The deployment of RFID brings significant economic promise. But is RFID sufficiently secure and privacy-friendly ? This paper clarifies the capabilities and limitations of RFID, identifies the associated security and privacy challenges, and suggests measures that can be implemented to address them.