- Enforcing jurisdiction
- United Kingdom · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Serco Leisure Operating Limited and relevant associated Trusts – Order (United Kingdom, 2024)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Serco Leisure and its associated trusts were ordered to stop using facial recognition and fingerprint scanning to track employee attendance. The investigation found they were unlawfully processing biometric data of over 2,000 employees. This ruling highlights the need for companies to handle sensitive personal data responsibly.
What happened
Serco Leisure was ordered to stop using facial recognition and fingerprint scanning for employee attendance monitoring.
Who was affected
More than 2,000 employees at 38 leisure facilities operated by Serco and associated trusts.
What the authority found
The Information Commissioner's Office found that Serco unlawfully processed biometric data without proper justification.
Why this matters
This ruling emphasizes the importance of protecting sensitive personal data, especially biometric information. Companies should review their data practices to ensure compliance with privacy laws.
Source checks
Linked-source text retrieved.
Automated check recorded — 16 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Serco Leisure, Serco Jersey and seven associated community leisure trusts have been issued enforcement notices ordering them to stop using facial recognition technology and fingerprint scanning to monitor employee attendance. The ICO's investigation found that Serco and the trusts have been unlawfully processing the biometric data of more than 2,000 employees at 38 leisure facilities for the purpose of monitoring attendance.
Outcome
Order
A binding order requiring the controller to take specific action.
Related Enforcement Actions (0)
No other enforcement actions found for Serco Leisure Operating Limited and relevant associated Trusts in UK
This is the only recorded action for this entity in this jurisdiction.
Details
Order Date
23 February 2024
Authority
Information Commissioner's Office
About this data
Cite as: Cookie Fines. Serco Leisure Operating Limited and relevant associated Trusts - United Kingdom (2024). Retrieved from cookiefines.eu
Last updated: