{"id":8036,"date":"2024-02-23T11:52:32","date_gmt":"2024-02-23T10:52:32","guid":{"rendered":"https:\/\/www.gpsj.co.uk\/?p=8036"},"modified":"2024-02-28T10:21:58","modified_gmt":"2024-02-28T09:21:58","slug":"ico-orders-serco-leisure-to-stop-using-facial-recognition-technology-to-monitor-attendance-of-leisure-centre-employees","status":"publish","type":"post","link":"https:\/\/www.gpsj.co.uk\/?p=8036","title":{"rendered":"ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance of leisure centre employees"},"content":{"rendered":"\n

The Information Commissioner\u2019s Office (ICO) has ordered public service provider Serco Leisure, Serco Jersey and seven associated community leisure trusts<\/a> to stop using facial recognition technology (FRT) and fingerprint scanning to monitor employee attendance.  <\/p>\n\n\n\n

The ICO\u2019s investigation found that Serco Leisure and the trusts have been unlawfully processing the biometric data of more than 2,000 employees at 38 leisure facilities for the purpose of attendance checks and subsequent payment for their time.  <\/p>\n\n\n\n

They failed to show why it is necessary or proportionate to use FRT and fingerprint scanning for this purpose, when there are less intrusive means available such as ID cards or fobs. <\/p>\n\n\n\n

Employees have not been proactively offered an alternative to having their faces and fingers scanned to clock in and out of their place of work, and it has been presented as a requirement in order to get paid. Due to the imbalance of power between Serco Leisure and its employees, it is unlikely that they would feel able to say no to the collection and use of their biometric data for attendance checks. <\/p>\n\n\n\n

The ICO has now issued enforcement notices<\/a> instructing Serco Leisure and the trusts to stop all processing of biometric data for monitoring employees\u2019 attendance at work, as well as to destroy all biometric data that they are not legally obliged to retain. This must be done within three months of the enforcement notices being issued. <\/p>\n\n\n\n

John Edwards, UK Information Commissioner, said:<\/strong> “Biometric data is wholly unique to a person so the risks of harm in the event of inaccuracies or a security breach are much greater – you can’t reset someone’s face or fingerprint like you can reset a password.  <\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

\u201cSerco Leisure did not fully consider the risks before introducing biometric technology to monitor staff attendance, prioritising business interests over its employees\u2019 privacy. There is no clear way for staff to opt out of the system, increasing the power imbalance in the workplace and putting people in a position where they feel like they have to hand over their biometric data to work there.   <\/p>\n\n\n\n

\u201cThis is neither fair nor proportionate under data protection law, and, as the UK regulator, we will closely scrutinise organisations and act decisively if we believe biometric data is being used unlawfully.\u201d <\/p>\n\n\n\n

This enforcement action comes as the ICO today publishes new guidance for all organisations that are considering using people\u2019s biometric data<\/a>. The guidance outlines how organisations can comply with data protection law when using biometric data to identify people. <\/p>\n\n\n\n

Mr Edwards added: <\/strong>\u201cThis action serves to put industry on notice that biometric technologies cannot be deployed lightly. We will intervene and demand accountability, and evidence that they are proportional to the problem organisations are seeking to solve.  <\/p>\n\n\n\n

\u201cOur latest guidance is clear that organisations must mitigate any potential risks that come with using biometric data, such as errors identifying people accurately and bias if a system detects some physical characteristics better than others.\u201d\u00a0\u00a0\u00a0\u00a0<\/p>\n\n\n\n

A Serco Leisure spokesperson told GPSJ in a statement:<\/p>\n\n\n\n

\u201cWe value the hard work of all our team members delivering services for our customers. <\/p>\n\n\n\n

\u201cThis technology was introduced at the leisure centres we manage nearly five years ago to make clocking-in and out easier and simpler for colleagues. We engaged with our team members in advance of its roll-out and its introduction was well-received by colleagues. The introduction also followed external legal advice which said use of the technology was permitted.<\/p>\n\n\n\n

\u201cDespite being aware of Serco Leisure’s use of this technology for some years, the ICO have only this week issued an enforcement notice and requested that we take action. We now understand this coincides with the publication of new guidance for organisations on processing of biometric data which we anticipate will provide greater clarity in this area”<\/p>\n\n\n\n

\u201cWe take this matter seriously and confirm we will fully comply with the enforcement notice\u201d<\/p>\n\n\n\n

Last year, the ICO also published guidance on monitoring employees <\/a>and called on organisations to consider both their legal obligations and their employee\u2019s rights to privacy before they implement any monitoring. <\/p>\n","protected":false},"excerpt":{"rendered":"\n

The Information Commissioner\u2019s Office (ICO) has ordered public service provider Serco Leisure, Serco Jersey and seven associated community leisure trusts to stop using facial recognition technology (FRT) and fingerprint scanning to monitor employee attendance.  <\/p>\n

The ICO\u2019s investigation found that Serco Leisure and the trusts have been unlawfully processing the biometric data of more than <\/p>\n

