SIST-TS CEN/TS 16685:2014

SLOVENSKI STANDARD
SIST-TS CEN/TS 16685:2014
01-september-2014
Informacijska tehnologija - Priglasitev uporabe radiofrekvenčne prepoznave (RFID)
- Informacijski znak mora biti nameščen povsod, kjer se uporabljajo bralniki RFID
Information technology - Notification of RFID - The information sign to be displayed in
areas where RFID interrogators are deployed
Informationstechnik - Notifizierung von RFID - Informationszeichen, das überall dort
angebracht werden muss, wo RFID-Lesegeräte im Einsatz sind
Technologies de l'information - Notification d'identification par radiofréquence (RFID):
Signe informationnel et informations complémentaires exigibles lorsque des lecteurs
RFID sont déployés
Ta slovenski standard je istoveten z: CEN/TS 16685:2014
ICS:
35.040.50 Tehnike za samodejno Automatic identification and
razpoznavanje in zajem data capture techniques
podatkov
SIST-TS CEN/TS 16685:2014 en,fr,de
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------
SIST-TS CEN/TS 16685:2014

---------------------- Page: 2 ----------------------
SIST-TS CEN/TS 16685:2014

TECHNICAL SPECIFICATION
CEN/TS 16685

SPÉCIFICATION TECHNIQUE

TECHNISCHE SPEZIFIKATION
June 2014
ICS 35.240.60
English Version
Information technology - Notification of RFID - The information
sign to be displayed in areas where RFID interrogators are
deployed
Technologies de l'information - Notification d'identification Informationstechnik - Notifizierung von RFID -
par radiofréquence (RFID): Signe informationnel et Informationszeichen, das überall dort angebracht werden
informations complémentaires exigibles lorsque des muss, wo RFID-Lesegeräte im Einsatz sind
lecteurs RFID sont déployés
This Technical Specification (CEN/TS) was approved by CEN on 8 March 2014 for provisional application.

The period of validity of this CEN/TS is limited initially to three years. After two years the members of CEN will be requested to submit their
comments, particularly on the question whether the CEN/TS can be converted into a European Standard.

CEN members are required to announce the existence of this CEN/TS in the same way as for an EN and to make the CEN/TS available
promptly at national level in an appropriate form. It is permissible to keep conflicting national standards in force (in parallel to the CEN/TS)
until the final decision about the possible conversion of the CEN/TS into an EN is reached.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania,
Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United
Kingdom.





EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2014 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN/TS 16685:2014 E
worldwide for CEN national Members.

---------------------- Page: 3 ----------------------
SIST-TS CEN/TS 16685:2014
CEN/TS 16685:2014 (E)
Contents Page
Foreword .3
0 Introduction .4
0.1 General .4
0.2 Objectives .4
0.3 Applicability .4
1 Scope .5
2 Normative References .5
3 Terms and definitions .5
4 The Common European RFID Notification Signage System .7
4.1 Introduction .7
4.2 Definition of the Common European Notification Signage System .8
4.3 The Common RFID emblem .8
4.4 Purpose of the application(s) .8
4.5 Contact Point .9
4.5.1 General .9
4.5.2 Name of the operator of the application .9
5 Placement of RFID Signs notifying the presence of RFID readers .9
6 Placement of signs notifying the presence of RFID transponders .9
7 Scope and Purpose of Application statement on items carrying a transponder . 10
8 Guidelines on Additional information: the Information Policy . 10
8.1 General . 10
8.2 Information policy requirements with respect to RFID privacy . 10
8.3 Guidelines on additional information for the information policy with respect to RFID
privacy . 10
8.3.1 Application information . 10
8.3.2 RFID privacy information and notification within promotional material . 10
8.3.3 RFID privacy information and notification within Sales material and pre-contract
information . 11
8.3.4 RFID privacy relevant contractual clauses . 12
8.3.5 Post sale user RFID privacy information including end of use of an item . 12
8.3.6 RFID privacy information and notification to be obtained from manufacturers and other
RFID technology suppliers. . 13
9 Legibility/Accessibility . 13
Bibliography . 14

