School in Gdansk
€5K($5K USD)final
Date Issued
2020-03-04
Regulation
Authority
Polish National Personal Data Protection Office (UODO)
Country
Poland
Violation Type
Non-compliance with lawful basis for data processing
Currency
EUR
Violation Summary
Biometric fingerprint scanners were used in a school in Gdansk (Poland) to authenticate students into the school’s payment processing system. While the parents have given written consent to the processing of this kind of data, the Polish National Personal Data Protection Office (UODO) argued that the data processing was nevertheless unlawful, as the consent was obtained involuntarily. It was argued that the school required the consent, otherwise, it would not have been able to process student’s payments at all, meaning parents had no choice other than to “consent”.
Articles Violated
Art. 5 GDPR