A new bill introduced in the state of Washington has outlawed the use of RFID technologies for malicious purposes. Anyone caught scanning a person remotely "without his or her knowledge and consent, for the purpose of fraud, identity theft, or some other illegal purpose" will be charged with a felony. What the bill omits is any concept of an 'opt-in', so it's still fine for companies to affix and read tags without the subject's knowledge.
I'm at a complete loss to understand what the benefit of that legislation might be. Maybe David can shed some light on it?