FB pixel

Swedish data protection authority issues first fine for biometrics use under GDPR

Categories Biometrics News  |  Facial Recognition  |  Schools
 

Sweden’s data protection authority has issued a penalty of SEK 200,000 (US$20,650) to a school which used biometric facial recognition to record student attendance for violating Europe’s General Data Protection Regulation (GDPR).

The penalty is the first issued by Sweden’s regulator under GDPR, and while fines can reach SEK 10 million ($1 million), the amount of the fine imposed reflects the context of the offending party being a government authority, and the violation occurring as part of a limited trial. A high school in the town of Skellefteå used facial biometrics to conduct daily attendance checks in a trial that lasted three weeks, and included the data of 22 students, according to the regulator’s statement. School officials say consent was obtained from the students.

Data Inspectorate lawyer Ranja Bunni explained that the consent is not valid in this case because the students are in a position of dependence on the board.

“The High School Board in Skellefteå has violated several of the provisions of the Data Protection Regulation in a way that we now issue a penalty fee,” says Swedish Data Inspectorate Director General Lena Lindgren Schelin, as translated by Google.

“Facial recognition technology is in its infancy, but development is fast. We therefore see a great need to create clarity about what applies to all actors,” Schelin adds.

Adecco Group meanwhile has informed Belgium’s privacy regulator that the biometric data of roughly 2,000 employees of its Belgian business were exposed by the vulnerability recently identified in Suprema’s BioStar 2 system, Bloomberg News reports.

European companies are required to report breaches if there is a high risk to personal data, and the regulator is now investigating.

“This concerns the loss of control of extremely sensitive data of no fewer than 2,000 people,” Belgian Data Protection Authority President David Stevens said in a statement.

Suprema said in a statement after the data exposure was revealed that there are no indications any data was exfiltrated from the system.

Article Topics

 |   |   |   |   |   | 

Latest Biometrics News

 

‘Digital identity is critical national infrastructure’: ID4Africa 2025

World Bank and European Commission Technical Consultant Adam Coooper examined the global landscape of digital identity adoption, noting that he…

 

Record ID4Africa exhibitors show growth in continent’s digital identity market

Among the new all-time highs in scale set at ID4Africa’s 2025 AGM in Addis Ababa, Ethiopia is the number of…

 

Suriname launches OSD-produced biometric passport

Suriname has officially launched its new biometric passport for all Surinamese citizens. The Austrian State Printing House (OSD) was selected…

 

Ethiopia unveils FaydaPass digital wallet to boost financial inclusion

Ethiopia has launched what it calls the FaydaPass wallet, the latest move in its digital public infrastructure (DPI) program aimed…

 

World raises $135M to support expansion

After launching in the U.S. market with great fanfare, World has announced new funding aimed at supporting its ambitious expansion…

 

Australia’s Age Assurance Technology Trial is halfway done

The Age Assurance Technology Trial is about halfway through its vendor interviews – according to an email update, “the critical…

Comments

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Biometric Market Analysis

Most Viewed This Week

Featured Company

Biometrics Insight, Opinion

Digital ID In-Depth

Biometrics White Papers

Biometrics Events