Continue reading ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance of leisure centre employees<\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[1267,1069,3959,25,417,26,264,1104,2622,416,422],"class_list":["post-8036","post","type-post","status-publish","format-standard","hentry","category-it-it-security","tag-biometric","tag-data","tag-fingerprint-scanning","tag-government-public-sector-journal","tag-government-journal","tag-gpsj","tag-gpsj-magazine","tag-ico","tag-id","tag-public-sector-journal","tag-public-sector-magazine","odd"],"yoast_head":"\nICO orders Serco Leisure to stop using facial recognition technology to monitor attendance of leisure centre employees - Government & Public Sector Journal<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.gpsj.co.uk\/?p=8036\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance of leisure centre employees - Government & Public Sector Journal\" \/>\n<meta property=\"og:description\" content=\"The Information Commissioner\u2019s Office (ICO) has ordered public service provider Serco Leisure, Serco Jersey and seven associated community leisure trusts to stop using facial recognition technology (FRT) and fingerprint scanning to monitor employee attendance.   The ICO\u2019s investigation found that Serco Leisure and the trusts have been unlawfully processing the biometric data of more than Continue reading ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance of leisure centre employees\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.gpsj.co.uk\/?p=8036\" \/>\n<meta property=\"og:site_name\" content=\"Government & Public Sector Journal\" \/>\n<meta property=\"article:published_time\" content=\"2024-02-23T10:52:32+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-02-28T09:21:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.gpsj.co.uk\/wp-content\/uploads\/2024\/02\/T-57fcc6089e65c-ico-logo_57fcc6089e561-3.png\" \/>\n<meta name=\"author\" content=\"The GPSJ Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"The GPSJ Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=8036#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=8036\"},\"author\":{\"name\":\"The GPSJ Team\",\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/#\\\/schema\\\/person\\\/d54386f99736367ec2789825fed93b4a\"},\"headline\":\"ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance of leisure centre employees\",\"datePublished\":\"2024-02-23T10:52:32+00:00\",\"dateModified\":\"2024-02-28T09:21:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=8036\"},\"wordCount\":724,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=8036#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.gpsj.co.uk\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/T-57fcc6089e65c-ico-logo_57fcc6089e561-3.png\",\"keywords\":[\"Biometric\",\"Data\",\"Fingerprint Scanning\",\"Government & Public Sector Journal\",\"Government Journal\",\"GPSJ\",\"GPSJ Magazine\",\"ICO\",\"ID\",\"Public Sector Journal\",\"Public Sector Magazine\"],\"articleSection\":[\"IT & IT Security\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=8036#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=8036\",\"url\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=8036\",\"name\":\"ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance of leisure centre employees - Government & Public Sector Journal\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=8036#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=8036#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.gpsj.co.uk\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/T-57fcc6089e65c-ico-logo_57fcc6089e561-3.png\",\"datePublished\":\"2024-02-23T10:52:32+00:00\",\"dateModified\":\"2024-02-28T09:21:58+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/#\\\/schema\\\/person\\\/d54386f99736367ec2789825fed93b4a\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=8036#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=8036\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=8036#primaryimage\",\"url\":\"https:\\\/\\\/www.gpsj.co.uk\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/T-57fcc6089e65c-ico-logo_57fcc6089e561-3.png\",\"contentUrl\":\"https:\\\/\\\/www.gpsj.co.uk\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/T-57fcc6089e65c-ico-logo_57fcc6089e561-3.png\",\"width\":1000,\"height\":563},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=8036#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.gpsj.co.uk\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance of leisure centre employees\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/#website\",\"url\":\"https:\\\/\\\/www.gpsj.co.uk\\\/\",\"name\":\"Government & Public Sector Journal\",\"description\":\"Public Sector, Government, business, stories and news along with latest developments, research, thought leadership, strategy, policy and insights\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/#\\\/schema\\\/person\\\/d54386f99736367ec2789825fed93b4a\",\"name\":\"The GPSJ Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/13cdd73dc4abbd6e05b80a0562c7c553a9104ad2e5e96ee20afca2c462894143?s=96&d=blank&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/13cdd73dc4abbd6e05b80a0562c7c553a9104ad2e5e96ee20afca2c462894143?s=96&d=blank&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/13cdd73dc4abbd6e05b80a0562c7c553a9104ad2e5e96ee20afca2c462894143?s=96&d=blank&r=g\",\"caption\":\"The GPSJ Team\"},\"sameAs\":[\"http:\\\/\\\/gpsj.co.uk\"],\"url\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?author=3\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance of leisure centre employees - Government & Public Sector Journal","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.gpsj.co.uk\/?p=8036","og_locale":"en_GB","og_type":"article","og_title":"ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance of leisure centre employees - Government & Public Sector Journal","og_description":"The Information Commissioner\u2019s Office (ICO) has ordered public service provider Serco Leisure, Serco Jersey and seven associated community leisure trusts to stop using facial recognition technology (FRT) and fingerprint scanning to monitor employee attendance.   