# ANSPDCP (Romania) - TIP TOP FOOD INDUSTRY SRL

- Type: News
- Source: GDPRhub
- Date: 2026-09-29
- Original: https://gdprhub.eu/index.php?title=ANSPDCP_(Romania)_-_TIP_TOP_FOOD_INDUSTRY_SRL
- Canonical: https://overview.legal/posts/354768
- Topics: Personal Data, Special Categories of Data, Processing, Retention Period, Biometric Data, Monitoring, Data Minimization, Lawfulness, Controllers, Supervisory Authorities

## Summary

The DPA fined a company €5,000 (RON 26,236) for using a system to monitor its employees’ attendance and access to its premises that relies on the processing of personal data in the form of fingerprints. English Summary. Facts. TIP TOP FOOD INDUSTRY SRL (controller) used a time-and-attendance and access-control system on its employees at its premise. This system was using personal data in the form of the employees’ fingerprints. An individual lodged a complaint with the DPA. Holding. The DPA held

## Full text

The DPA fined a company €5,000 (RON 26,236) for using a system to monitor its employees’ attendance and access to its premises that relies on the processing of personal data in the form of fingerprints. English Summary. Facts. TIP TOP FOOD INDUSTRY SRL (controller) used a time-and-attendance and access-control system on its employees at its premise. This system was using personal data in the form of the employees’ fingerprints. An individual lodged a complaint with the DPA. Holding. The DPA held that the system used by the controller violated the principles of data minimisation (Article 5(1)(c) GDPR) and lawfulness because the controller could not rely on a legal basis for processing biometric data pursuant to Article 9 GDPR. According to the DPA, the controller could have used less intrusive means for the objectives of access control and time tracking and therefore violated Article 5(1)(c) GDPR. The DPA stressed that when processing biometric data, the controller must pay specific att

---
Generated by overview.legal · https://overview.legal/posts/354768 · 2026-09-29