[LINK] RFI: PayWave/PayPass Contactless Chip Cards

[Jan Whitaker]

At 01:26 PM 13/04/2012, Paul Bolger wrote:
>I think a good place for privacy lobbyists to start might be to ask for
>shops to not be allowed access to identification data from credit cards -
>when you pay with a card they should only see that the payment is approved,
>not get to record who made it - unless that information is voluntarily
>provided  by the customer.

This effort started in 2006-08 with the EPC Consumer Code of 
Practice, around issues of deactivation at point of checkout at 
customer request, sign posting that RFID is in use in the products, 
the embedding at point of distribution through to point of sale, all 
those things. This was about the tracking RFID on products themselves.

Here is the Aust. Retailers Assoc. Consumer Privacy Code of Practice 
that resulted. If it is still in force, I have no idea. It was 
voluntary and required retailers to actually sign up, which was 
always a weakness, like the Biometrics code. But this one was 
intentionally NOT registered with the OPC at the time at the advice 
of the OPC. (also unfortunately, they have made it a locked down PDF, 
which means you can't easily copy bits of it OR follow the links in 
it which are now dead anyway - www.ara.com.au ).
http://www.retail.org.au/ara2/fileadmin/sitesections/policy/codes/ARA_RFID_Consumer_Privacy_Code_of_Practice.pdf

The intro blurb about it is here:
http://www.retail.org.au/index.php/articles/policy/839
But of course there is no signatory information as promised at the 
time and in the existing policy.
Seriously, I tried and tried to get them to follow through on their 
promises, but they (Lonie) just fobbed us off. It never happened.

I would hold out little hope of the ARA doing any better now than 
they did then. Some of the actual retail reps, like from Woolworths, 
were quite good. But their peak body was hopeless. GS1 was better as 
the tech industry body.


Here is the NZ version, no date, and confusion as to if it's a draft 
(as the document says) or final (what the file title says).
http://www.gs1nz.org/documents/EPCConsumerCode17MayFinal_000.pdf

Here is a study on consumer attitudes toward EPC in retail. Not good.
http://econpapers.repec.org/article/aioaucsse/v_3a1_3ay_3a2010_3ai_3a12_3ap_3a27-39.htm

Jan



Melbourne, Victoria, Australia
jwhit at janwhitaker.com
blog: http://janwhitaker.com/jansblog/
business: http://www.janwhitaker.com

Our truest response to the irrationality of the world is to paint or 
sing or write, for only in such response do we find truth.
~Madeline L'Engle, writer

_ __________________ _