This Recommendation provides guidance to radio frequency identification (RFID) users and vendors (including RFID service providers and manufacturers) in protecting personally identifiable information for the privacy of individuals in the context of RFID technology.

These guidelines can be applied to cases wherein the RFID system may be used to invade individual privacy; e.g., personally identifiable information is recorded in an RFID tag and subsequently collected, or the object information collected by means of RFID is linked to personally identifiable information. However, it does not apply to such cases where the object information is collected and used without any risk of disclosure of personally identifiable information and invasion of privacy.

These guidelines seek to protect personally identifiable information for the privacy of individuals potentially affected by an RFID system and to promote a safe environment for RFID use. These guidelines are intended to provide the basic rules for the RFID service provider and guidance to the RFID service provider, manufacturers and user with regard to privacy in RFID and are subject to local and national laws.