Fine of 220,000 euros for using biometric data in time control: what does this case teach us?

Recentment, una empresa d'Alacant ha estat sancionada amb una multa de 220.000 euros per part de l'Agència Espanyola de Protecció de Dades (AEPD). La raó? L'ús d'un sistema de control horari basat en reconeixement facial que va vulnerar la normativa de protecció de dades. Aquest cas no només posa en evidència els riscos legals d'utilitzar tecnologies invasives, sinó que també obre el debat sobre com les empreses poden gestionar el control horari de manera efectiva i respectuosa amb la privacitat.

2/10/2025

What exactly happened?

According to the disciplinary file, one of the employees objected to using the facial recognition system to sign in, claiming that it was an excessive and invasive measure for his privacy. Instead of offering a less intrusive alternative, the company continued to use this system, which led to the complaint and subsequent sanction. This action not only violates the General Data Protection Regulation (GDPR), but also violates the rights of workers.

The use of biometric data, such as facial recognition or fingerprints, is considered high-risk data processing. This means that it can only be applied if it is strictly necessary, proportionate and with the explicit consent of the employees. In addition, the regulations require that alternatives be provided for those who do not want to provide this data.

Lessons for companies

This case serves as a stark warning to all organizations using or considering implementing biometric time and attendance systems. The consequences of non-compliance can be devastating: high financial penalties, loss of reputation, and erosion of employee trust.

It is essential that companies review their time and attendance systems and ensure they are GDPR compliant. This includes avoiding the use of biometrics wherever possible and opting for less intrusive solutions, such as those offered by Timenet.

Why trust Timenet?

At Timenet, we are aware of the importance of respecting employee privacy while ensuring regulatory compliance. Our workday registration system is designed to adapt to the current needs of companies, offering a solution that completely excludes the use of biometric data.

With Timenet, companies can register workdays accurately and efficiently, without putting employee privacy at risk or exposing themselves to sanctions. Our platform is easy to use, flexible and fully compliant with the current legal framework.

Final reflection

This case from Alicante is a reminder that companies must go beyond simply implementing technology; they must do so with responsibility and knowledge. Committing to systems that respect workers' privacy is not only a legal obligation, but also an opportunity to foster a work environment of trust and transparency.

Control horari

If your company is looking for a safe, effective and respectful solution for time control, contact timenet. Avoid unnecessary risks and opt for a system that adapts to regulations and your real needs.

+ INFO