Quick answer
Philippine employers may use fingerprint scanners, facial recognition, and other biometric attendance systems, but employees retain their data privacy rights. The employer must establish a lawful basis, explain the processing, collect only what is necessary, protect the information, and justify how long it keeps it. A company policy or signed consent form does not, by itself, satisfy these requirements.
Employees can request information about the system, access their personal data, challenge inaccurate records, and seek deletion or restriction where legally justified. They may also raise objections and complain to the National Privacy Commission (NPC). However, privacy rights do not create an unconditional exemption from every lawful attendance requirement. The applicable rules depend on the information collected, the employer’s legal basis, and the system’s actual operation. privacy.gov.ph
What information does a biometric attendance system collect?
Depending on its design, a system may process:
Fingerprint images or mathematical fingerprint templates.
Facial photographs, facial measurements, or recognition templates.
Employee names, identification numbers, and device identifiers.
Clock-in and clock-out times, location information, and verification results.
Ask what the system actually captures and retains. A photograph, a biometric template, and a timestamp are different records and may require different safeguards and retention periods.
A template does not become anonymous simply because it is stored as numbers or cannot readily be viewed as a photograph. If the employer or provider can use it to identify or distinguish an employee, the personal-information rules remain relevant. NPC Advisory Opinion No. 2023-025 explains that biometric information can identify a person directly or through its link with other information. That opinion concerns a financial-services proposal; it is not blanket approval for workplace biometrics. privacy.gov.ph
Are all biometrics “sensitive personal information”?
Not automatically under the Philippine Data Privacy Act.
The statutory classification must be checked against Section 3(l) of Republic Act No. 10173. The NPC has treated facial photographs used for identification as personal information. A dataset may nevertheless contain sensitive personal information—for example, birth dates, health information, or protected government-issued identifiers.
This distinction affects the employer’s legal basis. Legitimate interest under Section 12(f) cannot independently authorize processing sensitive personal information. Where Section 13 applies, the employer must satisfy one of its permitted grounds. privacy.gov.ph
When is biometric attendance lawful?
The employer must identify an applicable legal basis
Section 12 of the Data Privacy Act recognizes several grounds for processing personal information, including consent, contractual necessity, compliance with a legal obligation, and legitimate interests.
These grounds have conditions. An employer relying on an employment contract must establish the necessary connection between the processing and that contract. An employer invoking a legal obligation should identify the actual law or regulation.
The need to record attendance does not automatically establish the need to collect biometrics. The employer must also comply with proportionality: processing should be necessary and not excessive, and the purpose should not reasonably be achievable through other means. privacy.gov.ph
Legitimate interest requires an assessment
Under NPC Circular No. 2023-07, an employer relying on legitimate interest must assess:
TestWhat the employer must establishPurposeA specific, actual, lawful interest in the processing.NecessityA necessary and lawful method, with proportionate data collection.BalancingThat the processing does not override employees’ fundamental rights and freedoms.
The employer must document the assessment and regularly evaluate compliance. Relevant considerations include privacy risks, safeguards, reasonable employee expectations, and alternative methods.
For attendance, the practical inquiry is whether the employer can explain why its chosen biometric system is justified compared with options such as supervised timekeeping, access cards, or another reliable method. No alternative is automatically sufficient in every workplace. privacy.gov.ph
Consent must be a real choice
Where consent is the legal basis, it must be freely given, specific, informed, and evidenced through written, electronic, or recorded means.
The employment relationship raises particular concerns about genuine choice. In Advisory Opinion No. 2023-020, involving employee breath testing, the NPC highlighted the difficulty of freely consenting where workers depend on their employer and cannot refuse without adverse consequences. Although that opinion addresses different processing, its discussion is relevant when evaluating workplace consent.
An employer should not describe biometric enrollment as voluntary while threatening consequences for withholding the very consent on which it relies. Conversely, a valid non-consent basis may make consent unnecessary. privacy.gov.ph
What should employees be told?
The employer should provide an accessible privacy notice before processing, or at the next practical opportunity permitted by the applicable rules. Employees should be able to understand:
What information will be collected.
Each purpose and the legal basis for processing.
How the system operates and whether automated decision-making is involved.
Who receives or can access the information.
How long the information will be retained.
The employer’s identity and privacy contact.
How employees can exercise their rights or complain.
A notice stating only “for attendance” may leave significant questions unanswered if the system also performs facial matching, sends data to a service provider, or makes decisions affecting employees.
