Can a gym, office or building force fingerprint entry?

Turning your fingerprint or face into a door key creates biometric data for unique identification — Art. 9 material, prohibited to process without a narrow exception. For gyms, offices, apartment buildings and schools the only realistic exception is explicit consent — and consent under pressure is void: an employee who’d have to argue with HR, a member who couldn’t enter otherwise, a tenant facing a fingerprint-only lobby has not consented freely. DPAs across Europe have fined employers for compulsory fingerprint clock-in and told schools that canteen finger-scanning needs a frictionless alternative; the pattern of decisions is remarkably uniform: biometrics may be offered, never required, and the alternative (card, code, key, staffed desk) must be equivalent — not a punishment lane. Questions that expose a bad deployment: where are templates stored (on-device/on-card storage is the defensible architecture; a central fingerprint database of all members is a breach jackpot and proportionality fail), what happens on revocation (you can withdraw — deletion of your template must follow), and where is the DPIA — large-scale biometric entry systems require one. Your move against a fingerprint-only setup: request the alternative in writing citing Art. 9; refusal is a clean DPA complaint with a strong fine record behind it. Remember the asymmetry that makes this serious: passwords rotate, fingerprints are forever.