Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×
Privacy Businesses The Courts Your Rights Online

Companies 'Can Sack Workers For Refusing To Use Fingerprint Scanners' (theguardian.com) 145

Businesses using fingerprint scanners to monitor their workforce can legally sack employees who refuse to hand over biometric information on privacy grounds, the Fair Work Commission has ruled. From a report: The ruling, which will be appealed, was made in the case of Jeremy Lee, a Queensland sawmill worker who refused to comply with a new fingerprint scanning policy introduced at his work in Imbil, north of the Sunshine Coast, late last year. Fingerprint scanning was used to monitor the clock-on and clock-off times of about 150 sawmill workers at two sites and was preferred to swipe cards because it prevented workers from fraudulently signing in on behalf of their colleagues to mask absences.

The company, Superior Woods, had no privacy policy covering workers and failed to comply with a requirement to properly notify individuals about how and why their data was being collected and used. The biometric data was stored on servers located off-site, in space leased from a third party. Lee argued the business had never sought its workers' consent to use fingerprint scanning, and feared his biometric data would be accessed by unknown groups and individuals.

This discussion has been archived. No new comments can be posted.

Companies 'Can Sack Workers For Refusing To Use Fingerprint Scanners'

Comments Filter:
  • by disgruntledlurker ( 672182 ) on Friday November 30, 2018 @02:16PM (#57727194)
    Wasn't mentioned in the overview text (although it can be relatively easily ascertained) but this article discusses an Australian ruling. Just for the sake of clarity before folks from other countries go off the rails thinking it directly effects them.
    • by Anonymous Coward

      What they need to do in the same breath is make a series of laws that brutalize the company if they lose the data to hackers. They want to force employees to use biometric data under the law, fine. But whomever is involved with securing that data goes to JAIL when it's breached...under the law. Period.

      And, as someone stated before on Slashdot, I have no problem with using biometrics themselves, but they should NEVR be the password. They should only be the username--so to speak. There should still be a PIN o

    • by niftymitch ( 1625721 ) on Friday November 30, 2018 @02:47PM (#57727448)

      Well down under... that explains it.
      In reading it is unclear if the reader (device and data) was fully under the control of the company or if the company
      was insulated from a data breach or abuse by a contracted service.

      Then there is an issue with a labor force that likely has missing digits (as I do). There are days when I
      want to give other drivers a specific gesture but cannot.

      This down under ruling is a hint or early warning that other parts of the world need to establish
      rules for such devices. It seems that there are ways to do it terrible wrong and
      ways that solve the problem of fraud to a company.

      In this time zone such a device could be subject to audit by ICE and ill documented labor
      swept up and turned into cash cows for the contract incarceration industry. In a 1984esque
      world I can see such readers being mandated.

    • by mysidia ( 191772 ) on Friday November 30, 2018 @02:58PM (#57727532)

      In other jurisdictions like the United States; it was never even a question, really.... Your employer can require you to use their biometric systems for access control or time and attendance; Time clocks with a finger scanner are common, and so are door control systems with hand scanners --- there's not in general a "Second option" for employees uncomfortable with the idea of sharing biometrics; If you don't cooperate, then you can't do your job or clock in properly, and if you can't do your job or you aren't recorded as present, then you're going to get terminated eventually..

      • by redlemming ( 2676941 ) on Friday November 30, 2018 @06:58PM (#57729056)

        In other jurisdictions like the United States; it was never even a question, really.... Your employer can require you to use their biometric systems for access control or time and attendance;

        That's false: such matters are ALWAYS open to question in the USA, because James Madison gave the USA an open-ended Bill of Rights, giving the people the ability to assert ANY rights they desire under the 9th Amendment (unspecified rights retained by the people) and 10th Amendment (unspecified rights to the people).

        This was done in response to the criticism of the Anti-Federalists that the pre-Bill of Rights Constitution had no Bill of Rights, and that any finite (closed) Bill of Rights would always leave out critical rights.

