Authority
ICO
Country
United Kingdom
Date Issued
February 22, 2024
Industry
Hospitality
Summary
Serco Leisure and seven associated community leisure trusts were issued enforcement notices by the ICO for unlawfully processing biometric data (facial recognition and fingerprint scanning) of over 2,000 employees across 38 leisure facilities to monitor attendance without proper legal basis. The company was ordered to cease this biometric data processing immediately.
Violation Types
Employee SurveillanceLegal BasisData Processing
Articles Violated
Related Enforcement Actions
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate UK GDPR compliance before regulators come knocking.
Talk to an Expert