I am surprised that the fingerprint is collected for access to a canteen.
Look what we find on the cnil:
Biometrics: four refusals to authorize the use of white fingerprints
30/01/2006 - Echoes of the sessions
The CNIL authorized, during its meeting of January 12, 2006, two devices for controlling access to a school canteen based on the recognition of the outline of the hand. However, it refused to authorize four access control and time management treatments based on the recognition of fingerprints because they were not justified by any specific security imperative.
In examining biometric devices, the CNIL takes into account the type of biometrics used: “trace” biometry or “traceless” biometry. This distinction is based on the possibility or not of recovering biometric data without the knowledge of the person.
In this respect, the outline of the hand constitutes, in the current state of knowledge, a “streak-free” biometry which cannot be used for other purposes, without the presence of the person. It is therefore a question of biometrics which does not raise any difficulties with regard to the data protection rules. This is why the CNIL authorized, on January 12, 2006, two new high schools to use devices based on the recognition of the outline of the hand in the context of controlling access to the school canteen. This brings to six the number of authorizations issued on this type of device in educational establishments.
The CNIL recalls, however, that the legal guardians of the pupils must be individually informed of the implementation of these systems and of the methods according to which they can, if necessary, refuse the computerization of the biometric data of their children. It therefore recommends that an alternative be offered to those who do not want to use biometrics.
In the case of “trace” biometrics, among which are fingerprints, the CNIL relates the mode of data storage (file or individual medium) to the existence or not of a particular security requirement. It considers that the processing, in an automated and centralized form, of fingerprints cannot be allowed, taking into account both the characteristics of the element of physical identification retained, the possible uses of these treatments and the risks of attacks privacy and individual freedoms, only to the extent that compelling security or public order requirements warrant.
Thus, on January 12, the Commission refused to implement three access control devices and a schedule control device based on the processing, in a database, of fingerprints.
For the purposes of access control processing, the CNIL considered that this objective, while legitimate, was not in this case associated with any particular circumstance justifying the retention in a database of employee fingerprints . Consequently, the processing appeared neither suitable nor proportionate to the objective pursued.
Finally, in its decision on the schedule control system, in a clinic, the CNIL recalled that the objective of better management of working hours, if it is legitimate, does not in itself justify the recording in a biometric reader of the templates of the fingerprints of the employees.
source:
http://www.cnil.fr/index.php?id=1938
So a priori, an identification on the recognition of the outline of the hand was authorized. On the other hand, the storage of the non-fingerprint (apart from imperative security conditions.
I know a company that wanted to impress its customers and had planned an identification (access to premises ...) of its employees by fingerprints.
So at the entrance, biometric sensor ...
Only here the CNIL refused (unfavorable opinion) the implementation of this automated processing of nominative info. Particularly with regard to advanced security objectives and especially the fact that fingerprints had to be stored on a server.
Summary of the races, as the company had already wired everything and installed its sensors and the stumbling block was the centralized storage of fingerprints, it ended up obtaining a favorable opinion by storing the biometric data of the employees on a badge which is personal and unique.
Yes yes, you read well. So, the employees badge so that the system becomes aware of the fingerprint and then the employees put their finger on the biometric sensor!
On the other hand, it is important to emphasize that such processing of personal information must have received a favorable opinion from the CNIL BEFORE their implementation.
So in your case, the college must have a file number with the CNIL.
@+
Learning disobedience is a long process. It takes a lifetime to reach perfection. "Maurice Rajsfus
To think is to say no. "Alain, philosopher
)
Obligation to wash hands before going to the table, otherwise stained hands are not recognized.