Matt Houldsworth

They caution against treating an unusually strong result as a normal forecast.

On Sainsbury’s Tu clothing rollout, Houldsworth focuses on finding gaps and replenishing stock in a grocery estate not designed for apparel. On JD Sports, they say the key change was source tagging rising from about 40% to 73%, despite the retailer being unable to require suppliers to tag.

Read original · Original 2 · Original 3

Their point is not that an old device has been breached, but that unsupported software can worsen the consequences of an incident and should not be accepted as normal.

A Sainsbury’s self-checkout reboot screen showed old operating-system and database software.

• Houldsworth noted security controls visible on the screen but said they did not know whether the till could be exploited.
• They later asked why a new RFID system would be rejected on similar foundations while an installed system was allowed to age that way.

Houldsworth extends the till example to a survey of East Yorkshire business websites, where the concern was not simply age but updates that had quietly stopped.

Read original · Original 2

They distinguish between a regulation creating a tracking need and requiring RFID, and note that a tag must not undermine recyclability.

In their post on the EU Packaging and Packaging Waste Regulation, Houldsworth describes variant-level documentation and long record-keeping periods.

• They note that the regulation is technology-neutral and name QR as an example, while arguing that reusable packaging rotation is a natural RFID use case.
• Impinj’s Megan Brewster is quoted separately on lifecycle visibility; the post also raises concerns about tag recyclability.

Read original

They leave the answer open rather than turn an emerging idea into a settled claim.

After RAIN in Action, Houldsworth questioned whether consumers would use UHF-enabled phones for everyday goods, while seeing a stronger case for products with a story, such as whisky. They argued that retail self-checkout’s bigger prize may be freeing floor space and said they could not yet tell whether brands would treat digital product passports as compliance or engagement.

Houldsworth also tracks deployments and future checks, such as whether OREA would add wallet room keys at three more properties by the end of 2026. They present these as things to watch, not completed outcomes.

Read original

Start here to see Matt's method: a specific, observable artifact followed by a practical infrastructure argument.

Matt describes watching a Sainsbury's self-checkout restart and seeing a diagnostic console left open on the customer screen.

• It showed Windows 10 Enterprise 2016 LTSB weeks from end of support, SQL Server 2016 Service Pack 2 with no update since 2018, a processor Intel launched in 2014, and a build date of September 2024.
• They also note counter-evidence: application allow-listing, network access control, proxied traffic and no unexpected restarts in 28 days.
• Their argument is not that this till was breached.
• Supported software is the floor, not best practice, and long-life devices determine how bad a bad day gets once an attacker is inside.

For brands planning a campaign

For a retail technology vendor targeting grocery operators, this is the strongest credibility hook in these posts. A collaboration could build a campaign around legacy-estate risk, patching discipline and lifecycle procurement, with Matt explaining the operational consequences rather than taking the headline role.

A strong starting point for readers seeking a concrete retail case rather than a vendor claim.

Matt treats Sainsbury's rollout of item-level RFID to Tu clothing as a location story, not a technology story.

• Zara, Uniqlo and H&M have used item-level RFID for years in standalone fashion estates.
• Tu is a clothing business inside grocery stores never designed around apparel stock control.
• They explain the benefit as gap detection: seeing what's missing from the floor and replenishing it.
• Their comparison could change a buyer's choice: barcode-only cycle counting usually leaves stock accuracy around 60% to 70%, while item-level RFID moves it into the 90s—the line between knowing something is sold out and guessing it's somewhere in the stockroom.

For brands planning a campaign

A campaign for grocery or apparel operators could use the gap-detection argument and the accuracy-threshold example. It also supports a broader non-food-inside-food angle: once the clothing department is tagged, what stops a retailer at that department door?

Matt reports that JD Sports completed phase one of its item-level RFID rollout: 1,000 directly run stores live in fourteen months, and 2,700 of 4,800 across the group, using Checkpoint Systems' ItemOptix and Zebra handhelds.

• The store count is not the key figure.
• Source tagging across JD's brand partners rose from roughly 40% of product to 73%, and JD could not order suppliers to adopt it.
• Matt calls that persuasion, not technology.
• The remaining 27% arriving untagged sets a ceiling on agentic commerce claims: an agent cannot trust stock it cannot see.

For brands planning a campaign

A useful angle for source-tagging, supplier adoption and multi-brand retail technology campaigns. Lead on the 40%-to-73% shift and the untagged remainder, not a generic RFID efficiency message.

Readers get the compliance mechanics and the practical question of whether a tag belongs on the pack.

Matt explains that the Packaging and Packaging Waste Regulation became applicable on 12 August and turns packaging compliance into a data problem.

