Biometric Time Clock
A biometric time clock is a time and attendance device that identifies an employee by a physical characteristic, such as a fingerprint, the geometry of the hand, the face or the iris, instead of by a badge, card or PIN.
The reason employers install them is a single behavior: one person clocking in for another. A badge can be lent and a PIN can be shared; a hand cannot. The reason employers get sued over them is a single omission: collecting the biometric without the written consent that three states require. Both are covered below.
Types in use
| Type | What is captured | Notes |
|---|---|---|
| Fingerprint | A template derived from the ridge pattern | Most common and cheapest; struggles with worn or dirty fingers in manual trades |
| Hand geometry | Shape and dimensions of the hand | Tolerant of dirt and minor injury; larger units |
| Facial recognition | A template of facial features | Contactless; the type most affected by lighting and by mask policies |
| Palm or finger vein | Vein pattern beneath the skin | Contactless, hard to spoof, higher cost |
| Iris | Pattern of the iris | Highest accuracy; rare in attendance use |
Two points about what is stored. Most devices keep a mathematical template rather than an image, and cannot reconstruct the fingerprint or face from it. That is a genuine security property, but under the Illinois statute below it does not change the legal position: a template derived from a fingerprint is still a biometric identifier.
Why employers use them
Buddy punching, one employee clocking in for an absent colleague, is the specific problem a biometric clock solves, and it is the reason the devices concentrate in shift-based work: manufacturing, healthcare, retail, logistics and hospitality. Our time theft statistics page covers what the research says about how much of this actually happens, which is less than vendors suggest and more than zero.
The secondary benefits are the ones any electronic clock delivers: no lost cards, no forgotten PINs, punches that flow straight into payroll, and a record that satisfies the FLSA's requirement to keep accurate hours. The attendance tracking guide compares the alternatives, including the badge-based systems in our RFID employee tracking entry, which are worth considering first precisely because they are not biometric and so avoid the rules below.
The Illinois rule, and why it matters everywhere
The Illinois Biometric Information Privacy Act, usually called BIPA, is the reason "biometric time clock" and "class action" appear in the same sentence so often. It applies to any private entity collecting biometric identifiers from people in Illinois, and it requires, before collection:
- informing the person in writing that a biometric identifier is being collected or stored;
- informing them in writing of the specific purpose and length of term for which it will be collected, stored and used;
- obtaining a written release, which since August 2024 expressly includes an electronic signature;
- publishing a retention schedule and destroying the data when the purpose is satisfied or within three years of the person's last interaction, whichever comes first;
- not selling, leasing or trading the data, and not disclosing it without consent.
The statute is enforced by private lawsuit, with statutory damages of 1,000 dollars per negligent violation and 5,000 per intentional or reckless one. Until 2024 courts had read each scan as a separate violation, which produced claimed damages in the billions. The amendment in SB 2979, signed on 2 August 2024, provides that repeated collection of the same identifier from the same person by the same method is a single violation with a single recovery. The exposure per employee is now bounded; the duty to get written consent before the first scan is unchanged.
One clarification that comes up constantly: a badge, RFID card or fob is not a biometric identifier under BIPA, because it identifies the card rather than the body. The statute's definitions are specific, and our Illinois workplace privacy page covers the other Illinois rules that apply to employee data alongside it.
Texas, Washington and the rest
Texas requires notice and consent before capturing a biometric identifier for a commercial purpose, limits retention, and is enforced by the Attorney General rather than by private lawsuit. Washington requires notice and consent before enrolling a biometric identifier in a database for a commercial purpose, with similar public enforcement. Several other states have folded biometric data into general privacy statutes or into breach notification laws, and New York City requires signs where commercial establishments collect biometrics from customers, though not from employees.
For an employer, the practical rule is the Illinois one, applied everywhere: written notice of what is collected and why, a written release before enrollment, a published retention and destruction schedule, and no sharing with anyone the release does not name. An organization that does that in every state has met the strictest standard and does not need to track which of its sites is which. The monitoring consent form on this site includes a biometric section built on those elements.
The alternative-method question
Some employees will refuse, and some cannot enroll: worn fingerprints, certain disabilities, religious objections to facial capture. A policy that makes the biometric clock the only way to be paid for a shift creates a problem the moment one of them arrives. The workable policy offers a non-biometric fallback, a badge or a PIN with supervisor confirmation, and states in the written notice that it exists. That costs a little of the buddy-punching protection for the few who use it and removes the largest avoidable dispute.
Key points
- A biometric time clock identifies an employee by fingerprint, hand, face, vein or iris instead of a badge or PIN. It exists to stop buddy punching.
- Devices store a template rather than an image, but under Illinois law a template derived from a fingerprint is still a biometric identifier.
- BIPA requires written notice of purpose and retention period, a written release before collection, a published destruction schedule, and no sale or undisclosed sharing.
- Damages are 1,000 dollars per negligent and 5,000 per intentional violation. Since the August 2024 amendment, repeated scans of the same person are one violation.
- A badge or RFID card is not a biometric identifier. Badge-based systems avoid these rules entirely.
- Texas and Washington require notice and consent with public enforcement. Meeting the Illinois standard everywhere is simpler than tracking sites.
- Offer a non-biometric fallback and say so in the notice. Some employees cannot enroll and some will refuse.
Frequently asked questions
What is a biometric time clock?
A time and attendance device that identifies an employee by a physical characteristic, usually a fingerprint, hand geometry, face, vein pattern or iris, instead of a badge, card or PIN. Its purpose is to make sure the person clocking in is the person being paid.
Are biometric time clocks legal?
Yes, in every US state, but Illinois, Texas and Washington require notice and consent before a biometric identifier is collected, and Illinois requires it in writing with a published retention schedule and allows employees to sue. Most other states have no specific rule, though general privacy and breach laws may apply.
Can an employee refuse a biometric time clock?
In Illinois, consent must be given in writing before collection, so an employee can decline to sign, and an employer that scans them anyway has violated the statute. Elsewhere the employer can generally require it as a condition of employment, but disability and religious accommodation duties mean a fallback method is needed in practice.
Does a biometric clock store my fingerprint?
Almost all devices store a mathematical template derived from the fingerprint or face rather than an image, and the image cannot be reconstructed from the template. Under Illinois law the template is still a biometric identifier and the consent and retention rules apply to it.
What is buddy punching?
One employee clocking in or out on behalf of another who is not there. Badge and PIN systems cannot prevent it because the credential can be handed over. A biometric clock prevents it because the credential is the person.
What changed in BIPA in 2024?
Senate Bill 2979, signed on 2 August 2024, provides that collecting the same biometric identifier from the same person by the same method more than once is a single violation with at most one recovery, rather than a separate violation per scan. It also confirmed that an electronic signature is a valid written release.
Is an RFID badge a biometric identifier?
No. A badge, card or fob identifies the object rather than the body, and is outside BIPA's definition of a biometric identifier. That is one reason badge-based attendance systems are worth considering before biometric ones.