• About
  • Offices
  • Careers
  • News
  • Students
  • Alumni
  • Payments
  • EN | FR
Background Image
Bennett Jones Logo
  • People
  • Expertise
  • Knowledge
  • Search
  • FR Menu
  • Search Mobile
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
View all
Practices
Corporate Litigation Regulatory Tax View all
Industries
Energy Infrastructure Mining Private Equity & Investment Funds View all
Advisory
Crisis & Risk Management Public Policy
View Client Work
International Experience
Insights News Events Subscribe
Arbitration Angle Artificial Intelligence Insights Business Law Talks Podcast Class Actions: Looking Forward Class Action Quick Takes
Economic Outlook New Energy Economy Series Quarterly Fintech Insights Quarterly M&A Insights Sustainability & the CIO
People
Offices
About
Practices
Industries
Advisory Services
Client Work
Insights
News
Events
Careers
Law Students
Alumni
Payments
Search
Subscribe

Stay informed on the latest business and legal insights and events.

LinkedIn LinkedIn Twitter Twitter Vimeo Vimeo
 
Blog

Employers Must Follow Privacy Protocols When Implementing Biometric Attendance Systems

July 08, 2013

In response to concerns about employee attendance and building security, some employers have chosen to implement biometric attendance systems in the workplace. These systems allow an employer to monitor employees' work hours by measuring biological characteristics like fingerprints, handprints or facial features and associating this measurement with an identified individual. As biometric systems record personal information about identifiable individuals, their use by employers is subject to the requirements of privacy legislation.

The interplay between biometric attendance systems and employee privacy has been addressed by the Office of the Information and Privacy Commissioner of Alberta (OIPC) on two occasions: Investigation Report P2008-IR-005 and Investigation Report F2008-IR-001. In both cases, the employer implemented a biometric attendance system in order to more accurately record attendance and reduce instances of "buddy punching", a practice where one employee punches the time card of another employee who is late or absent. The systems did not store images of an employee's thumb or hand print, but instead converted measurements of an employee's hand or thumb into a unique numerical identifier.

The Commissioner concluded in both cases that the collection of personal employee information was reasonable. Despite this finding, both employers were found to have breached their obligation under privacy legislation to properly notify employees of the information being collected and the manner in which collected information would be used.

The OIPC Investigation Reports are instructive, as they raise a number of important takeaway points for employers who are considering a move from the traditional timecard to a more high tech option:

  1. Employers who implement such systems in the workplace must take care to ensure that employees understand what information is being collected, how it is being collected and how the employer will use the information. This may include the preparation of a written privacy policy which is then made available to employees.
  2. In both investigation reports, the Commissioner noted that the numerical identifiers generated by the biometric system could not be reverse engineered in order to reconstruct an image of the employee's hand or thumbprint. It was also noted that the collected information was transmitted and stored in encrypted form. In light of concerns about unauthorized access to or misuse of personal information, the level of security provided by an attendance system will be important if the legality of the system is challenged.
  3. The Commissioner also noted in both reports that other methods of tracking attendance had been found to be ineffective. Employers who wish to use biometric systems in the workplace should therefore be able to articulate how the proposed system is needed to remedy a specific problem, such as buddy-punching, in light of any available methods which are less invasive.

Please note that this publication presents an overview of notable legal trends and related updates. It is intended for informational purposes and not as a replacement for detailed legal advice. If you need guidance tailored to your specific circumstances, please contact one of the authors to explore how we can help you navigate your legal needs.

For permission to republish this or any other publication, contact Amrita Kochhar at kochhara@bennettjones.com.

Download PDF

Author

  • Barbara J. Stratton KC Barbara J. Stratton KC, Edmonton Managing Partner

Related Links

  • Insights
  • Media
  • Subscribe

Recent Posts

Blog

Major Change in Alberta Occupational Health and Safety [...]

May 26, 2025
       

Blog

Q&A on Cybersecurity and Family Enterprises: How to [...]

May 23, 2025
       

Blog

British Columbia Grapples With Evidentiary Issues [...]

May 22, 2025
       

Blog

Screening By the Authorizing Judge: Québec Court of [...]

May 22, 2025
       

Blog

Court of Appeal Cuts Off Speculative Product Liability Claims

May 22, 2025
       
Bennett Jones Centennial Footer
Bennett Jones Centennial Footer
About
  • Leadership
  • Diversity
  • Community
  • Innovation
  • Security
Offices
  • Calgary
  • Edmonton
  • Montréal
  • Ottawa
  • Toronto
  • Vancouver
  • New York
Connect
  • Insights
  • News
  • Events
  • Careers
  • Students
  • Alumni
Subscribe

Stay informed on the latest business and legal insights and events.

LinkedIn LinkedIn Twitter Twitter Vimeo Vimeo
© Bennett Jones LLP 2025. All rights reserved.
  • Privacy Policy
  • Disclaimer
  • Terms of Use
Logo Bennett Jones