fineConcludedPLN 18,941
UODO (Polish DPA) — Catering business, Silesian Voivodeship (DKE.561.1.2025)
July 28, 2025 · Poland
UODO fined a catering entrepreneur PLN 18,941 for obstructing an investigation into the employer's processing of an employee's biometric data (fingerprints) by failing to provide UODO with access and required information.
Key takeaway — how to prevent this
Biometric data (faces, iris, fingerprints) needs an explicit lawful basis or consent. Scraping or capturing it without one is unlawful across the EU/UK and many US states (e.g. Illinois BIPA) — and draws the largest fines.
Inclusion does not imply wrongdoing or liability. Status reflects the latest information we have — always check the official source for current status.