What are the possible benefits of microchip implants and RFID tags for employees?

What are the possible benefits of microchip implants and RFID tags for employees?

Our organization sends employees to some dangerous areas, and we're considering the use of RFID microchip implants to track their whereabouts and help ensure their safety. From an information security perspective, what are the benefits and potential threats associated with microchip implants or RFID tags on employees?

    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

This sounds like a misconception about the current state of RFID implant technology. The implants can certainly be used to identify a human and potentially to unlock a medical record, for example. But I'm not aware of RFID implants that have GPS tracking capabilities, so it's not clear that this approach would meet such requirements -- unless these "dangerous areas" have RFID readers every 30 feet or so.

But that's just the tip of the iceberg. The privacy ramifications of implanting anything into an employee are quite serious. The employee may voluntarily agree to this tactic, since he or she believes it may increase safety, but it introduces serious data security risks.

For example, if the RFID database is hacked, all of the information about that employee is subject to compromise. If medical records or perhaps location information (in the event that technology emerges) are linked to the tag, there is substantial risk to not only the enterprise, but also to the individuals.

I'm afraid this is a slippery slope and I'm not sure I can recommend an aggressive employee-tracking approach like this in good conscience.

More information:

This was first published in April 2008