Ask specifically whether the device retains original images, creates templates, or transfers information to cloud storage. These questions help clarify the scope and method of processing. privacy.gov.ph
Can an employee refuse or request another attendance method?
An employee can raise an objection and request an alternative, but the legal outcome is fact-dependent.
The NPC recognizes a right to object where processing relies on consent or legitimate interest. For legitimate interest, the objection involves the balance between the employee’s rights and the employer’s interest. The employer must address the objection and explain any applicable lawful basis or compelling reason for continuing; merely repeating “company policy” does not resolve the issue. privacy.gov.ph
If consent is withdrawn and no other lawful basis supports continued processing, the employer must stop the affected processing without undue delay. Withdrawal does not retroactively invalidate processing that was lawful before withdrawal. privacy.gov.ph
A practical response is to write to HR and the data protection officer (DPO), explain the concern, and request a workable arrangement. Examples include repeated fingerprint failures, a disability affecting enrollment, unexplained vendor access, or uncertainty about what information is stored.
Continue documenting your attendance and work. Avoid simply abandoning the attendance process while the dispute remains unresolved.
Can refusal lead to dismissal?
Neither dismissal nor immunity from discipline follows automatically.
In Systems and Plan Integrator and Development Corporation v. Ballesteros, G.R. No. 217119, April 25, 2022, the Supreme Court reiterated that dismissal for willful disobedience requires intentional misconduct of the required character and an order that is reasonable, lawful, known to the employee, and related to the employee’s duties. That decision did not establish a general rule permitting dismissal for refusing biometric enrollment.
The employer must establish the applicable ground and comply with dismissal procedures. Seek prompt advice if you receive a notice to explain, suspension, or termination notice. lawphil.net
What if the scanner records the wrong attendance?
Request access to the records relating to you and identify the disputed entries precisely. The NPC’s access guidance includes information about processing purposes, recipients, retention periods, and significant automated decisions—not just confirmation that the employer holds data. Access to your information does not ordinarily entitle you to coworkers’ records. privacy.gov.ph
Submit a correction request supported by available evidence, such as:
Your schedule and approved overtime or leave.
Emails or messages showing you were working.
Supervisor confirmations.
Screenshots of failed scans or error messages.
Relevant payslips and attendance reports.
Ask HR to review any resulting payroll or disciplinary action.
A computer-generated attendance report is not automatically conclusive. In Ballesteros, the Supreme Court found that the employer’s unauthenticated photocopied printouts did not substantiate the alleged habitual tardiness and undertime. The lesson is to examine the reliability and supporting evidence of a disputed record. privacy.gov.ph
What about fully automated deductions or decisions?
A device recording time is different from an automated system making a significant decision without human involvement.
Section 18 of NPC Circular No. 2023-04 requires consent where automated processing is the sole basis for a decision producing legal effects or significantly affecting the individual. Ask whether payroll adjustments or disciplinary decisions are automatically imposed and request meaningful review of disputed results. privacy.gov.ph
How must employers protect and retain biometric data?
NPC Circular No. 2023-06 requires privacy and security measures, including privacy impact assessments, controlled access, documented retention policies, and secure disposal.
For a biometric attendance system, useful questions include:
Who can enroll employees, export templates, or change attendance records?
What encryption, authentication, access logging, and security testing protect the system?
What does the service provider do with the data?
How are records removed from devices, servers, and backups?
What happens when an employee leaves or the employer changes providers?
Outsourcing storage does not remove the employer’s responsibility to ensure that its processor implements appropriate protection. Circular_16-01Repeal_30Nov2023_CLEAN[6083]
How long can the employer keep the records?
There is no universal biometric-retention period applicable to every Philippine workplace under the general privacy framework.
Retention must be justified by the purpose and applicable requirements. Attendance and payroll records should be assessed separately from the biometric templates used to verify identity. A reason to preserve evidence of hours worked does not automatically justify preserving every original fingerprint image or facial template for the same period.
Employees may request erasure or blocking when data is unlawfully processed, used for unauthorized purposes, or no longer necessary. However, deletion is not absolute: necessary retention for legal obligations, legal claims, or other recognized grounds may justify refusing all or part of a request. Ask the employer to identify the particular records and reasons involved. Circular_16-01Repeal_30Nov2023_CLEAN[6083]
What happens if biometric information is exposed?
Report suspected exposure promptly to the DPO. Preserve any breach notice, suspicious message, or evidence showing what happened.
Under NPC Circular No. 16-03, mandatory notification generally arises when all these conditions exist:
The data involves sensitive personal information or information that can enable identity fraud; the circular expressly includes biometric data in the latter category.
