The use of biometric personal data such as fingerprints or facial images for access control is not necessarily prohibited. Access control with biometrics is allowed if it is necessary for security purposes. This is stated in the General Data Protection Regulation (UAVG) Implementation Act.
Test
A strict test is then needed as to whether the importance of using biometrics is commensurate with the invasion of privacy. And whether the use of biometrics is the best way to secure access or whether there are other ways.
Example: nuclear power plant
At a nuclear power plant, for example, biometrics may be used for access control. There, the importance of security is very high and only certain people are allowed access.
Example: recreational area
The use of biometric personal data in accessing, for example, a recreational area or the garage of a repair shop cannot pass the test. The need for security is not so great that people can gain access only through the use of biometrics.