• Every distinct packaging type needs a signed Declaration of Conformity and a technical file, not one blanket statement.
• They list material composition by layer, test reports for substance limits including new PFAS restrictions, five-year records for single-use and ten-year records for reusable packaging, and handover to a market surveillance authority within ten days.
• The regulation does not mandate RFID, but the reuse rules from 2028 require a data carrier that supports tracking and calculation of trips and rotations.
• Matt quotes Impinj's Megan Brewster on lifecycle visibility and Philippe Henin on whether RFID tags will help or hurt recyclability grading.

For brands planning a campaign

For packaging, RFID or brand-owner campaigns aimed at EU operators, this post offers specific compliance language and a real implementation tension. Focus on audit readiness, declaration evidence, reusable packaging tracking and tag recyclability rather than a simple RFID pitch.

Matt reports that Goodwill Industries of Southern New Jersey and Philadelphia says item-level RFID cut annual shrink from over $1.49 million to about $154,000, with roughly $1.2 million invested against an estimated $4.38 million net gain.

• These are the organisation's own figures, and the 90% reduction is exceptional rather than typical; thrift retail also starts with unusually poor supplier data.
• Treat it as a ceiling, not a forecast.
• Matt also notes Dyson putting an RFID tag in every brush head of a new toothbrush and Lefties opening a UK store with RFID self-checkout.

For brands planning a campaign

A campaign for nonprofit retail, thrift or inventory shrink could use the before-and-after figures while acknowledging that this is an exceptional case. A secondary angle: RFID has moved beyond the supply chain into consumer products and self-checkout.

Matt reports that Borussia Dortmund now accepts NFC tickets from Apple Wallet at SIGNAL IDUNA PARK, while OREA Hotels and Resorts is issuing room keys into Apple Wallet and Google Wallet on Vingcard locks.

• The story is not speed.
• A QR code is an image that can be screenshotted and sold twice, while an NFC pass sits in the secure element and cannot be copied the same way.
• Dortmund still runs QR for Android and older iPhones, so this is a second lane, not a switch.

For brands planning a campaign

For access control, ticketing, stadium or hotel technology campaigns, the usable angle is fraud and resale prevention alongside a staged migration. Don't claim cards or QR codes are finished; Matt's scepticism strengthens the case.

Matt follows up on the Sainsbury's self-checkout photo, which reached over 145,000 people.

• They expected people to call it a one-off.
• Instead, EPOS and retail technology workers said it was normal.
• They argue that genuinely shocking problems get fixed, but when everyone knows about them and nobody is surprised, they persist.
• They connect this to a survey of 225 Hull business websites: nearly half ran WordPress, and almost half of the servers that revealed their PHP version were running a version no longer receiving security fixes.
• The pattern is not age, but systems that have quietly stopped updating while still looking modern.

For brands planning a campaign

A cybersecurity or managed-services campaign could make the shrug its central insight: the problem is not unknown, it is unowned. Offer a contained audit of what key systems run on and who maintains them, rather than a fear-led breach message.

A useful starting point for readers seeking judgment and open questions, not just product news.

Matt reflects on the RAIN in Action Summit and picks three issues.

• On UHF in consumer mobiles, they understand the technology but struggle to see demand, noting that QR and NFC have been slow and small for consumer engagement, and that it only works for higher-end items or items with a story.
• On RAIN in retail, they argue the bigger prize is shop-floor real estate: self-checkouts free up space for more lines and stock.
• On digital product passports, they cannot tell whether brands see compliance as a burden or an engagement opportunity, and say those require completely different implementations.

For brands planning a campaign

For a campaign that needs a thinking-partner voice rather than a product advocate, this post supports event-led content, retail footprint economics and DPP strategy. It gives a vendor a way to discuss demand and implementation choices without claiming every RFID use case is ready.

Matt poses a procurement thought experiment: they are quoting an RFID installation for a retailer similar in size to the supermarket in the earlier post.

• They would not propose a 2014 processor, an operating system sliding out of extended life, and a database that stopped receiving security fixes four years ago.
• They would deserve to lose the work.
• Why, they ask, does the same foundation become acceptable once a system has been in place for a few years?
• Retail RFID is accelerating, with item-level tagging, stock accuracy and self-checkout deployments, and every one of those systems will still be running in 2032.
• The question is whether anyone will own its foundations in year five.

For brands planning a campaign

A campaign for RFID systems integrators or retail technology vendors can lead on lifecycle ownership, patching and total cost of ownership. The angle is credible because Matt grounds the claim in their own quoting practice and a specific year-five question.

Posts cover Sainsbury's Tu clothing RFID across 400 stores, where the stated gain is better gap detection and stock accuracy rising from barcode-only levels of 60% to 70% into the 90s; JD Sports reaching 1,000 stores and lifting source tagging from roughly 40% of product to 73% without being able to order suppliers to tag; and Goodwill Industries' shrink reduction from over $1.49 million to about $154,000, which the organisation presents as an exceptional ceiling, not a typical forecast.

