If you were already a bit nervous about GDPR compliance... this will make you down right worried.
A regional authority in Sweden ran a trial in one of their schools, using facial recognition technology to record attendance - saving teachers time taking the roll.
The school agreed to the trial.
The parents were notified and agreed to the trial.
But the regulator wasn't notified... and smacked them with a GBP16,800 fine!
https://www.bbc.com/news/technology-49489154