Last November, the AEPD published a new guide determining the criteria to be applied in the evaluation of the use of biometric processing for time and attendance or access control.
We share with you an information note that we hope will help you to understand the considerations determined by the AEPD and that lead us to the following conclusions:
- If you are evaluating the implementation of a time and attendance or or access control, we advise against the use of biometric mechanisms.
- In the event that the system for access control or time and attendance is already in place:
- Opt for other alternatives that do not involve the processing of biometric data.
- In specific cases where the organization considers the use of biometric Systems necessary, it will be necessary to carry out and pass a DPIA.
We explain this in more detail in the information note> NI-095.