A fingerprint is a biometric personal data. Processing it is prohibited unless there is consent, a legal obligation, or necessity for authentication or security purposes. Protection against loss and fraud is not a business interest. The necessity-proportionality requirement is also not met
