The Information Commissioner’s Office (ICO) says Serco Leisure has been unlawfully processing the biometric data of more than 2,000 employees at 38 UK leisure facilities.
It did so to check staff attendance - a practice the ICO said was “neither fair nor proportionate”.