Attendance data is personal data
Introducing a clock-in system is data processing, and UK GDPR has opinions. The good news: for a well-chosen system the duties are modest, mostly about honesty, and largely satisfied by choosing not to collect what you don’t need.
What the law actually asks
Three things carry most of the weight. First, a lawful basis: for staff attendance this is usually the employment contract itself (you cannot pay people correctly without hours) or the organisation’s legitimate interests — not consent, which is rarely freely given where a manager is asking.
Second, transparency: staff must be told, in plain words, what is recorded, why, who sees it and for how long it is kept. A short privacy notice, given before the system goes live, does this.
Third, minimisation: collect what the purpose needs and no more. This is where the choice of system quietly becomes the compliance strategy — because you cannot mishandle data you never collected.
Why the type of system changes the duties
A tap-at-the-door system records who tapped, at which door, at what time. That is the same category of fact a paper register always held, handled with ordinary personal-data care.
Biometric systems change the legal weather. Fingerprints and face scans used for identification are special category data, which brings the demand for a data protection impact assessment, a stronger lawful basis than employment convenience, and genuine answers about storage, access and deletion of something staff cannot change if it leaks. GPS-based apps raise a different flag: continuous location processing about employees, with all the proportionality questions that follow.
Choosing a system that records neither bodies nor whereabouts is not just a kindness to staff — it is most of the compliance work done at the point of purchase.
Questions staff will actually ask
Can my employer see where I am?
With a tap system, no. It records the moment your phone touches the reader at the door, and nothing about your location at any other time. There is no GPS anywhere in it.
Do staff have to consent?
Attendance recording for pay generally rests on the employment relationship, not consent — but staff must be clearly informed. Consent matters where employers reach for intrusive methods; a proportionate system avoids needing it.
Can I see my own record?
Yes — subject access is a core right, and a good system shows staff their own taps and hours directly, which resolves most questions before they become requests.
Minimisation, built in
No biometrics, no GPS, no tracking — a record of taps at doors and nothing else.
Read how it works