such excellent people. and i am not just talking about the fellows, staff, and faculty, though they are all outstanding. no, i mean my peers as in my fellow interns, who are almost definitely the ripening next generation of changemakers."

We know what you're thinking. Yes please. I want that. That sounds magical. Did I mention I'm really good at "Rock Band"?
Here's what you should do... To apply for a summer internship position, please send by the Friday, March 5, 2010:

a letter of interest, describing your skills and interests, and indicating the area of research and the Berkman projects in which you have interest;
a current version of your resume;
the contact information for two references (professional or academic)
to Berkman's community coordinator, Becca Tabasky, at rtabasky@cyber.law.harvard.edu

Feel free to be in touch if you have any questions. We look forward to hearing from you!!
Summer Intern Eligibility:* Summer interns are students enrolled in a undergraduate, graduate or PhD program of study.* Summer interns do not have to be affiliated with Harvard University.* We welcome summer interns from universities across the world, however we can not pay international students who have not yet received an undergraduate degree.

If you have questions about either academic year or summer internships, please contact Becca .
at the email address above.

I think, I have to start planning on this.