Information Security: Radio Frequency Identification Technology in the Federal Government

Radio frequency identification RFID is an automated data-capture technology that can be used to electronically identify, track, and store information contained on a tag. The tag can be attached to or embedded in the object to be identified, such as a product, case, or pallet. RFID provides identification and tracking capabilities by using wireless communication to transmit data. The technology can provide a more efficient method for federal agencies, manufacturers, retailers, and suppliers to collect, manage, disseminate, store, and analyze information on inventory, business processes, and security controls, among other functions, by providing real-time access to information. The use of this technology also has the potential to assist agencies in tracking their assets, thereby maintaining more accurate inventory records. In response to your request, our report discusses considerations surrounding RFID technology implementation in the federal government. Specifically, our objectives were to 1 provide an overview of the technology, with an emphasis on passive technology 2 identify the major initiatives at federal agencies that use or propose to use the technology 3 discuss the current standards, including those for interoperability, that exist 4 discuss potential legal issues that the 24 Chief Financial Officer CFO Act of 19901 agencies have identified in their planning for technology implementation and 5 discuss security and privacy considerations surrounding the technology and the tools and practices available to mitigate them. We surveyed 23 of the 24 CFO Act agencies to gather information on whether the agencies are incorporating the technology into their systems, what they are using the technology for, and any security, privacy, or legal issues. Appendix I contains a description of our objectives, scope, and methodology.