Biometric convenience needs a workable route for the pupil who says no

01

A choice on a form can become a barrier in the queue

A school may describe biometric recognition as a convenient way to obtain a meal, enter a building or use a service. The test of that description is what happens to a pupil who does not participate. If the alternative involves repeated explanations, delay or dependence on a particular adult, an apparently optional system can become difficult to refuse in practice. The technology decision has become a question about access.

DfE updated its guidance on children’s biometric information on 17 June 2026. Its stated audience includes independent-school proprietors, and the revised document addresses consent, pupil refusal and alternative arrangements. The update should prompt a review of current practice. It should not be reported as the date on which the underlying pupil rights were first created.12

02

The pupil’s objection is a material part of the design

Section 26 of the Protection of Freedoms Act 2012 requires the relevant authority to stop processing a child’s biometric information when the child refuses or objects, irrespective of parental consent, and to ensure reasonable alternative means are available. The precise statutory framework and exceptions must be checked in the actual circumstances. Parental agreement alone does not answer every question about participation.3

This is why a school’s implementation review needs to include the pupil’s route through the service. Does a member of staff know that an objection can be raised? Can the pupil use the alternative immediately? Is the arrangement reliable when the usual staff member is absent? These are practical questions about making an established right effective, rather than a judgement that biometric recognition is invariably unsuitable.

03

Start with the service, then explain the data

Our assessment is that the school should identify the service problem before evaluating a recognition method. A payment queue, access-control process and attendance record are different activities. Each has its own users, consequences of error and alternatives. Combining them beneath a broad “smart campus” ambition can make it harder to explain why this information is needed for this purpose.

The data-protection question is also wider than possession of a parental form. ICO guidance on biometric recognition explains the additional conditions required where biometric information is used to identify people uniquely. A controller needs to establish the relevant legal basis, assess the risks and make the processing transparent. The school’s explanation should connect those requirements to the actual system, rather than a generic statement that consent has been obtained.4

04

A working alternative has to remain ordinary

Consider a hypothetical catering arrangement. Most pupils identify themselves at a terminal; another pupil uses an alternative route. The comparison should examine whether both routes provide dependable access to the meal, not whether they use identical technology. It should also examine what happens during a busy period, a staffing change or an equipment fault. A process that works only during a demonstration has not yet established dependable access.

In a boarding setting the same issue may arise at more than one time of day or in more than one building. That does not mean one biometric choice governs every residential service. Each use needs its own explanation. The school should understand whether withdrawal from one activity is accurately reflected across relevant records, while avoiding unnecessary sharing of the reason a pupil has chosen an alternative.

05

Regulatory action shows why timing matters

The ICO’s published 2024 reprimand concerning a school’s facial-recognition catering system identified a failure to complete a data-protection impact assessment before introduction. That is a historical regulatory finding about that case, not evidence of the prevalence of failures in independent schools. Its relevant lesson is procedural: a later assessment cannot change the fact that the original deployment began without the required prior assessment.5

School Connection’s interpretation is that procurement and data governance need to meet before installation. If a project depends on assumptions about consent, data flows or pupil participation, those assumptions belong in the decision paper. Discovering them after equipment has been installed can turn an avoidable design issue into a difficult operational dispute. The most useful evidence is therefore available while the school can still change the proposal.

06

A complaint should feed back into the system design

Our separate June analysis follows a data complaint from receipt to responsible action. Biometric processing adds a more specific question: can the school make a pupil’s choice effective before a complaint becomes necessary? Staff receiving an objection should have a dependable route to act. A family should not need to navigate several teams to find the person able to alter the processing.

The governing evidence should describe how participation, withdrawal, records and alternatives remain aligned. Counts of returned consent forms may be relevant, but do not establish that a child understood their choice or that an alternative works. Nor does pupil satisfaction alone settle the legal assessment. Rights, practical access and the quality of the service must all remain visible without being collapsed into one success score.

07

The continued watch is about implementation

June’s revised document provides a clear point for a school to confirm the current guidance and revisit its practice. It does not require a presumption that every school needs to buy, replace or withdraw a system. The justified response depends on the activity and evidence. Schools using no biometric recognition should not be presented as facing an invented equipment-compliance project.

We will watch for regulator clarification and stronger public evidence of how alternatives operate in schools. The assessment would become more favourable where a school can demonstrate informed participation and dependable access for those who decline. It would become more concerning where the practical burden of refusal undermines the choice the school says it offers. The pupil’s ordinary experience remains the test that the paperwork cannot complete.

Leadership questions

Questions that turn the development into a governing conversation.

What we are monitoring next

Publication is the beginning of the watch.

• Changes to applicable biometric guidance and regulatory interpretation.
• Published evidence about practical alternatives and the implementation of pupil choice.
• Dependable alternatives and a demonstrable prior assessment would strengthen assurance; burdensome refusal routes or unreconciled records would weaken it.

Continue the evidence trail

Read across the historical record

• A parent’s data complaint can cross the whole school: the June change independent leaders need to understand ↗