Data watchdog tells off outsourcing giant for scanning staff biometrics despite 'power imbalance'

The UK Information Commissioner’s Office issued an enforcement notice against Serco Leisure and associated trusts for unlawfully using facial recognition and fingerprint scanning to monitor staff at 38 leisure centers, citing lack of meaningful opt-out and disproportionate processing under data protection law; it ordered deletion of non-essential biometric data within three months and released guidance on appropriate use of biometrics.