Abstract: An RFID device includes an antenna, a passive RFID communication module and a passive biometric authentication module. The passive RFID communication module is configured to transmit data to an RFID reader without the use of encryption where, the RFID device is configured such that initially power is supplied only to the passive biometric authentication module until the biometric authentication module 120 has verified the identity of a user, whereupon power is supplied to the passive RFID communication module 110 to permit communication, thus the RFID device is thus less vulnerable to sniffing attacks than conventional unencrypted RFID tags because the device will hold its data securely until an authorized biometric identifier is presented to it.