Guidelines for French companies processing biometric data published
On March 28, 2019 French data protection authority, CNIL (Commission Nationale de l’Informatique et des Libertés) adopted regulation on processing of biometric data.
As per the regulations, a company needs to justify and document the various reasons when setting up biometric devices. The company needs to prove that any other solutions is not possible or practical and the biometric system is what is needed (e.g. an entry card would not be enough for security reasons). Employers meeting these conditions will not be required to obtain consent from the employees for processing their biometric personal data.
© 2019 Shan & Co.