Remember the other P-word: Process
Are we in danger about talking too much about RFID privacy - and not enough about managing the data? Or business processes?
While I understand there is a need to put in appropriate safeguards to guarantee individuals' privacy when developing RFID applications, I'd suggest the scales are in danger of being tipped the wrong way.
It now seems to be the default stance to mention the P word (before anyone else does) as a means of lancing the boil - even when you don't actually have a boil. Let's be charitable and say it's about prevention rather than cure. However, some of the recent privacy legislation proposals in the US seem to be built on paranoia, rather than sensible, reasoned effective arguments designed for long-term consumer protection.