Condamnation RGPD pour usage de reco faciale dans une école. En Suède.
-
Oui, c'est en suédois, qu'est-ce que j'y peux, moi :'(
https://www.datainspektionen.se/nyheter/sanktionsavgift-for-ansiktsigenkanning-i-skola/ -
@klorydryk a dit dans Condamnation RGPD pour usage de reco faciale dans une école. En Suède. :
https://www.datainspektionen.se/nyheter/sanktionsavgift-for-ansiktsigenkanning-i-skola/
Hyper intéressant. Merci @klorydryk :
Penalty fee for facial recognition in school
The Data Inspectorate issues a penalty fee of SEK 200,000 for a school that has used face recognition via camera to record student attendance.
ListenFor the first time, the Data Inspectorate is now issuing a penalty charge against an actor who has violated the rules of the Data Protection Regulation, GDPR.
A high school in Skellefteå has used face recognition via camera to test students' attendance at the lessons. The trial has been going on for three weeks and affected 22 students. The Data Inspectorate has examined the use and finds that the High School Board in Skellefteå has handled sensitive personal data in violation of the Data Protection Regulation.
"The High School Board in Skellefteå has violated several of the provisions of the Data Protection Regulation in a way that we now issue a penalty fee," says Lena Lindgren Schelin, Director General of the Data Inspectorate.
The penalty fee is SEK 200,000. The size of the fee is influenced, among other things, by the fact that it is the question of an authority and that it is about an attempt for a limited period. Authorities can receive a maximum of SEK 10 million in penalty fees.
- Facial recognition technology is in its infancy, but development is fast. We therefore see a great need to create clarity about what applies to all actors, says Lena Lindgren Schelin.
Biometric data, used in face recognition, is sensitive personal data that is extra worthy of protection and that explicit exceptions are required to handle. The high school board has stated that they have received the students' consent to use face recognition for attendance control.
- The high school board cannot use consent in this case because the students are in a position of dependence on the board, explains Ranja Bunni, a lawyer at the Data Inspectorate and who participated in the review.
In its decision, the Data Inspectorate finds that facial recognition meant camera surveillance of the students in their everyday environment, was an intrusion on their integrity and that presence control can be done in other ways that are less privacy violating than facial recognition.
-
Comme je parle couramment suédois :) :
Penalty fee for facial recognition in school
The Data Inspectorate issues a penalty fee of SEK 200,000 for a school that has used face recognition via camera to record student attendance.
For the first time, the Data Inspectorate is now issuing a penalty charge against an actor who has violated the rules of the Data Protection Regulation, GDPR.
A high school in Skellefteå has used face recognition via camera to test students' attendance at the lessons. The trial has been going on for three weeks and affected 22 students. The Data Inspectorate has examined the use and finds that the High School Board in Skellefteå has handled sensitive personal data in violation of the Data Protection Regulation.
"The High School Board in Skellefteå has violated several of the provisions of the Data Protection Regulation in a way that we now issue a penalty fee," says Lena Lindgren Schelin, Director General of the Data Inspectorate.
The penalty fee is SEK 200,000. The size of the fee is influenced, among other things, by the fact that it is the question of an authority and that it is about an attempt for a limited period. Authorities can receive a maximum of SEK 10 million in penalty fees.
"Facial recognition technology is in its infancy, but development is fast. We therefore see a great need to create clarity about what applies to all actors", says Lena Lindgren Schelin.
Biometric data, used in face recognition, is sensitive personal data that is extra worthy of protection and that explicit exceptions are required to handle. The high school board has stated that they have received the students' consent to use face recognition for attendance control.
"The high school board cannot use consent in this case because the students are in a position of dependence on the board," explains Ranja Bunni, a lawyer at the Data Inspectorate and who participated in the review.
In its decision, the Data Inspectorate finds that facial recognition meant camera surveillance of the students in their everyday environment, was an intrusion on their integrity and that presence control can be done in other ways that are less privacy violating than facial recognition.
-
@Selim a dit dans Condamnation RGPD pour usage de reco faciale dans une école. En Suède. :
"The high school board cannot use consent in this case because the students are in a position of dependence on the board," explains Ranja Bunni, a lawyer at the Data Inspectorate and who participated in the review.
À voir si cet argument ne pourrait pas aussi être soulevé dans le cadre du recours conjoint contre l'expériementation en région PACA. Je crois pas que cet argument autour du « vice du consentement » qui tient à la position hiérarchique entre administration et élève ait été évoqué dans nos écritures.
-
@felix a dit dans Condamnation RGPD pour usage de reco faciale dans une école. En Suède. :
À voir si cet argument ne pourrait pas aussi être soulevé dans le cadre du recours conjoint contre l'expériementation en région PACA. Je crois pas que cet argument autour du « vice du consentement » qui tient à la position hiérarchique entre administration et élève ait été évoqué dans nos écritures.
Totalement ! C'est très positif pour le recours
-
@Martin a dit dans Condamnation RGPD pour usage de reco faciale dans une école. En Suède. :
Authorities can receive a maximum of SEK 10 million in penalty fees.
Vous savez expliquer pourquoi ?
-
@klorydryk a dit dans Condamnation RGPD pour usage de reco faciale dans une école. En Suède. :
Vous savez expliquer pourquoi ?
L'article 83 du RGPD dit que, sauf entreprises : Les violations des dispositions suivantes font l'objet, conformément au paragraphe 2, d'amendes administratives pouvant s'élever jusqu'à 20 000 000 EUR ou, dans le cas d'une entreprise, jusqu'à 4 % du chiffre d'affaires annuel mondial total de l'exercice précédent, le montant le plus élevé étant retenu:
Peut être que 20 millions, ca fait 10 millions de couronnes ?
-
Je rajoute pour les intéressé/es une version pdf traduite par google trad en français toute moche mais qui a le mérite d'exister cnilsuédoise.pdf
-
This post is deleted!
