5. Risks and requirements for RFID technology

A non-deactivated tag must respond to any RFID reader request, without the consent or even the warning of its wearer. This property creates a number of risks for consumers, citizens, companies and government bodies. Personal identification applications (passports) must be based on the impossibility of falsifying an RFID chip. Access cards must not be able to be cloned, allowing intruders to gain access. Transport companies have an interest in using RFID to track their products, but to do so, they must prevent thieves from scanning a truck load. The payment application must be operated with extreme vigilance, to prevent relay attacks resulting in payments fraudulently attributed to a person carrying a contactless payment card (§ 5.2