14,000 Euro fine against SERVICIOS LOGÍSTICOS MARTORELL SIGLO XXI Biometric time recording system implemented without data protection impact assessment.
The Spanish data protection authority AEPD imposed a fine on a logistics company following a trade union complaint about the implementation of a biometric time recording system with fingerprint readers. The company had not carried out a data protection impact assessment for the system, although this is required when processing biometric data. The original fine of EUR 20,000 was reduced to EUR 14,000 due to an admission of guilt and timely payment.