Reads deployments through operating constraints: grocery floor space, multi-brand persuasion and thrift retail without supplier data.

Supplier details are often not public. For Sainsbury's Tu, ask who supplied the tags and readers and what commercial case supported the rollout.

For brands planning a campaign

A retail technology vendor can use this as a credible frame for grocery non-food and apparel operators: lead with an operational metric the buyer owns, such as stock accuracy, source-tagging coverage or shrink, and treat vendor claims as a starting point, not the story.

Examples: Source 1 · Source 2 · Source 3

A Sainsbury's self-checkout reboot screen showed Windows 10 Enterprise 2016 LTSB, SQL Server 2016 Service Pack 2 and a 2014 processor.

• The post notes the unit was built in September 2024 and that M&S lost 46 days of online orders, with GBP 136 million in direct costs and GBP 324 million in lost sales, after a breach.
• A follow-up argues that the industry's shrug—that this is just how retail runs—is the vulnerability.

Starts with a visible artefact, dates the software support cliff and asks who owns the foundations in year five. It distinguishes the supported-software floor from claims of exploitability.

The post identifies one till in one store and notes application allow-listing and network controls on the same screen.

For brands planning a campaign

For a vendor selling EPOS, RFID or managed estate services into grocery, this topic offers an opening: propose a contained audit or lifecycle conversation instead of a fear-led pitch, and let the operator recognise the estate they already run.

Examples: Source 1 · Source 2 · Source 3

The most exposed sites were not the oldest, but those where automatic updating had quietly stopped.

Publishes method notes: read publicly served home pages on 8 September 2026, identified the crawler, obeyed robots.txt, kept evidence and did not scan for vulnerabilities or test exploits.

The survey covers publicly served pages only. Ask for authorized vulnerability testing before treating its findings as evidence that a site is compromised or a weakness can be exploited.

For brands planning a campaign

A vendor focused on retail operators can borrow the format: small-scale public-data research that turns a vague worry into a specific question, such as when a system last installed an update on its own. It works beyond grocery and can support regional or sector-specific outreach.

Examples: Source 1 · Source 2

The regulation is technology-neutral and names QR as an example, but they argue that reusable packaging tracking and rotation counting point to UHF RFID's founding use case. The post includes Megan Brewster of Impinj on lifecycle visibility and Philippe Henin's warning that tags must not worsen recyclability grades.

Reads the legal text for what companies must know and keep knowing, then compares what QR and RFID can each do at a dock door or in a high-consistency pulper.

The regulation is technology-neutral and does not mandate RFID; the post names QR as an example.

For brands planning a campaign

A vendor can lead with compliance evidence and reusable-asset tracking rather than generic RFID benefits. Packaging operators need answers on material declarations and tag or pulper behaviour, so a collaboration could pair regulatory explainers with a practical audit offer.

Examples: Source 1

Posts cover UHF in consumer mobiles, where the technology is understood but demand is questioned; RAIN in retail as a growth area because self-checkout frees shop-floor space; and digital product passports as either a compliance burden or an engagement opportunity, with no clear answer yet. The event coverage also includes JD Sports, Inditex, Tageos chip forecasts, bpost roll-container savings and a RAIN Alliance leadership change.

Attends the event as a reporter, files daily and weekly dispatches, then revisits unresolved questions and invites debate.

Some observations remain uncertain, including whether brands see digital product passports as a burden or an opportunity and whether consumers will scan everyday grocery items.

For brands planning a campaign

A vendor can use event-linked commentary to reach an RFID-literate audience.

• Unresolved questions about digital product passports and mobile UHF make natural panel or interview hooks.
• Sponsoring a neutral reporter's event coverage requires clear disclosure and does not give the sponsor control of the conclusions.

Examples: Source 1 · Source 2 · Source 3

The core argument is not speed but security: a QR code can be screenshotted and resold, while an NFC pass sits in the secure element. The post is sceptical that this is a full switch: Dortmund still runs QR for Android and older iPhones, so NFC is a second lane, not a replacement.

Separates the marketing claim from the operational limit, then names a number to check later, such as OREA's three properties by the end of 2026.

The card is not dead; it just stopped being the only way through the door.

For brands planning a campaign

For access-control or hospitality technology vendors, the credible angle is anti-fraud and incremental deployment, not a sudden card or QR replacement. Brands can frame a straightforward second-lane pilot.

Examples: Source 1

Examples include Goodwill's shrink figures, Dyson's toothbrush tag, Lefties and Inditex self-checkout expansion, bpost's 85% reduction in new roll-container purchases, hospital linen savings, and company changes such as Identiv's IoT sale. The posts also link a Thursday newsletter.

Aggregates named companies and numbers, flags what to check next, and keeps a recurring cadence across sectors.

Roundups are a curated selection, not a complete market census; some items are future checks rather than completed outcomes.