        Hence, an individual right to privacy can be asserted under the 9th Amendment, and it's ultimately up to be people to decide what that means: government action is only legitimate to the extent that it is consistent with the expectations of the people.

        There is nothing in the Bill of Rights that limits the application of such rights to government: they can also be applied to private business.

        Further, rights retained by the people are by definition retained by the people and can not be taken away by ANY entity of government.

        As the Bill of Rights is the highest law in the land (superseding even the pre-Bill of Rights parts of the Constitution), such rights supersede the authority of government at all levels. The people have the ultimate power: they are the supposed to be the most important check-and-balance on government.

        Further, under US federal law, the infringement of fundamental rights "under the colour of law" is both grounds for civil suit, and can be a basis for criminal charges. In theory, this prevents state and local government as well as the federal government from infringing rights the people decide are retained by them.

        All Americans have to do is decide to assert their rights, and get them past a frequently unethical legal profession and a frequently corrupt government ...

        In practice, that's difficult. Even obvious and really basic rights such as the right to ethical practice of law are routinely infringed in US law. There is a huge gap between the law as written and the law as practised.

        But this problem might primarily be due to ignorance, and perhaps much can be accomplished if the public starts to care more about their rights. Further, appeal to the authority retained by the people 9th and 10th Amendments may end up being the only possible way to overcome the deeply entrenched corruption in the system without requiring a reboot (another American Revolution).

        • by mysidia ( 191772 )

          In other jurisdictions like the United States; it was never even a question, really.... Your employer can require you to use their biometric systems for access control or time and attendance;

          That's false: such matters are ALWAYS open to question in the USA, because James Madison gave the USA an open-ended Bill of Rights,

          Nope. The first statement above is true. And your language/arguments are so bogus for this context they begin to sound like the sort of rhetoric advanced by those so-called "Soverei [splcenter.org]

      • by AmiMoJo ( 196126 )

        How about people who don't have fingerprints? Due to burns or missing fingers. Seems a like discrimination if such people cannot be provided some accessible means of entering the building.

        In Europe my understanding of the GDPR is that they can't tie to this kind of data use to your employment, so must offer an alternative.

        • by mysidia ( 191772 )

          How about people who don't have fingerprints? Due to burns or missing fingers.

          Seems a like discrimination if such people cannot be provided some accessible means of entering the building.

          For starters: If they have an injury causing problems with a finger or hand, then they can simply provide a different finger.

          Employers certainly can discriminate against employees who don't have usable hands.. if they are needed to perform the job.

          The number of people who have Zero available fingers with fingerprints A

    • by Anonymous Coward

      Wasn't mentioned in the overview text but this article discusses an Australian ruling. Just for the sake of clarity before folks from other countries go off the rails...

      Actually, it's pretty clearly spelled out right at the start of TFS:

      ...a Queensland sawmill worker...

      It's obviously not the case for you, but when I read "Queensland" the first country that springs to mind is Australia, not Italy or Uzbekistan or USA, for example.

    • Workers have no rights. Fuck you, prole, that's why.

  • OJI (Score:5, Funny)

    by Nidi62 ( 1525137 ) on Friday November 30, 2018 @02:16PM (#57727196)
    Call their bluff. It's a sawmill, right? What happens if he has an OJI and no longer has fingerprints? Sometimes you gotta make sacrifices to keep your privacy.
    • Came here to say the same thing, only a light acid might be more practical... :-)

      Bonus is if you remove your fingerprints and they fire you because you can't use the fingerprint scanners, you can sue them for disability violations!

      • by Nidi62 ( 1525137 )

        Came here to say the same thing, only a light acid might be more practical... :-)

        I'm reminded of the movie Smokin' Aces(great movie by the way if you love over the top ridiculousness and want to see Ben Affleck get killed) where the one assassin chewed off his fingerprints when he got arrested so the couldn't fingerprint him.

      • by Anonymous Coward

        I lost my fingerprints in high school from an unexpected reaction between an organic solvent that had gotten through my gloves and into my skin, and the shampoo I used later that night in the shower.

