On January 17, 2024, the Privacy Protection Authority (PPA) announced that it had published its policy document on the collection and use of biometric information for attendance control in the workplace for a second round of public comments. In particular, the PPA stated that the policy document seeks to expand and update the position of the PPA under its 'Use of Biometric Attendance Control in Workplace' published in 2012.

According to the PPA, the policy document is primarily intended for private and public organizations that use, or are considering using, biometric identification technologies for employees. The policy document provides the risks and benefits of the use of biometric information, the decisions issued by the labor courts, and the position of the Attorney General, as well as clarifications and recommendations of the PPA.

More specifically, the PPA highlighted that, in general, employers have the prerogative to collect and use biometric information for reporting and controlling employee attendance at the workplace, however, the same must be done in a reasonable and proportionate manner, while informing the employees and obtaining their express consent, while implementing the information security obligations established by law, and while ensuring the principle of goal contiguity. The PPA also stated that organizations must examine the necessity of keeping the biometric information held by them, and reduce the information (including by deleting it) when there is no need to continue keeping it.

Public comments can be submitted via [email protected] until January 31, 2024. 

You can read the press release here and the policy document here, both only available in Hebrew.