Biometrics in the EnterpriseMeme
Turns out you can reject handing over biometric data in an EnterpriseMeme
tl;dr
Guy gets fired for not enrolling in biometric signin at work, gets fired, takes case to Fair Work and wins the case.
Less tl;dr
In an article posted over 6 months ago, A guy was fired for not handing over biometric data, took it to the Fair Work Comission, and won the case - he represented himself, which is also fairly notable. The article I’m talking about is https://www.abc.net.au/news/2019-05-21/fingerprints-biometric-data-worker-wins-unfair-dismissal-case/11129338
The rough outline is as follows:
- $Workplace implement fingerprint scanners at the entrance, so you can sign in with your fingerprint and gain physical access
- $Guy doesn’t want to enroll
- $Workplace fires guy
- $Guy goes to FWC with pro bono lawyer, loses
- $Guy self represents to FWC, wins
- Story makes the news
Although if you wanted to be able to collect this kind of data, under Australian law you’d need to inform users about how it’s being collected, used, and stored. I’m not a lawyer, but you could probably bury this in your acceptable use policy and no one would be the wiser.
I’m waiting for a bunch of Australians to figure this out, and then object to things like Windows Hello with Biometrics - which would sadly be bad for the state of security, but also within users rights.