Essex School Reprimanded for Unlawful Use of Facial Recognition Technology

Chelmer Valley High School failed to obtain proper consent and conduct necessary data protection assessments before implementing facial recognition for canteen payments.

The Information Commissioner's Office (ICO) issued a formal reprimand to Chelmer Valley High School in Chelmsford.
The school did not complete a Data Protection Impact Assessment (DPIA) before using the technology.
Parents were informed through an opt-out letter, which does not meet legal consent requirements.
Students were not given the opportunity to exercise their own data protection rights.
The school has since begun obtaining explicit opt-in consent and conducted a DPIA.