School Fined for Using Facial Recognition Technology to Take Attendance

The Swedish data protection authority fined a school SEK 200,000 (approximately 19,000 EUR) for using facial recognition technology to take attendance.

Key takeaways:

• Biometric information is sensitive and special care must be taken when processing it.
• Attendance can be taken by less invasive means.
• Consent by the students is not a valid legal basis for this processing because the students are in a position of dependence on the school / school officials.
• The relatively low scope of the fine was affected by the fact that the duration of this processing was short and involved few students.

Details from the International Association of Privacy Professionals.