Gdansk Primary School No. 2, in northern Poland, was fined EUR 4,600 by UODO, the country's data privacy regulator, for processing students' fingerprint data to verify their school meal payments. 

The school had been using fingerprints to verify whether pupils had paid for their meals since 2015, with system being used on 680 children in the current academic year, while four children were processed using 'an alternative identification system'.

According to UODO, the system was unfair, and 'significantly disproportionate' to the task. It also said that other, more appropriate, forms of identification could have been used.  

The President of UODO ordered the erasure of the students' fingerprint processed and the cessation of any further collection of personal data.

Legal, regulatory 👩🏼‍⚖️

• UODO. Decyzja

• European Data Protection Board. Fine for processing students’ fingerprints imposed on a school

News, commentary, analysis 🗞️

• https://www.dataguidance.com/news/poland-uodo-fines-school-pln-20000-processing-childrens-biometric-data

• https://venturebeat.com/2020/03/06/polish-school-hit-with-gdpr-fine-for-using-fingerprints-to-verify-students-lunch-payments/

• https://identityweek.net/polish-school-fined-for-processing-students-fingerprints/

• https://www.itgovernance.eu/blog/en/polish-school-fined-for-processing-childrens-biometric-data