Personnel Today
  • Home
    • All PT content
  • Email sign-up
  • Topics
    • HR Practice
    • Employee relations
    • Learning & training
    • Pay & benefits
    • Wellbeing
    • Recruitment & retention
    • HR strategy
    • HR Tech
    • The HR profession
    • Global
    • All HR topics
  • Legal
    • Case law
    • Commentary
    • Flexible working
    • Legal timetable
    • Maternity & paternity
    • Shared parental leave
    • Redundancy
    • TUPE
    • Disciplinary and grievances
    • Employer’s guides
  • AWARDS
    • Personnel Today Awards
    • The RAD Awards
  • Jobs
    • Find a job
    • Jobs by email
    • Careers advice
    • Post a job
  • Brightmine
    • Learn more
    • Products
    • Free trial
    • Request a quote
  • Webinars
  • Advertise
  • OHW+

Personnel Today

Register
Log in
Personnel Today
  • Home
    • All PT content
  • Email sign-up
  • Topics
    • HR Practice
    • Employee relations
    • Learning & training
    • Pay & benefits
    • Wellbeing
    • Recruitment & retention
    • HR strategy
    • HR Tech
    • The HR profession
    • Global
    • All HR topics
  • Legal
    • Case law
    • Commentary
    • Flexible working
    • Legal timetable
    • Maternity & paternity
    • Shared parental leave
    • Redundancy
    • TUPE
    • Disciplinary and grievances
    • Employer’s guides
  • AWARDS
    • Personnel Today Awards
    • The RAD Awards
  • Jobs
    • Find a job
    • Jobs by email
    • Careers advice
    • Post a job
  • Brightmine
    • Learn more
    • Products
    • Free trial
    • Request a quote
  • Webinars
  • Advertise
  • OHW+

General Data Protection RegulationLatest NewsStaff monitoring

Serco forced to stop biometric attendance monitoring

by Rob Moss 27 Feb 2024
by Rob Moss 27 Feb 2024 Serco Leisure operates Birmingham Community Leisure Trust's Wyndley Leisure Centre. Photo: Ian Andrews/Alamy
Serco Leisure operates Birmingham Community Leisure Trust's Wyndley Leisure Centre. Photo: Ian Andrews/Alamy

The Information Commissioner’s Office has issued enforcement notices ordering Serco Leisure and sports centres it operates to stop biometric attendance monitoring, including facial recognition and fingerprint scanning when workers clock in and out.

An ICO investigation found that Serco Leisure, Serco Jersey and seven community leisure trusts have been unlawfully processing the biometric data of more than 2,000 employees at 38 leisure facilities to monitor attendance and subsequently calculate their pay.

The ICO said that they failed to show why it is necessary or proportionate to use facial recognition technology and fingerprint scanning when less intrusive means are available such as identity cards or fobs.

Attendance monitoring

In-depth: When does keeping tabs on working time overstep the line?

EY monitoring office entry data in hybrid working crackdown

It said employees have not been proactively offered an alternative to having their faces and fingers scanned to clock in and out of their place of work, and that biometric attendance monitoring was a requirement to get paid.

The ICO has now issued enforcement notices instructing Serco and the trusts to stop all processing of biometric data for monitoring employees’ attendance at work, as well as to destroy all biometric data that they are not legally obliged to retain. This must be done within three months of the enforcement notices being issued.

John Edwards, UK information commissioner, said: “Biometric data is wholly unique to a person so the risks of harm in the event of inaccuracies or a security breach are much greater – you can’t reset someone’s face or fingerprint like you can reset a password.

“Serco Leisure did not fully consider the risks before introducing biometric technology to monitor staff attendance, prioritising business interests over its employees’ privacy. There is no clear way for staff to opt out of the system, increasing the power imbalance in the workplace and putting people in a position where they feel like they have to hand over their biometric data to work there.

“This is neither fair nor proportionate under data protection law, and, as the UK regulator, we will closely scrutinise organisations and act decisively if we believe biometric data is being used unlawfully.”

The enforcement action comes as the ICO published new guidance for organisations considering using people’s biometric data, outlining how organisations can comply with data protection law when using biometric data to identify people.

A Serco Leisure spokesman said: “This technology was introduced at the leisure centres we manage nearly five years ago to make clocking in and out easier and simpler for colleagues. We engaged with our team members in advance of its rollout and its introduction was well-received by colleagues.

“The introduction also followed external legal advice which said use of the technology was permitted. Despite being aware of Serco Leisure’s use of this technology for some years, the ICO have only this week issued an enforcement notice and requested that we take action.