2

---------------------- Page: 4 ----------------------
SIST-TS CEN/TS 16685:2014
CEN/TS 16685:2014 (E)
Foreword
This document (CEN/TS 16685:2014) has been prepared by Technical Committee CEN/TC 225 “AIDC
technologies”, the secretariat of which is held by NEN.
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent
rights. CEN [and/or CENELEC] shall not be held responsible for identifying any or all such patent rights.
This Technical Specification is one of a series of related deliverables, which comprise mandate 436 Phase 2.
The other deliverables are:
— EN 16570, Information technology — Notification of RFID — The information sign and additional
information to be provided by operators of RFID application systems
— EN 16571, Information technology — RFID privacy impact assessment process
— EN 16656, Information technology - Radio frequency identification for item management - RFID Emblem
(ISO/IEC 29160:2012, modified)
— CEN/TR 16684, Information technology — Notification of RFID — Additional information to be provided
by operators
— CEN/TR 16669, Information technology — Device interface to support ISO/IEC 18000-3 Mode 1
— CEN/TR 16670, Information technology — RFID threat and vulnerability analysis
— CEN/TR 16671, Information technology — Authorisation of mobile phones when used as RFID
interrogators
— CEN/TR 16672, Information technology — Privacy capability features of current RFID technologies
— CEN/TR 16673, Information technology — RFID privacy impact assessment analysis for specific sectors
— CEN/TR 16674, Information technology — Analysis of privacy impact assessment methodologies relevant
to RFID
According to the CEN-CENELEC Internal Regulations, the national standards organizations of the following
countries are bound to announce this Technical Specification: Austria, Belgium, Bulgaria, Croatia, Cyprus,
Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany,
Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland,
Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United Kingdom.
3

---------------------- Page: 5 ----------------------
SIST-TS CEN/TS 16685:2014
CEN/TS 16685:2014 (E)
0 Introduction
0.1 General
In response to the growing deployment of RFID systems in Europe, the European Commission published in
2007 the Communication COM(2007) 96 ‘RFID in Europe: steps towards a policy framework’. This
Communication proposed steps which needed to be taken to reduce barriers to adoption of RFID whilst
respecting the basic legal framework safeguarding fundamental values such as health, environment, data
protection, privacy and security.
In December 2008, the European Commission addressed Mandate M/436 to CEN, CENELEC and ETSI in the
field of ICT as applied to RFID systems.
The Mandate addresses the data protection, privacy and information policy aspects of RFID, and is being
executed in two phases.
Phase 1, completed in May 2011, identified the work needed to produce a complete framework of future RFID
standards. The Phase 1 results are contained in the ETSI Technical Report TR 187 020, which was published
in May 2011.
Phase 2 is concerned with the execution of the standardisation work programme identified in the first phase.
This European Technical Specification is one of eleven deliverables for M/436 Phase 2. It builds on the
research undertaken in the related Technical Report Notification of RFID: Additional information to be
provided by operators.
0.2 Objectives
The objective of this Technical Specification is to provide enterprises, both large and small, with a common
and accessible framework for the design and display of RFID notification signs.
In addition to the information placed on the sign, the framework includes the off-sign application information
resource – the “information policy” - needed to answer enquiries received form individuals accessing the
contact point noted on the sign itself. This minimises the volume of information written on the sign.
0.3 Applicability
This Technical Specification applies to all enterprises operating RFID applications in the European Union.
4

