Serco ordered to halt using facial recognition to monitor employees

Public service provider Serco Leisure, Serco Jersey and seven associated community leisure trusts were ordered to stop using facial recognition technology and fingerprint scanning to monitor employee attendance. An investigation by the UK's Information Commissioner's Office found that Serco Leisure and the trusts had been unlawfully processing the biometric data of more than 2,000 employees at 38 leisure facilities for the purpose of attendance checks and subsequent payment for their time. The ICO said Serco and the trusts failed to show why it is necessary or proportionate to use facial recognition and fingerprint scanning for this purpose, when there are less intrusive means available such as ID cards or fobs. It also said that employees had not been proactively offered an alternative to having their faces and fingers scanned to clock in and out of their place of work, and that it had been presented as a requirement in order to get paid. 'Due to the imbalance of power between Serco Leisure and its employees, it is unlikely that they would feel able to say no to the collection and use of their biometric data for attendance checks,' the ICO argued. System 🤖 Serco Leisure 🔗 Operator: Serco Leisure Developer: Country: UK Sector: Tourism/leisure Purpose: Monitor employees Technology: Facial recognition ; Fingerprint scanning Issue: Privacy Legal, regulatory 👩🏼‍⚖️ Information Commisisoner's Office (2024). Enforcement notice Information Commisisoner's Office (2024). ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance of leisure centre employees

Date it happened

2024-02-01

Organisation involved

Serco Leisure

This is a record of what was reported, not a finding that anyone broke the law. If it names your organisation and you believe it is wrong, the corrections process is free and open to everyone.