FB pixel

Swedish data protection authority issues first fine for biometrics use under GDPR

Categories Biometrics News  |  Facial Recognition  |  Schools

Sweden’s data protection authority has issued a penalty of SEK 200,000 (US$20,650) to a school which used biometric facial recognition to record student attendance for violating Europe’s General Data Protection Regulation (GDPR).

The penalty is the first issued by Sweden’s regulator under GDPR, and while fines can reach SEK 10 million ($1 million), the amount of the fine imposed reflects the context of the offending party being a government authority, and the violation occurring as part of a limited trial. A high school in the town of Skellefteå used facial biometrics to conduct daily attendance checks in a trial that lasted three weeks, and included the data of 22 students, according to the regulator’s statement. School officials say consent was obtained from the students.

Data Inspectorate lawyer Ranja Bunni explained that the consent is not valid in this case because the students are in a position of dependence on the board.

“The High School Board in Skellefteå has violated several of the provisions of the Data Protection Regulation in a way that we now issue a penalty fee,” says Swedish Data Inspectorate Director General Lena Lindgren Schelin, as translated by Google.

“Facial recognition technology is in its infancy, but development is fast. We therefore see a great need to create clarity about what applies to all actors,” Schelin adds.

Adecco Group meanwhile has informed Belgium’s privacy regulator that the biometric data of roughly 2,000 employees of its Belgian business were exposed by the vulnerability recently identified in Suprema’s BioStar 2 system, Bloomberg News reports.

European companies are required to report breaches if there is a high risk to personal data, and the regulator is now investigating.

“This concerns the loss of control of extremely sensitive data of no fewer than 2,000 people,” Belgian Data Protection Authority President David Stevens said in a statement.

Suprema said in a statement after the data exposure was revealed that there are no indications any data was exfiltrated from the system.

Article Topics

 |   |   |   |   |   | 

Latest Biometrics News


UN says law enforcement should not use biometrics to surveil protestors

Law enforcement agencies should not use biometric technology to categorize, profile or remotely identify individuals during protests, the United Nations…


How to explain the EUDI Wallet? Industry and citizens discuss Europe’s digital ID

The European Digital Identity (EUDI) Wallet is well on its way towards becoming a reality. To explain the major impact…


Decentralize face authentication for control, stronger protection: Youverse

The implementation method of biometric face authentication has become increasingly important in recent years due to the limitations of traditional…


Researchers develop display screens with biometric sensor capabilities

Traditional display screens like those built into smartphones require extra sensors for touch control, ambient light, and fingerprint sensing. These…


Meta, porn industry and Kansas governor weigh in on age verification

As Europe mulls how to restrict access to certain content for minors, Meta offers its own solution. Meanwhile, U.S. states…


As national U.S. data privacy law becomes more likely, critics emerge to point out flaws

The push for comprehensive privacy legislation in the U.S. is gaining momentum, as the proposed American Privacy Rights Act 2024…


Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Most Read From This Week

Featured Company

Biometrics Insight, Opinion

Digital ID In-Depth

Biometrics White Papers

Biometrics Events