- Enforcing jurisdiction
- Netherlands · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Unknown Organisation – €725,000 Fine (Netherlands, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
An unknown organization in the Netherlands was fined for requiring employees to scan their fingerprints for attendance. This is significant because it shows that companies need to have proper consent for processing sensitive personal data. Businesses should be careful when collecting biometric data from employees.
What happened
The organization was fined for not obtaining valid consent from employees for fingerprint scanning.
Who was affected
Employees whose fingerprints were scanned for attendance tracking.
What the authority found
The authority determined that the organization could not justify the fingerprint scanning under GDPR rules and lacked evidence of consent.
Why this matters
This case emphasizes the need for clear consent when handling sensitive personal data. Companies should review their data collection practices to ensure compliance.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 5 March 2026.
Processing notes: articles corrected, date discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The organisation had required its staff to have their fingerprints scanned to record attendance. However, as the decision of the data protection authority stated, the organisation could not rely on exceptions to the processing of this special category of personal data and the company could also not provide any evidence that the employees had given their consent to this data processing.
Related Enforcement Actions (0)
No other enforcement actions found for Unknown Organisation in NL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
30 April 2020
Authority
Autoriteit Persoonsgegevens
Fine Amount
€725,000
Enforcement Tracker ID
ETid-274
About this data
Cite as: Cookie Fines. Unknown Organisation - Netherlands (2020). Retrieved from cookiefines.eu
Last updated: