Serco Leisure Operating Limited and relevant associated Trusts – Order (United Kingdom, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Serco Leisure and its associated trusts were ordered to stop using facial recognition and fingerprint scanning for employee attendance tracking. The Information Commissioner's Office found this practice was illegal as it involved processing sensitive biometric data without proper justification. This case is significant because it emphasizes the need for companies to use personal data responsibly and legally.
What happened
Serco Leisure and associated trusts unlawfully processed biometric data of over 2,000 employees for attendance monitoring.
Who was affected
More than 2,000 employees at 38 leisure facilities were affected by the use of biometric data for attendance tracking.
What the authority found
The Information Commissioner's Office issued enforcement notices requiring Serco to cease the use of biometric technology for monitoring attendance.
Why this matters
This order serves as a warning to companies about the legal risks of using biometric data without clear consent or legal grounds, reinforcing the need for compliance with data protection laws.
Source checks
Linked-source text retrieved.
Automated check recorded — 16 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Serco Leisure, Serco Jersey and seven associated community leisure trusts have been issued enforcement notices ordering them to stop using facial recognition technology and fingerprint scanning to monitor employee attendance. The ICO's investigation found that Serco and the trusts have been unlawfully processing the biometric data of more than 2,000 employees at 38 leisure facilities for the purpose of monitoring attendance.
Outcome
Order
A binding order requiring the controller to take specific action.
Related Enforcement Actions (0)
No other enforcement actions found for Serco Leisure Operating Limited and relevant associated Trusts in UK
This is the only recorded action for this entity in this jurisdiction.
Details
Order Date
23 February 2024
Authority
Information Commissioner's Office
About this data
Cite as: Cookie Fines. Serco Leisure Operating Limited and relevant associated Trusts - United Kingdom (2024). Retrieved from cookiefines.eu
Last updated: