User:Louis/6G wireless sensing and consumer privacy

A wireless network built around Integrated Sensing and Communication (ISAC) can detect a person who carries no phone, subscribes to no carrier, & gives no consent, because the technique reads the radio waves that bounce off a body rather than any signal a device sends. On June 17, 2026, the Conference of the Independent Federal and State Data Protection Authorities of Germany (the DSK) warned that ISAC enables "comprehensive and far-reaching surveillance of public as well as private space" and called for the sixth-generation (6G) standardization process to be shaped by "Data Protection by Design." The DSK named the people caught by this capture as bystanders who "do not necessarily have to carry mobile end devices," which is the reason it treats consent under Article 6(1)(a) of the General Data Protection Regulation (GDPR) as an unsuitable legal basis for area-wide sensing. The technology is not deployed against people at scale today. WiFi sensing was published as a standard in 2025, cellular sensing is a study item in the 6G work now underway, & 6G itself is expected around 2030.

Reusing the radio signal as radar

ISAC adapts the radio communication a network already runs so that the same electromagnetic waves "can simultaneously be used as radio sensing (radar functionality)," letting communication & sensing share one system & one frequency band. Qualcomm describes the same idea in plainer industry terms: "the same radio frequency (RF) signals used for wireless communication can also function as sensors," a combination the company calls Integrated Sensing and Communications. The network transmits, an object or a body reflects the signal back, & the receiver reads how the reflection changed. Qualcomm states the mechanism works by "analyzing variations in RF signals as they travel from a transmitter to a receiver," and can "detect presence, motion, gestures, and environmental changes" "without requiring active electronics on the sensing target." Ericsson frames the shift as turning "mobile networks from communication systems into spatially aware platforms" that can "detect, locate, and track objects (including passive ones with no electronics)."

Qualcomm's 6G research page states that wireless sensing can "detect presence, motion, gestures, and environmental changes" by analyzing variations in RF signals, without active electronics on the sensing target.

The consequence the DSK draws out is a matter of scale rather than novelty. Sensing today still requires dedicated sensor hardware, but the position paper states that in the future "potentially every device capable of radio communication will also be able to function as a radar sensor, which will result in area-wide deployment." In cellular ISAC, the DSK notes, not only base stations but also connected end devices such as smartphones can act as sensors.

Coarse presence versus fine-grained body sensing

The capabilities divide sharply into what is coarse and what is fine-grained, & the two carry different physics & different privacy weight. Coarse detection of presence, motion, and rough location is the easier case: it can operate at lower frequencies that pass through some obstacles. High-resolution sensing of the body is harder, because the detail that resolves a heartbeat or a silhouette rides on high frequencies that are more readily blocked by walls and range.

The DSK sets out the fine-grained end of the scale directly. It warns that recognition of individuals through the "extraction of biometric indicators such as gait, sex, facial features, or gestures, through to respiratory and heartbeat analyses" would capture "special categories of personal data pursuant to Art. 9 GDPR." That classification matters, because Article 9 data carries heightened protection under EU law. The through-wall risk is anchored to the same source: the DSK states that with the underlying radar's ability "to also penetrate obstacles such as walls," the right to the inviolability of the home under Article 13 of the German Basic Law could be affected. A tech-news account of the paper rendered the point as a warning that "some radio configurations can penetrate walls," creating potential access to activity inside private spaces.

Fine-grained human sensing as a routine network service belongs to the projected 6G era rather than to any deployed product. The DSK writes about the "foreseeable" depth of the interference, and industry roadmaps place the general-purpose sensing service in networks expected around 2030. What exists now is coarser and more purpose-built: WiFi sensing that carries its own standard number, & cellular sensing that the FirstNet Authority describes as letting a network collect data on the "range, velocity, position, size, and even the materials of objects in coverage areas."

Wireless sensing: deployed today versus projected for 6G

Capability	Status
WiFi motion and presence sensing	Standardized in 2025 as IEEE 802.11bf
Coarse cellular sensing of objects such as drones and vehicles	Under way in 5G; 3GPP Release 19 built the ISAC channel models as a "direct bridge to 6G topics"
Fine-grained body sensing of gait, breathing, and heartbeat as a routine network service	Projected for 6G, expected around 2030
Privacy safeguards written into the WiFi or 6G standard	None yet

WiFi sensing under IEEE 802.11bf

The everyday version of this idea already carries a standard number. In 2025 the IEEE published 802.11bf, formally titled an amendment for "Enhancements for Wireless LAN Sensing," which modifies WiFi's medium access control & physical layers to enable sensing in the license-exempt bands between 1 GHz and 7.125 GHz and above 45 GHz. The DSK identifies the same standard as the vehicle for establishing WiFi sensing. This is what makes the popular framing of consumer WiFi routers detecting motion accurate at its root: motion sensing over WiFi is real & is now standardized.

The IEEE Standards Association lists IEEE 802.11bf-2025 as an active standard titled "Enhancements for Wireless LAN Sensing."

IEEE 802.11bf defines how WiFi devices exchange sensing measurements; it is not the same object as a cellular tower reused as radar. The two are separate standards for separate radio systems that share one underlying method, reusing a communication signal as a sensor. The DSK treats them together for exactly that reason, noting that there are efforts to integrate WiFi sensing into the 6G standard as well.

Sensing without a device, subscription, or notice

The feature that separates ISAC from most consumer tracking is the absence of any handle on the person being tracked. Location history from a phone requires a phone. Loyalty-card profiling requires a card. Cookie tracking requires a browser session. ISAC reads reflected radio waves, so it captures whoever is within range regardless of whether they own a device, subscribe to the network, or know the system exists. The DSK names these people bystanders and states that they "do not necessarily have to carry mobile end devices," which it identifies as the specific reason transparency & obtaining consent become hard to deliver.

The DSK reaches for a physical-world comparison to convey the depth of the intrusion. It states that ISAC can be compared, for its potential depth of interference, to an "imperceptible video surveillance, which in addition to optical capture also has the potential to capture non-visible areas." Because a bystander cannot be asked and a whole area cannot practically opt in, the paper concludes that consent under Article 6(1)(a) GDPR "proves unsuitable in the domain of area-wide sensing."

Standardization timeline toward 2030

The claim that this arrives around 2030 traces to the standards calendar rather than to a marketing promise. The DSK states that 6G "is expected to be introduced around the year 2030." Cellular sensing is being built into that timeline in stages. In 3GPP, the industry body that writes mobile standards, Release 19 included a study on "Channel modeling for integrated sensing and communications (ISAC)," which 3GPP describes as a "direct bridge to 6G topics" laying the foundation for later specification work. The FirstNet Authority reported that Release 19 was declared frozen and that all working groups then moved to Release 20, "particularly the 6G study activities."

In 3GPP Release 19, the "Channel modeling for integrated sensing and communications (ISAC)" study is described as a "direct bridge to 6G topics."

The near-term work is study & architecture rather than deployment. FirstNet reported that Release 20 will generate technical reports as the outcome of its 6G studies, while Release 21 "will provide the first normative set of technical specifications for 6G." That places binding 6G specifications, including whatever sensing service they carry, several standardization cycles ahead of the current work.

Identifying who was sensed

Detecting a body & knowing whose body it is are two different problems, & the sources support each to a different degree. That operators intend to fuse sensing with identifying context is documented. Ericsson writes that "sensing can be combined with positioning, SIM (subscriber identity module) density and other types of information for the benefit of applications that require comprehensive situational awareness." SIM density and positioning tie a sensed presence back to subscribers who do carry devices on the network.

Routinely identifying an anonymous bystander by physiology alone, with no phone and no account to anchor to, is a further step that the cited sources treat as a capability of interest rather than a demonstrated at-scale practice. The DSK's own concern is that biometric extraction such as gait analysis is technically within reach and would constitute special-category data if performed, which is a statement about what the technology can produce, not a claim that carriers routinely identify strangers this way today. Fusion with subscriber data is a stated design direction. Identifying unaffiliated bystanders from body signatures alone remains a projected risk rather than a documented deployment.

Regulatory demands and proposed safeguards

The DSK's central demand is procedural: because the intrusion is foreseeable, it argues, the standard itself must be built with privacy in mind. The paper states that in view of ISAC's foreseeable depth of interference, it is necessary "to shape the current standardisation process for 6G in the sense of 'Data Protection by Design.'" Its warning is sharpened by a status finding: as of the paper, the DSK reports that none of the available privacy-preserving methods "are finding their way into the establishment of the WiFi or 6G standard." The safeguards, in other words, are being discussed but not yet written into the specifications that will govern the hardware.

Hardware-level controls have been prototyped in research. The Barkhausen Institute, a German research organization, has described an "on/off switch that smartphone manufacturers could integrate into their devices in the future," which would "allow the smartphone's sensor function to be completely deactivated while still enabling communication." The same institute reported building a prototype app that "informs users whether sensing is taking place at their current location." These are demonstrations of what a control could look like, not features present in any shipping standard or device. The gap between a documented capability moving through standards bodies and a documented safeguard that binds it is the reason a regulator felt the need to publish a position paper before 6G exists.

• 
  The German data protection authorities' June 17, 2026 position paper calls for the 6G standardization process to be shaped in the sense of „Data Protection by Design“ given the foreseeable depth of interference from ISAC.
• 
  The Barkhausen Institute has prototyped an "on/off switch that smartphone manufacturers could integrate" to fully deactivate the sensor function while still allowing communication.

See also

• General Data Protection Regulation
• Planned obsolescence
• Right to repair