For brands planning a campaign

A vendor can use the digest as a low-friction sponsorship or contributed-data route, supplying verifiable deployment numbers for an editor to contextualise. It suits brands seeking sustained visibility with an RFID-literate readership rather than a single product launch.

Examples: Source 1 · Source 2 · Source 3

The posts describe designing and installing retail RFID systems and software.

View example

View example

Their posts include event reporting from RAIN in Action Madrid and weekly RFID industry roundups.

View example

Ask whether they have a current formal relationship with Veribli.

View example

Houldsworth makes a similar move, reading the EU packaging regulation for the records and tracking obligations it creates rather than the technology it names.

Schwartz writes as a packaging and sustainability adviser to brand teams, framing compliance as cross-functional business transformation and hosting sessions for them. Houldsworth writes as a reporter and editor: they compare what a regulation requires with what a technology can do, and distinguish a tracking need from a mandated RFID deployment.

Read original · Original 2

Houldsworth also focuses on whether an operational system keeps performing after installation, and both write for brands buying logistics and technology.

Lewis writes from inside their own advisory practice, describing how their firm works with clients and inviting conversations. Houldsworth's comparable posts are independent reporting and analysis, with named figures, company examples and explicit caveats about what the evidence does and does not show.

Read original · Original 2

Houldsworth covers the same ground, including digital product passports and whether brands treat them as a compliance burden or an engagement opportunity.

Kallen writes from the vendor side, promoting panels and webinars on how organisations can turn compliance into competitive advantage. Houldsworth writes as a reporter and editor, testing claims and naming the number they will check later rather than presenting a deployment or mandate as a settled win.

Read original · Original 2

The work covers turning EPR reporting into an enterprise-wide system, connecting packaging data to finance, procurement, legal and engineering, and the design trade-offs packaging engineers face: whether lightweighting survives compression and barrier requirements, and how recyclability decisions shift as collection and sorting capability changes.

• The Oregon piece gives concrete programme figures: producer funding supporting more than 36,000 recycling carts, 11 collection trucks, 34 RecycleOn centres and $30 million in sorting upgrades.
• Pick this route when the buyer is a CPG brand owner, packaging engineer or sustainability lead and the vendor sells packaging data governance, EPR readiness or compliance advisory rather than tags and readers.

The trade-off is distance from the shop floor.

• There is no coverage of EPOS estates, item-level RFID, reader or inlay hardware, or store operations, so a vendor selling deployment work into grocery stores loses the operator-level detail Matt Houldsworth supplies.
• The material also frames technology as secondary to data quality, explicitly saying technology cannot fix bad packaging data.
• That suits a data-governance pitch, but not a hardware or installation pitch.
• Only two posts were available, and neither shows measured campaign outcomes or audience composition.
• Ask for campaign results and audience data before choosing this route.

Examples: Source 1 · Source 2

The posts position around a conference panel on monetising global traceability mandates and a joint webinar with Beontag on RFID and real-time visibility for manufacturers, including asset utilisation, loss reduction and the connected factory.

• The panel topics are specific about buyer problems: which technologies hold up for cross-border compliance and audit readiness, what data-sharing architecture makes DPP interoperable across multi-tier supply chains, and what breaks when bridging US systems with EU DPP requirements.
• Choose this route when the vendor sells traceability platforms, serialization or DPP-readiness into manufacturing and enterprise supply chains.

Both posts are event and webinar announcements rather than close analysis.

• They show positioning, named collaborators and the questions the panel will cover, but not the answers: no findings, measurements or buyer-decision numbers equivalent to the stock-accuracy or shrink figures in the Houldsworth posts.
• There is also no grocery retail, EPOS or packaging-compliance content, so a campaign aimed at grocery operators or packaging firms would reach them through a manufacturing and traceability audience instead.
• The registration and event links lead away from the posts.

Examples: Source 1 · Source 2

The work argues that third-party logistics providers have moved from transactional suppliers to custodians of the physical customer experience: the difference between a provider that reports a stockout on the day it happens and one that flags a shortage weeks ahead.

• It also argues that outsourcing logistics does not mean relinquishing the customer relationship.
• The second post addresses a staffing reality: teams built to deliver day to day rarely have the bandwidth to improve, which is the gap an advisory relationship fills.
• Choose this when the vendor sells logistics services, fulfilment technology or supply-chain advisory to brands choosing and managing a partner.

These are the oldest posts in the comparison, one from February 2024 and one from June 2025.

• They read as service-firm positioning rather than reported results: no figures, named deployments or technical specifics on systems.
• There is nothing on RFID, EPOS, packaging regulation or store estates, so a campaign aimed at grocery and packaging operators would reach an adjacent audience of brand and logistics teams, not the same one.
• Ask for recent, results-bearing content before treating the positions as current.

Examples: Source 1 · Source 2