4. Tracking and surveillance of individuals


Radio-frequency identification (RFID) is an automatic identification method using radio waves. This most commonly involves storing a serial number or other form of identification on a microchip in a tag or device that is attached to an object, person or animal. This sends out radio waves to a reader, which produces digital information that can be passed on to computers. This technology is commonly used to identify the whereabouts and movements of the object, person or animal carrying the microchip.


There are also other forms of automatic identification technology, including bar codes and smart cards, as well as voice recognition and biometric technologies (see below). Companies such as Masternaut have produced devices where assets can be tracked using both GPS and RFID technology. 


Many organisations use these technologies to track items produced, stored, distributed or sold. But they can also be used to track individuals wearing tags, or carrying keys or ID cards holding the technology. Bar codes or RFID tags are commonly used by retailers to track items stored and sold, while RFID technology is used for “electronic tagging” of offenders in the criminal justice system. RFID technology has also been used by schools in student ID cards, in health services to monitor equipment and patients, and in passports, travel smartcards and bank credit and contactless payment cards.


Employers also use this technology to control entry into and movements around workplace premises by employees, while RFID, GPS, mobile data, wireless and other technologies are used to keep tabs on both goods and employees in the retail and distribution sectors. 


Using electronic devices to monitor productivity is particularly prevalent in the retail sector where supermarket tills can log the rate of scanning, non-active time, customer time spent waiting and so on. Point-of-sale information can be used to compare the performance of one checkout worker against another, resulting in the poorly performing worker not having his or her contract renewed. 


The Information Commissioner’s Office (ICO) has produced guidance on RFID, outlining the data protection principles which users of the technology need to follow. In order to comply with the fair processing requirements of the Data Protection Act 1998 (DPA), those collecting personal data with RFID will have to give notice of the presence of RFID tags on products and explain the implications. Personal information should only be collected for specified legitimate purposes, and should not go beyond what is necessary, and should be kept securely.