The ICO\u2019s investigation found that Serco Leisure and the trusts have been unlawfully processing the biometric data of more than Continue reading ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance of leisure centre employees","og_url":"https:\/\/www.gpsj.co.uk\/?p=8036","og_site_name":"Government & Public Sector Journal","article_published_time":"2024-02-23T10:52:32+00:00","article_modified_time":"2024-02-28T09:21:58+00:00","og_image":[{"url":"https:\/\/www.gpsj.co.uk\/wp-content\/uploads\/2024\/02\/T-57fcc6089e65c-ico-logo_57fcc6089e561-3.png","type":"","width":"","height":""}],"author":"The GPSJ Team","twitter_card":"summary_large_image","twitter_misc":{"Written by":"The GPSJ Team","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.gpsj.co.uk\/?p=8036#article","isPartOf":{"@id":"https:\/\/www.gpsj.co.uk\/?p=8036"},"author":{"name":"The GPSJ Team","@id":"https:\/\/www.gpsj.co.uk\/#\/schema\/person\/d54386f99736367ec2789825fed93b4a"},"headline":"ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance of leisure centre employees","datePublished":"2024-02-23T10:52:32+00:00","dateModified":"2024-02-28T09:21:58+00:00","mainEntityOfPage":{"@id":"https:\/\/www.gpsj.co.uk\/?p=8036"},"wordCount":724,"commentCount":0,"image":{"@id":"https:\/\/www.gpsj.co.uk\/?p=8036#primaryimage"},"thumbnailUrl":"https:\/\/www.gpsj.co.uk\/wp-content\/uploads\/2024\/02\/T-57fcc6089e65c-ico-logo_57fcc6089e561-3.png","keywords":["Biometric","Data","Fingerprint Scanning","Government & Public Sector Journal","Government Journal","GPSJ","GPSJ Magazine","ICO","ID","Public Sector Journal","Public Sector Magazine"],"articleSection":["IT & IT Security"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.gpsj.co.uk\/?p=8036#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.gpsj.co.uk\/?p=8036","url":"https:\/\/www.gpsj.co.uk\/?p=8036","name":"ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance of leisure centre employees - Government & Public Sector Journal","isPartOf":{"@id":"https:\/\/www.gpsj.co.uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.gpsj.co.uk\/?p=8036#primaryimage"},"image":{"@id":"https:\/\/www.gpsj.co.uk\/?p=8036#primaryimage"},"thumbnailUrl":"https:\/\/www.gpsj.co.uk\/wp-content\/uploads\/2024\/02\/T-57fcc6089e65c-ico-logo_57fcc6089e561-3.png","datePublished":"2024-02-23T10:52:32+00:00","dateModified":"2024-02-28T09:21:58+00:00","author":{"@id":"https:\/\/www.gpsj.co.uk\/#\/schema\/person\/d54386f99736367ec2789825fed93b4a"},"breadcrumb":{"@id":"https:\/\/www.gpsj.co.uk\/?p=8036#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.gpsj.co.uk\/?p=8036"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.gpsj.co.uk\/?p=8036#primaryimage","url":"https:\/\/www.gpsj.co.uk\/wp-content\/uploads\/2024\/02\/T-57fcc6089e65c-ico-logo_57fcc6089e561-3.png","contentUrl":"https:\/\/www.gpsj.co.uk\/wp-content\/uploads\/2024\/02\/T-57fcc6089e65c-ico-logo_57fcc6089e561-3.png","width":1000,"height":563},{"@type":"BreadcrumbList","@id":"https:\/\/www.gpsj.co.uk\/?p=8036#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.gpsj.co.uk\/"},{"@type":"ListItem","position":2,"name":"ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance of leisure centre employees"}]},{"@type":"WebSite","@id":"https:\/\/www.gpsj.co.uk\/#website","url":"https:\/\/www.gpsj.co.uk\/","name":"Government & Public Sector Journal","description":"Public Sector, Government, business, stories and news along with latest developments, research, thought leadership, strategy, policy and insights","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.gpsj.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/www.gpsj.co.uk\/#\/schema\/person\/d54386f99736367ec2789825fed93b4a","name":"The GPSJ Team","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/13cdd73dc4abbd6e05b80a0562c7c553a9104ad2e5e96ee20afca2c462894143?s=96&d=blank&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/13cdd73dc4abbd6e05b80a0562c7c553a9104ad2e5e96ee20afca2c462894143?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/13cdd73dc4abbd6e05b80a0562c7c553a9104ad2e5e96ee20afca2c462894143?s=96&d=blank&r=g","caption":"The GPSJ Team"},"sameAs":["http:\/\/gpsj.co.uk"],"url":"https:\/\/www.gpsj.co.uk\/?author=3"}]}},"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/8036","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8036"}],"version-history":[{"count":4,"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/8036\/revisions"}],"predecessor-version":[{"id":8060,"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/8036\/revisions\/8060"}],"wp:attachment":[{"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8036"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8036"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8036"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}