Enforcement notices · Transport and leisure
Serco Leisure Operating Limited and relevant associated Trusts
No fineEnforcement notices
Root cause
Excessive collection or retention
Data kept longer than necessary, or gathered without a lawful basis in the first place.
What happened
Serco Leisure, Serco Jersey and seven associated community leisure trusts have been issued enforcement notices ordering them to stop using facial recognition technology and fingerprint scanning to monitor employee attendance. The ICO's investigation found that Serco and the trusts have been unlawfully processing the biometric data of more than 2,000 employees at 38 leisure facilities for the purpose of monitoring attendance.
Summarised from the notice published by the ICO on 23 February 2024. Read the original notice — it is the authoritative version.