“We now understand this coincides with the publication of new guidance for organisations on processing of biometric data which we anticipate will provide greater clarity in this area. We take this matter seriously and confirm we will fully comply with the enforcement notice.”

Professor Keiichi Nakata, director of AI at Henley Business School’s World of Work Institute, said: “The key issue in this case is that Serco did not provide any alternatives for their employees to using biometric data. Some people might be willing to be subjected to biometric identification for the sake of convenience in exchange for their personal data, but this is not universal.

“This case warns employers against introducing technologies without due care and empathy towards employees – especially when there are concerns about intrusion on their privacy. As such, this is not only the issue of non-compliance to GDPR but also poor employee management.”

The ICO enforcement notices on the use of biometric attendance monitoring were issued to Serco Leisure Operating, Serco Jersey, Birmingham Community Leisure, Bolton Community Leisure, Maidstone Leisure Trust, More Leisure Community Trust, Northern Community Leisure Trust, Shropshire Community Leisure Trust, and Swale Community Leisure.

In October 2023, the ICO issued guidance for employers on workplace monitoring, including any tracking of remote workers’ activities.

Sign up to our weekly round-up of HR news and guidance

Receive the Personnel Today Direct e-newsletter every Wednesday

OptOut
This field is for validation purposes and should be left unchanged.

 

HR roles in hospitality and leisure on Personnel Today


Browse more HR roles in hospitality and leisure

Rob Moss

Rob Moss is a business journalist with more than 25 years' experience. He has been editor of Personnel Today since 2010. He joined the publication in 2006 as online editor of the award-winning website. Rob specialises in labour market economics, gender diversity and family-friendly working. He has hosted hundreds of webinar and podcasts. Before writing about HR and employment he ran news and feature desks on publications serving the global optical and eyewear market, the UK electrical industry, and energy markets in Asia and the Middle East.

previous post
Half of FTSE appointments must now go to women
next post
Council to pay £60k for flawed misconduct investigation

You may also like

‘Polygamous working’ is a minefield for HR

14 May 2025

Four ways employers can reduce the risk of...

14 May 2025

Revolut hails employee compliance tracking system

24 Apr 2025

Met Police cannot dismiss by vetting withdrawal

11 Feb 2025

What’s HR’s role in ethical AI adoption?

6 Feb 2025

New warning over use of AI as ‘emotional...

4 Dec 2024

PwC to track hybrid working arrangements

6 Sep 2024

Timesheets add to stress, study shows

20 Jun 2024

Wells Fargo fires employees for ‘mouse jiggling’

14 Jun 2024

Uber Eats settles driver’s facial recognition discrimination claim

26 Mar 2024

  • 2025 Employee Communications Report PROMOTED | HR and leadership...Read more
  • The Majority of Employees Have Their Eyes on Their Next Move PROMOTED | A staggering 65%...Read more
  • Prioritising performance management: Strategies for success (webinar) WEBINAR | In today’s fast-paced...Read more
  • Self-Leadership: The Key to Successful Organisations PROMOTED | Eletive is helping businesses...Read more
  • Retaining Female Talent: Four Ways to Reduce Workplace Drop Out PROMOTED | International Women’s Day...Read more

Personnel Today Jobs
 

Search Jobs

PERSONNEL TODAY

About us
Contact us
Browse all HR topics
Email newsletters
Content feeds
Cookies policy
Privacy policy
Terms and conditions

JOBS

Personnel Today Jobs
Post a job
Why advertise with us?

EVENTS & PRODUCTS

The Personnel Today Awards
The RAD Awards
Employee Benefits
Forum for Expatriate Management
OHW+
Whatmedia

ADVERTISING & PR

Advertising opportunities
Features list 2025

  • Facebook
  • Twitter
  • Instagram
  • Linkedin


© 2011 - 2025 DVV Media International Ltd

Personnel Today
  • Home
    • All PT content
  • Email sign-up
  • Topics
    • HR Practice
    • Employee relations
    • Learning & training
    • Pay & benefits
    • Wellbeing
    • Recruitment & retention
    • HR strategy
    • HR Tech
    • The HR profession
    • Global
    • All HR topics
  • Legal
    • Case law
    • Commentary
    • Flexible working
    • Legal timetable
    • Maternity & paternity
    • Shared parental leave
    • Redundancy
    • TUPE
    • Disciplinary and grievances
    • Employer’s guides
  • AWARDS
    • Personnel Today Awards
    • The RAD Awards
  • Jobs
    • Find a job
    • Jobs by email
    • Careers advice
    • Post a job
  • Brightmine
    • Learn more
    • Products
    • Free trial
    • Request a quote
  • Webinars
  • Advertise
  • OHW+