There is reason to believe an unauthorized person may have acquired it.
The unauthorized acquisition is likely to create a real risk of serious harm.
For a breach requiring notification, the general deadline is 72 hours from knowledge or reasonable belief that it occurred, covering notification to the NPC and affected individuals, subject to the circular’s permitted exceptions and conditions.
Not every technical incident requires individual notification. Equally, an employer should not dismiss a biometric exposure merely because it classifies the information as ordinary personal information. privacy.gov.ph
Practical steps for employees
Get the documents. Request the attendance policy, privacy notice, enrollment form, and DPO contact details.
Describe the specific problem. Identify excessive collection, missing explanations, inaccurate logs, suspected disclosure, or another concrete concern.
State the remedy sought. Request clarification, access, correction, an alternative attendance method, restricted processing, or justified deletion.
Preserve proof of delivery. Keep email acknowledgments, ticket numbers, and dated correspondence.
Maintain your work records. Document attendance while using an authorized reporting method.
Escalate through the appropriate process. Privacy complaints and employment disputes may require different remedies.
Keep only evidence you lawfully possess or can obtain. Do not access coworkers’ biometric records, use another person’s login, or download an entire personnel database to prove your concern.
How to complain to the National Privacy Commission
Ordinarily, first notify the employer or other concerned entity in writing about the alleged violation and give it an opportunity to act. Under the NPC’s amended Rules of Procedure, the requirement is satisfied where appropriate action was not taken in a timely manner or no response was received within 15 calendar days of receipt.
The NPC may waive this prerequisite for properly established good cause or qualifying serious violations. Urgent harm should therefore be explained and supported, rather than treated as requiring an unconditional wait.
A formal complaint should identify the parties, narrate the facts, state the requested relief, and include supporting evidence, prior correspondence, verification, and a certification against forum shopping. privacy.gov.ph
Use the NPC’s official complaint instructions and downloadable form. Its guidance provides for notarization and submission in person, by courier, or through the designated email channel. Check the linked fee schedule and applicable filing requirements. An informal inquiry is not necessarily a properly filed complaint. privacy.gov.ph
Do not confuse the 15-calendar-day complaint prerequisite with the deadline for fulfilling a data-rights request. NPC Advisory No. 2021-01 generally requires fulfillment without undue delay and within 30 working days after receipt of the request and necessary supporting documentation. Complex or numerous requests may receive an additional period of up to 15 working days, with notice explaining the extension. Government agencies are subject to the applicable Republic Act No. 11032 requirements. privacy.gov.ph
Common mistakes to avoid
Assuming every biometric system is prohibited—or that every system is lawful because management approved it.
Treating a signature as proof that consent was freely given.
Accepting “encrypted” or “stored as a template” as a complete answer to privacy concerns.
Requesting deletion of records that you need preserved for a pay or disciplinary dispute.
Ignoring a notice to explain while pursuing a privacy complaint.
Posting biometric samples, personnel records, or coworkers’ information publicly.
Get urgent legal help when dismissal is threatened, disputed attendance is affecting pay, biometric information appears exposed or misused, or important evidence may be destroyed. Do not assume that contacting the NPC suspends a separate employment deadline.
Frequently asked questions
Does signing a biometric consent form waive my privacy rights?
No. Section 20 of NPC Circular No. 2023-04 states that a waiver of data privacy rights, including the right to complain, is void. privacy.gov.ph
Can government employees also raise privacy concerns?
Yes. The privacy framework covers government processing, subject to specific statutory exceptions. An agency invoking an exemption must establish its application; public employment does not make every biometric record unrestricted public information. privacy.gov.ph
Must all biometric data be deleted immediately when I resign?
Not necessarily. Ask for deletion of information no longer needed and a written explanation of any continued retention. Different records may have different lawful retention grounds. privacy.gov.ph
Can the employer reuse attendance biometrics for unrelated purposes?
The original attendance purpose is not blanket permission for unrelated processing. New uses must have an applicable lawful basis and comply with transparency, legitimate purpose, and proportionality. privacy.gov.ph
Official sources
NPC circulars and advisories, including the rules on consent, legitimate interest, security, and breach management.
Systems and Plan Integrator and Development Corporation v. Ballesteros, G.R. No. 217119
This article provides general Philippine legal information, not advice for a particular dispute. The employer’s documents, system configuration, and surrounding facts may change the assessment. Sources checked: 23 October 2026.
Double-click to edit...