France: CNIL issues warning to sports club for unlawful use of facial recognition system
The French data protection authority ('CNIL') announced, on 18 February 2021, that it had issued a warning to a sports club for unlawful use of facial recognition for automatic identification of people subject to a commercial stadium ban. In particular, following checks conducted by CNIL, it noted that the identification of such people took place through the processing of biometric data which is prohibited under the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'). In addition, CNIL highlighted that in the absence of specific legislative provisions allowing the use of such facial recognition systems for anti-terrorism purposes, the processing conducted by the sports club had been unlawful. Further to the same, CNIL noted that if the sports club continued to process data through such facial recognition devices, it could face further corrective measures and a financial penalty.
You can read the press release, only available in French, here.