METI (Ministry of Economy, Technology and Industry of Japan) is now
preparing a draft guideline to protect privacy data in RFID.
There is an article in Nikkei News, but you need ot know Japanese to read it.
METI has an intention of propose this guideline to ISO as an international
standard.
This guideline involves some recommendations.
1) Privacy data shall not be recorded a memory in RFID
2) Selection (to deactivate RFID or nor after purchase) by customer shall
be guarantied.