- Enforcing jurisdiction
- Poland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
School in Gdansk (Danzig) (fine imposed against town of Gdansk) – Fine (Poland, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A school in Gdansk used fingerprint scanners to identify students for payments, but the consent from parents wasn't given freely. The data protection authority found this processing unlawful. This case highlights the importance of ensuring that consent is truly voluntary.
What happened
The school used biometric fingerprint scanners to authenticate students for payments without valid consent.
Who was affected
Students at the school and their parents who provided consent for data processing.
What the authority found
The Polish data protection authority ruled that the consent for using biometric data was not given voluntarily, violating GDPR rules.
Why this matters
This ruling stresses that consent must be freely given, which is crucial for schools and organizations using personal data.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 23 March 2026.
Processing notes: amount discrepancy, articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Original summary: A school in Gdansk used biometric fingerprint scanners to authenticate students for the payment process in the school canteen. Although the parents had given their written consent to such data processing, the data protection authority considered the processing of the student data to be unlawful, as the consent to data processing was not given voluntarily. Update: Update: On August 7, 2020, the Provincial Administrative Court in Warsaw overturned the decision of the Polish DPA imposing a fine of EUR 4,600.
Related Enforcement Actions (0)
No other enforcement actions found for School in Gdansk (Danzig) (fine imposed against town of Gdansk) in PL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
4 March 2020
Authority
Urząd Ochrony Danych Osobowych
About this data
Cite as: Cookie Fines. School in Gdansk (Danzig) (fine imposed against town of Gdansk) - Poland (2020). Retrieved from cookiefines.eu
Last updated: