https://community.isc2.org/t5/Industry-News/Facial-recognition-in-school-renders-Sweden-s-first-GDPR-fine/m-p/27457#M3423 <P>The Swedish DPA has fined a municipality 200 000 SEK (approximately 20 000 euros) for using facial recognition technology to monitor the attendance of students in school.</P><P>A school in northern Sweden has conducted a pilot using facial recognition to keep track of students’ attendance in school. The test run was conducted in one school class for a limited period of time.</P><P>The Swedish DPA concluded that the test violates several articles in GDPR and has imposed a fine on the municipality of approximately 20 000 euros. In Sweden public authorities can receive a maximum fine of 10 million SEK (approximately 1 million euros). This is the first fine issued by the Swedish DPA.<BR />The school has processed sensitive biometric data unlawfully and failed to do an adequate impact assessment including seeking prior consultation with the Swedish DPA.</P><P>The school has based the processing on consent but the Swedish DPA considers that consent was not a valid legal basis given the clear imbalance between the data subject and the controller.</P><P>Read the full press release in Swedish<SPAN>&nbsp;</SPAN><A href="https://www.datainspektionen.se/nyheter/sanktionsavgift-for-ansiktsigenkanning-i-skola/?utm_source=POLITICO.EU&amp;utm_campaign=360ade166e-EMAIL_CAMPAIGN_2019_08_22_04_59&amp;utm_medium=email&amp;utm_term=0_10959edeb5-360ade166e-190359285" target="_blank">here</A></P> Mon, 09 Oct 2023 09:19:24 GMT leroux 2023-10-09T09:19:24Z https://community.isc2.org/t5/Industry-News/Facial-recognition-in-school-renders-Sweden-s-first-GDPR-fine/m-p/27457#M3423 <P>The Swedish DPA has fined a municipality 200 000 SEK (approximately 20 000 euros) for using facial recognition technology to monitor the attendance of students in school.</P><P>A school in northern Sweden has conducted a pilot using facial recognition to keep track of students’ attendance in school. The test run was conducted in one school class for a limited period of time.</P><P>The Swedish DPA concluded that the test violates several articles in GDPR and has imposed a fine on the municipality of approximately 20 000 euros. In Sweden public authorities can receive a maximum fine of 10 million SEK (approximately 1 million euros). This is the first fine issued by the Swedish DPA.<BR />The school has processed sensitive biometric data unlawfully and failed to do an adequate impact assessment including seeking prior consultation with the Swedish DPA.</P><P>The school has based the processing on consent but the Swedish DPA considers that consent was not a valid legal basis given the clear imbalance between the data subject and the controller.</P><P>Read the full press release in Swedish<SPAN>&nbsp;</SPAN><A href="https://www.datainspektionen.se/nyheter/sanktionsavgift-for-ansiktsigenkanning-i-skola/?utm_source=POLITICO.EU&amp;utm_campaign=360ade166e-EMAIL_CAMPAIGN_2019_08_22_04_59&amp;utm_medium=email&amp;utm_term=0_10959edeb5-360ade166e-190359285" target="_blank">here</A></P> Mon, 09 Oct 2023 09:19:24 GMT https://community.isc2.org/t5/Industry-News/Facial-recognition-in-school-renders-Sweden-s-first-GDPR-fine/m-p/27457#M3423 leroux 2023-10-09T09:19:24Z