How to interpret Sweden’s first GDPR fine on facial recognition in school

The school used facial-recognition software via camera to capture and register 22 students’ participation in class. The school board claimed that automizing taking the class register would save 17,280 hours of work each year at the school.

However, neither a risk assessment nor prior consultation with the Swedish DPA was executed. August 20, the Swedish DPA fined the school SEK 200,000, its first fine under the EU General Data Protection Regulation, and issued a warning against further processing.

Full article: How to interpret Sweden’s first GDPR fine on facial recognition in school