        Melted off pretty much every area with solvent exposure. Very sore. Very tender.

        Couldn't shuffle cards for months.

        They grew back. And the regrown ones match the originals. I don't know why, but both of those things sort of surprised me.

        What DNA/RNA/whatever codes for the specificity of a fingerprint, and if

        • Re: OJI (Score:4, Interesting)

          by Anonymous Coward on Friday November 30, 2018 @04:10PM (#57728056)

          Diabetic.

          We have finger print reader to go with our badge reader to enter NOC. 9 times out of 10 they do not work for me, on any finger.

          Reason over all body hydration Finger tips ballon or prune almost moment by moment.

          They had to break the system since finger print reader do not work and then become ADA complancy issues.

        • I had no idea fingerprints could grow back!

          I wonder if acid is more permanent than something like a strong base dissolving skin (I think your case?).

          • by Nidi62 ( 1525137 )
            I can confirm they grow back after burns (had a smooth spot on my finger for a while), but it was a relatively minor surface burn. I would assume a 2nd and definitely a 3rd degree burn would not grow back.
            • by thomst ( 1640045 ) on Friday November 30, 2018 @06:29PM (#57728914) Homepage

              Nidi62 related:

              I can confirm they grow back after burns (had a smooth spot on my finger for a while), but it was a relatively minor surface burn. I would assume a 2nd and definitely a 3rd degree burn would not grow back.

              First degree burn == reddening of the skin, some swelling. No loss of fingerprints.

              Second degree burn == severe blistering of burned area. Skin heals completely in time. No loss of fingerprints.

              Third degree burn == surface tissue destroyed. Replaced with permanent scar tissue. Fingerprints don't reappear.

              Fourth degree burn == deep tissue (muscles, connective tissue, organs, etc.) destroyed. Usually fatal. Skin transplant required to fully close wounds. Fingers usually burned to (and sometimes through) bones, with amputation required.

              (Prior to the Vietnam War, fourth degree burns weren't defined, because victims of them died on the scene. It took napalm-caused wounds to create the category, because napalm sticks to the skin and it will usually burn until the napalm itself is consumed. Victims' wounds are typically confined to the area where the napalm adhered ... )

    • Sawmill accidents don't erase fingerprints. They do, however, liberate the finger for anyone to use, if they can't find it for re-attachment.

      • by Nidi62 ( 1525137 )

        Sawmill accidents don't erase fingerprints. They do, however, liberate the finger for anyone to use, if they can't find it for re-attachment.

        Eh, with a wide enough blade and right on the tip there wouldn't be enough left for someone to use.

      • Sawmill accidents don't erase fingerprints. They do, however, liberate the finger for anyone to use, if they can't find it for re-attachment.

        Actually, if you handle wood at a sawmill with bare hands instead of gloves, your fingerprints get worn down. So, just stop wearing gloves and the problem will take care of itself...

        "The most prominent of those problems involve bricklayers—who wear down ridges on their prints handling heavy, rough materials frequently—or people who work with lime [calcium oxide], because it's really basic and dissolves the top layers of the skin. The fingerprints tend to grow back over time. And, surprisingly,

    • by mysidia ( 191772 )

      What happens if he has an OJI and no longer has fingerprints?

      Then one of two things will happen.... the employer will find an alternate way to accommodate him, Or he will get terminated if there's no fiscally responsible way to provide a reasonable accommodation for the disability.

      Most likely they will find an alternate option to the finger biometric, but that it will be inconvenient for the employee.

      • I encountered this while trying to implement fingerprint access at a hospital. Most of the older surgeons had no fingerprints after years of scrubbing their hands before surgery. Non-optical scanners were a bit better, but we still had a few who could not be read. In those cases the docs had to use their username/password to unlock the various workstations around the hospital instead of using the fingerprint scanners.
    • What happens if he has an OJI and no longer has fingerprints?

      Stumpprints! They've been given the finger before.

