a new law in the state of Washington which prohibits "malicious" RFID spying. When the new law (said to be a first of its kind in the US) goes into effect in July, anyone caught scanning a person remotely "without his or her knowledge and consent, for the purpose of fraud, identity theft, or some other illegal purpose" will be charged with a Class C felony. Great, so that covers the obvious criminal abuse of the technology. However, the original bill also included an opt-in measure that would require your approval before retailers and others could track your activity via that handy, store-issued discount card you carry, the implant you received during that stint in the joint, new credit card, or personal ID card you're required to carry. Unfortunately, the opt-in requirement was stricken from the bill (and therefore not in the final law) after succumbing to heavy corporate lobbying.
http://www.prweb.com/releases/2008/03/prweb803114.htm