Biometrics in the workplace - need for staff consent [2007] IEDPC 12

Biometrics in the workplace - need for staff consent [2007] IEDPC 12

The company did not breach data protection rights as it did not require objecting staff to use the biometric system and provided an alternative pin code system; consent is necessary for biometric data processing.

Citation
[2007] IEDPC 12
Parties
Complainant: Staff employed at a logistics company; Respondent: Logistics company
Jurisdiction
Ireland
Procedural Posture
Data Protection Complaint / Investigation and Resolution
Outcome
complaint resolved, no breach found
Legal Topics
Biometric Data, Employee Consent, Privacy Impact Assessment
Data Protection Employment Law Biometric Data Employee Consent Privacy Impact Assessment

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 2 Authorities cited 1 Party arguments 2
Sign in to unlock

Parties

Staff employed at a logistics company

Complainant

Logistics company

Respondent

Procedural Posture

Data Protection Complaint / Investigation and Resolution

Legal Issues

  1. 1 Whether requiring employees to provide biometric data (fingerprint) for time and attendance infringes their data protection rights
  2. 2 Whether consent is necessary for biometric data processing in the workplace

Ratio Decidendi

The company did not breach data protection rights as it did not require objecting staff to use the biometric system and provided an alternative pin code system; consent is necessary for biometric data processing.

Court Disposition

complaint resolved, no breach found

Orders

  • Staff who objected permitted to use pin code system instead of biometric system.
  • Company must consult Data Protection Commission before requiring objecting staff to use biometric system in future.