© 2026 CoAd. All rights reserved.
A biometric time clock records work hours by reading a physical identifier such as a fingerprint, hand geometry, or facial scan instead of a badge or PIN. Because the identifier cannot be handed to a coworker, these clocks are used mainly to stop buddy punching and tighten timekeeping accuracy.
Most systems do not store an actual image of the finger or face. They convert the scan into a mathematical template and compare future scans against it, which reduces but does not eliminate privacy risk. The clock feeds punches directly into payroll, so accuracy at the clock translates into fewer manual edits, cleaner overtime calculations, and better records under the DOL fact sheet on FLSA recordkeeping if you ever have to defend hours worked in a wage claim.
The legal exposure is state-specific and significant. Illinois' Biometric Information Privacy Act requires written notice, a written release from the employee before collection, a published retention and destruction schedule, and a ban on selling the data, and it allows employees to sue directly for statutory damages per violation. Texas and Washington have their own statutes enforced by their attorneys general, and several other states regulate biometric data through broader privacy laws. Union settings may also require bargaining before rollout.
Two accommodation issues come up regularly. An employee with a disability or a worn fingerprint may be physically unable to enroll, and an employee may object to hand or finger scanning on sincere religious grounds. In both cases you generally need an alternative punching method. Have consent forms, a retention policy, and a documented alternative in place before the first clock is installed, not after.
In several states, yes. Illinois requires written notice and a signed release before collection, plus a published retention and destruction schedule. Other states impose their own requirements enforced by state officials. Because damages can run per violation, collect consent and publish the policy before the first clock goes live.
Offer an alternative. A disability or a worn fingerprint can make enrollment impossible, and an employee may also object on sincere religious grounds. In both situations the employer generally must provide another way to record time, such as a badge or a unique login, and document the accommodation.
Most do not. The scan is converted into a mathematical template that later scans are compared against, which reduces but does not remove privacy risk. The template is still regulated biometric data in states with biometric privacy statutes, so retention limits, security duties, and restrictions on selling the data still apply.