    • If your privacy is worth that much, wouldn't it be easier to just get a different Job?
      It seems lately our culture is encouraging drastic means where they are easier options available, but just don't seem so news worthy.

  • Is there a law saying you have to use your own finger?
  • by rnturn ( 11092 ) on Friday November 30, 2018 @02:53PM (#57727482)

    ``The biometric data was stored on servers located off-site, in space leased from a third party. Lee argued the business had never sought its workers' consent to use fingerprint scanning, and feared his biometric data would be accessed by unknown groups and individuals.''

    Management may unaware of it but that information will be accessed by unknown groups and individuals. It's just a matter of time.

    • ``The biometric data was stored on servers located off-site, in space leased from a third party. Lee argued the business had never sought its workers' consent to use fingerprint scanning, and feared his biometric data would be accessed by unknown groups and individuals.''

      Management may unaware of it but that information will be accessed by unknown groups and individuals. It's just a matter of time.

      doesn't really matter, fingerprint scanners don't store your fingerprints anyway.

    • ``The biometric data was stored on servers located off-site, in space leased from a third party. Lee argued the business had never sought its workers' consent to use fingerprint scanning, and feared his biometric data would be accessed by unknown groups and individuals.''

      Management may unaware of it but that information will be accessed by unknown groups and individuals. It's just a matter of time.

      Or if they want, they could get the same information from the break room trash can, only slightly less conveniently.

    • And why is that relevant? These systems don't use a police report of a fingerprint. They aren't the ultra expensive biometrics used at the US border for matching police datasets. They are a shitty little sensor that spits out some math and then ticks a box.

      The data that could come out? An equivalent of a password which only applies on said device? Doesn't seem like much of a problem. The OTHER data that could come out is the standard Kronos timekeeping data that any timekeeping system would use and needs to

    • Yeah, I'll never understand why adding "independent 3rd party" is supposed to make things better. That roughly translates to "larger footprint".

    • Management doesn't care. THEY don't use the scanner.

  • If you're a manager and need a fingerprint scanner to tell whether your employees are at work, please relinquish the title to someone more qualified.
  • If they agree to use the biometric sensors as a condition of being hired, then they have no grounds for objection. If the company institutes a new policy requiring biometric scanning AFTER the employee has started working there, it's pretty much a unilateral change in the contract... but probably the best recourse if you object is to seek employment elsewhere anyway. The first question a lawyer will ask is, "How have you been harmed?", because their commission is based on the dollar value of the harm done t
  • by duke_cheetah2003 ( 862933 ) on Friday November 30, 2018 @05:28PM (#57728556) Homepage

    because it prevented workers from fraudulently signing in on behalf of their colleagues to mask absences.

    This right here. When people are called out on theft, and anti-theft measures are implemented, the thieves are the ones who bitch and whing on at how awful the new policy is.

    Lee argued the business had never sought its workers' consent to use fingerprint scanning, and feared his biometric data would be accessed by unknown groups and individuals.

    More like he feared his buddy couldn't clock in for him anymore when he was hungover from the weekend.

    Glad a judge saw through this guy's bogus claim.

    • by Falos ( 2905315 )

      >If you have nothing to hide you have nothing to fear

      Actually there's not much to fear period. A "buddy" can have a silicone mold of your print in within hours.

      • That depends on just how much effort a bunch of low wage labourers would go to in order to game the system. They have increased the complexity of this by an order of magnitude compared to handing someone else their card.

  • While I like the idea of forcing certain biometric data to have some modicum of security, I have to wonder about this. The only thing I use my fingerprint for right now is to log into my work laptop. So if someone sold my fingerprints on the black market I don't think that there's anything that a nefarious actor to do with them, without also physically getting a hold of my work laptop. As far as I know they're not used to take out credit, make purchases, sign legal contracts, create obligations, or anything
  • ... already - I think I read Australia was a penal colony anyway :-)
    • Australia stopped being a penal colony long before fingerprinting was demonstrated to be worth the cost of doing.

An adequate bootstrap is a contradiction in terms.

Working...