Quevedo & Ponce - Noticias Legales

Superintendence of Personal Data Protection Issues Opinion on the Use of Biometric Data for Attendance Control

March 20th, 2025
Quevedo & Ponce

The Superintendence of Personal Data Protection has issued an opinion on Inquiry 002-2025, referenced in Official Letter No. SPDP-IRD-2025-0031-O, regarding the processing of biometric data for labor attendance control.

The authority establishes that explicit consent is required for the processing of biometric data in labor attendance control, and for consent to be considered valid, it must be free, specific, informed, and unequivocal.

Consent must be free, without coercion or undue pressure, and free from vices such as force or real fear, like the fear of losing one’s job. It must be specific, limited to a concrete purpose, and without ambiguity regarding its scope. Additionally, it must be informed, ensuring that the data subject clearly understands the purposes and conditions of the data processing. Finally, it must be unequivocal, expressed clearly and without doubt, ensuring that the data subject’s will is consciously expressed.

Regarding the involved parties:

Employers: They must ensure the consent of their workers before collecting biometric data and provide alternatives for those who do not wish to provide their data.
Workers: They may refuse the processing of their biometric data without it affecting their employment conditions and may request the deletion of their biometric data when applicable.

At Quevedo & Ponce, we advise companies and workers to ensure compliance with legal provisions and protect the rights to personal data security. Contact us for guidance on this important precedent and its impact in the labor field.

Más Artículos

Relevant Market in Ecuador Competition Law: How Is It Defined?

The relevant market is one of the fundamental concepts in Competition Law, as it defines the scope in which companies compete and helps determine whether a particular conduct may affect market competition. Its proper definition is essential for assessing anticompetitive practices, abuse of market power, and merger control

Mercado relevante en el Derecho de Competencia en Ecuador: ¿Cómo se define?

El mercado relevante constituye uno de los conceptos fundamentales del Derecho de Competencia, pues permite determinar el ámbito en el que las empresas compiten y evaluar si una conducta puede afectar el funcionamiento del mercado. Su correcta definición resulta esencial para analizar prácticas anticompetitivas, abuso de poder de mercado y concentraciones económicas.

Implications of Personal Data Processing in Contractual Matters

In the Ecuadorian business environment, the inclusion of specific data protection clauses in contracts is not optional, but rather a legal obligation under the LOPDP, which prohibits the use of generic authorizations, to ensure that the processing of information is lawful and to avoid severe sanctions by the Superintendence of Personal Data Protection.

Implicaciones del tratamiento de datos personales en materia contractual

En el ámbito empresarial ecuatoriano, la inclusión de cláusulas específicas de protección de datos en los contratos no es opcional, sino una obligación legal bajo la LOPDP que prohíbe el uso de autorizaciones genéricas. Para garantizar que el tratamiento de información sea lícito y evitar severas sanciones por parte de la Superintendencia de Protección de Datos Personales.