|
|
FOR IMMEDIATE RELEASE |
|
CONTACT: Bill Thomas |
State Rep. Frank Dermody State Rep. Deberah Kula |
|
|
|
|
|
|
Dermody, Kula introduce bills to address consumer protection and privacy
Two measures would make consumers aware of uses of new technology
HARRISBURG, April 12 -- State Reps. Frank Dermody, D-Oakmont, and Deberah Kula, D-Fayette/Westmoreland, have introduced legislation that would address consumer protection issues regarding the use of identification, on-the-go payment and other systems utilizing radio frequency identification.
Radio frequency identification, or RFID, involves a microchip that emits radio signals and a device called a reader that picks up the signal. RFID is used with the Pennsylvania Turnpike's EZ-Pass system and in credit cards. It's also used for tracking shipments of merchandise, and is being considered for use in passports by the federal government.
Dermody and Kula said they agree that the uses of RFID tags are important for businesses to simplify the inventory process and to allow for convenient and quick payments, but believe dangers to consumers lie in a company’s potential ability to violate personal civil liberties and the increased opportunity for identity theft.
House Bill 992, introduced by Dermody, would address this issue by criminalizing the unauthorized remote reading of personal data using RFID technology.
In the case of credit cards or passports using RFID, microchips with personal information are imbedded in the card itself. Reading the information stored on those chips requires only a physical proximity between the card and the reader, unlike current magnetic strips which require direct contact. Research has shown that cheap off-the-shelf hardware and software, and even homemade readers, are sufficient for obtaining personal and sensitive data contained within on these chips.
“Anyone carrying a credit card or passport containing an RFID chip runs the risk of broadcasting their identity,” Dermody said. “Advocates of the technology claim that the chip must be within a few centimeters of the reader, but with advanced technology I am concerned that this range will only increase, allowing hackers and thieves to steal your personal information from a greater distance.”
House Bill 993, introduced by Kula, would require companies to inform consumers if RFID tags are used in their products and to let them know if RFID readers are in use in an area.
“Consumers should be made aware if these devices are in their clothing or any other product they buy,” Kula said. “The potential for companies to develop a network of RFID databases that could constantly read and track someone’s movements and purchases is something right out of a science-fiction novel. This information could be passed along from company to company to keep track of the activities and behaviors of unsuspecting consumers.
“RFID tags can be as small as a grain of rice and can be implanted into objects without the knowledge of those who carry them,” Kula added. “This can lead to a very slippery slope and provide opportunities for unsuspecting consumers to be tracked and profiled. I am also concerned that these records could be linked to personal information contained in a company’s database.”
Both Dermody and Kula said their goal in introducing the legislation is to keep residents of Pennsylvania informed.
“Many times consumers are just not aware of the perils of issues like these.” Kula said. “Both of these measures will provide the public with the knowledge they need to maintain the privacy of their personal information and protect themselves from possible abuse or fraud.”
###wt/2007/mjh
l:\print\releases\rfid_bills_finalA.052