Occurred: March 2020
Page published: March 2020 | Last updated: November 2021
Gdansk Primary School No. 2, in northern Poland, was fined EUR 4,600 by UODO, the country's data privacy regulator, for processing students' fingerprint data to verify their school meal payments.
The school had been using fingerprints to verify whether pupils had paid for their meals since 2015, with system being used on 680 children in the current academic year, while four children were processed using 'an alternative identification system'.
According to UODO, the system was unfair, and 'significantly disproportionate' to the task. It also said that other, more appropriate, forms of identification could have been used.
The President of UODO ordered the erasure of the students' fingerprint processed and the cessation of any further collection of personal data.
Unknown
Developer: Unknown
Country: Poland
Sector: Education
Purpose: Verify meal payments
Technology: Fingerprint biometrics
Issue: Privacy
UODO. Decyzja
European Data Protection Board. Fine for processing students’ fingerprints imposed on a school
AIAAIC Repository ID: AIAAIC0773