---------------------- Page: 6 ----------------------
SIST-TS CEN/TS 16685:2014
CEN/TS 16685:2014 (E)
1 Scope
This Technical Specification defines:
— the details of data and graphics that shall be included on the signage;
— the presentational requirements for the signage, taking account of the need:
— to provide a practical solution given constraints on print technique and print area;
— for a consistent common and recognizable signage;
— means to support accessibility;
— the structure and content of an information policy to meet the informational needs of individuals with
respect to RFID privacy.
2 Normative References
The following documents, in whole or in part, are normatively referenced in this document and are
indispensable for its application. For dated references, only the edition cited applies. For undated references,
the latest edition of the referenced document (including any amendments) applies.
EN 16656:2014, Information technology – Radio frequency identification for item management – RFID
Emblem (ISO/IEC 29160:2012, modified)
EN 16571:2014, Information technology – RFID privacy impact assessment process
3 Terms and definitions
For the purposes of this document, the following terms and definitions apply.
3.1
common European RFID notification emblem
easily recognised graphic device that indicates the presence of radio frequency identification systems
Note 1 to entry: This emblem is defined in EN 16656:2014 as the filled general purpose emblem (see Figure B.3)
Note 2 to entry: Users of this Technical Report should use EN 16656:2014 rather than the ISO/IEC version. The
European version contains specific advice regarding use of the RFID Emblem in an EU environment, especially in relation
to sizing of the emblem.
3.2
controller
natural or legal person, public authority of agency, or any other body which alone or jointly with others
determines the purpose and means of the processing of personal data
Note 1 to entry: The purpose and means of the processing are determined by national or Community laws or
regulations the controller or the specific criteria for his nomination may be designated by national or Community Law.
3.3
data controller
natural or legal person, public authority, agency or any other body which alone or jointly with others
determines the purposes and means of the processing of personal data
Note 1 to entry: The purposes and means of processing are determined by national or Community laws or regulations,
the controller or the specific criteria for his nomination may be designated by national or Community law.
5

---------------------- Page: 7 ----------------------
SIST-TS CEN/TS 16685:2014
CEN/TS 16685:2014 (E)
3.4
emblem
Common European RFID Notification Emblem to signify that it is non-commercial and does not make any
statement of interoperability
3.5
logo
graphic devices that indicate proprietary systems and interoperability
Note 1 to entry: A contactless bank or transport card might carry the notification emblem, plus a logo indicating system
interoperability, and a logo indicating the card issuer.
3.6
RFID application operator
operator
natural or legal person, public authority, agency, or any other body, which, alone or jointly with others,
determines the purposes and means of operating an application, including controllers of personal data using
an RFID application
3.7
personal data
any information relating to an identified or identifiable natural person ('data subject')
Note 1 to entry: An identifiable person is one who can be identified, directly or indirectly, in particular by reference to
an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or
social identity.
3.8
personal data processing
any operation or any set of operations upon personal data, such as:
— collecting, recording, organisation, storage;
— adaptation or alteration, retrieval;
— consultation, use;
— disclosure by transmission, dissemination or otherwise making available;
— alignment or combination;
— blocking, erasure or destruction
3.9
RFID
radio frequency identification
means the use of electro-magnetic radiating waves or reactive field coupling in the radio frequency portion of
the spectrum to communicate to or from a tag through a variety of modulation and encoding schemes to
uniquely read the identity of a radio frequency tag or other data stored on it
3.10
RFID application
application
application that processes data through the use of tags and readers, and which is supported by a back-end
system and a networked communication infrastructure
6

---------------------- Page: 8 ----------------------
SIST-TS CEN/TS 16685:2014
CEN/TS 16685:2014 (E)
3.11
RFID reader
RFID writer
reader
fixed or mobile data capture and identification device using a radio frequency electromagnetic wave or
reactive field coupling to stimulate and effect a modulated data response from a tag or group of tags
3.12
RFID tag
RF tag
tag
transponder
electronic label
code plate
RFID device having the ability to produce a radio signal or a RFID device that re-couples, back- scatters or
reflects (depending on the type of device) and modulates a carrier signal received from a reader or writer
Note 1 to entry: Although ‘transponder’ is technically the most accurate term, the most common and preferred term is
‘tag’ or ‘RF tag’.
Note 2 to entry: For the purposes of Mandate M436, an RF tag applies to any transponder that is capable of
communicating using the radio frequency portion of the spectrum for communication purposes. As such it applies to any
form factor including cards or phones that contain a transponder.
3.13
special personal data
all personal data that provide information on a person’s characteristics apart from identity data (name, birth
date and place, address, governmental identification card number, etc.):
— rel
...