POPIA biometric consent: the step most farms get wrong on seasonal hands

What getting consent right protects you from, and what skipping it costs

Here is what good practice looks like, and it is not complicated. Before a single fingerprint goes onto your system, every seasonal worker has signed a short, plain consent that says what you are taking, why, who will see it, and how long you will keep it. The scanner at the gate captures the print, the consent sits in the same file, and if the Information Regulator ever asks, you hand over both. That is POPIA biometric consent done properly, and in South Africa it is the difference between a lawful system and an unlawful one.

Now the version most farms actually run. In the first week of the season a farm captures 200 fingerprints, one per new picker, straight onto the clocking system. Fast, efficient, and not one signed consent behind any of them. The farm has just processed 200 sets of special personal information with no lawful basis. Nobody notices, until a dismissed worker complains, or a competitor tips off the Regulator, and the fine is measured in millions.

The scanner is not the risk. The missing consent is. And because it is missing at the moment of capture, you cannot fix it afterwards, you can only prevent it. This guide is how.

Why POPIA treats fingerprints and faces as special data

POPIA, the Protection of Personal Information Act, sorts the data you hold into ordinary and special. Ordinary is a name, a phone number, an address. Special is the sensitive category the law fences off: health, race, religion, and, the one that matters here, biometric information. A farm worker fingerprint or a face scan is not ordinary personal data. Under the Act it sits in the same protected class as a medical record.

That classification has a hard consequence. Section 26 starts by prohibiting the processing of special personal information altogether. You may only do it if you fall inside one of the exceptions in section 27, and for a farm running a clocking system the realistic exception is consent. No consent, no exception, no lawful basis. The processing itself becomes the breach, whether or not anyone is ever harmed by it.

This is why biometric clocking is a bigger question than the payroll filing farms usually worry about. PAYE and UIF are routine. Biometric data on your employees is not. Get it wrong and the exposure is administrative fines of up to R10 million, and for serious cases, criminal liability. The Regulator has already shown it will act: its first fine, in 2023, was R5 million.

The two consent moments most farms miss

There are two moments where consent has to happen, and farms tend to miss both, in different ways.

The worker you already have. If permanent and returning staff have been clocking in on a fingerprint reader for three seasons, and no one ever signed a consent, you are not compliant just because it is habit. Existing biometric processing needs existing consent. The start of a new season is the natural moment to go back and close that gap for everyone already on the system.

The worker arriving at the gate. The new seasonal intake is where the volume is, and where the rush is worst. Two hundred people in a week, each one enrolled on the scanner in the thirty seconds it takes to capture a print. That is exactly when the consent step gets dropped, because it feels like the thing slowing the queue down. It is also the moment it matters most, because that is when the processing begins.

The same pressure that makes a farm skip its checks during a compressed intake makes it skip consent. If you are already tightening your pre-hire checks, the seasonal worker data consent belongs in the same fifteen minutes, not in a separate task nobody owns.

Consent built into onboarding, not bolted on

The fix is structural, not a reminder to try harder. If consent is a separate form in a separate drawer, it will be skipped under pressure every time. If it is a step inside the onboarding flow, one the process will not let you pass without, it happens by default. That is the whole idea: make the compliant path the easy path.

In practice that means the consent is captured at the same table, in the same sitting, as the fingerprint. Not a verbal “is that okay?” over the scanner, which POPIA does not accept, but a signed record. And the record has to be specific. General guidance is clear that a valid biometric consent names the system, states the purpose, and gives the retention period, how long you will hold the data and when you will delete it. A tick on a page that just says “I agree to company policies” is not consent to biometric processing.

The scanner takes thirty seconds. The consent takes one more. Skip it, and you have processed special data with no right to.

What “informed” actually requires

POPIA defines consent as a voluntary, specific and informed expression of will. Those three words each carry a test most farm consent forms fail.

Voluntary means the worker has a real choice. This is the one farms get most wrong: biometric enrolment cannot be a condition of employment. You cannot tell a picker that the job depends on giving a fingerprint and then call the fingerprint consented. If there is no alternative offered, a commissioner or the Regulator can find the consent was not free, and it falls away. In practice you offer an alternative clocking method for anyone who refuses, even if almost nobody uses it.

Specific means consent for this purpose only, clocking and attendance, not a blank cheque to use the data for anything later. Informed means the worker actually understood, which on a farm means the consent is explained in a language the worker speaks, not handed over in dense English to someone who reads isiZulu or Sepedi. Plain words, out loud, before the finger touches the scanner. Explain what you take, why, who sees it, and how long you keep it. That is the whole of being informed, and it takes a minute.

It sits alongside the rest of your BCEA onboarding paperwork as one more thing you can prove you did properly.

A start-of-season POPIA biometric consent readiness check

One page to run before the first worker reaches the scanner this season. If you can tick all of it, your consent holds. Pin it where onboarding happens.

Labour Link's Workforce Control builds the consent into the onboarding itself at hr.labourlinksoftware.co.za, so the biometric enrolment and the signed, purpose-specific consent happen in the same step, in the worker's language, and land in the same file. POPIA-compliant onboarding is not a separate compliance project you bolt on at the end of the season. It is what proper onboarding already looks like: the fingerprint and the right to hold it, captured together, once.