Unknown Organisation
€725,000
Insufficient legal basis for data processing
決定日期
2020年4月30日
權限
Dutch Supervisory Authority for Data Protection (AP)
NL
部門
Employment
國家
NL
法律
GDPR狀態
FINAL說明
The organisation had required its staff to have their fingerprints scanned to record attendance. However, as the decision of the data protection authority stated, the organisation could not rely on exceptions to the processing of this special category of personal data and the company could also not provide any evidence that the employees had given their consent to this data processing.
法律引文
Art. 5Art. 9
問題與違規
Insufficient legal basis for data processing