Processes biometric data, in Poland

Regulation (EU) 2016/679, Art. 9; Ustawa z 10 maja 2018 r., Art. 107(2); Kodeks pracy, Art. 22(1b) · Read the law's page

• Obtain an explicit GDPR Article 9(2) legal basis before processing biometric data of a person in Poland.
• Rely on a Polish employee's consent to process their biometric data only where the employee supplied the data on their own initiative, and let only people you have authorized in writing process it, bound to confidentiality, under Kodeks pracy Article 22(1b); processing needed to control access to particularly important information or to premises that need special protection is also permitted under Article 22(1b).