On 23 November, the Spanish Data Protection Agency (AEPD) published a new guidance on presence control processing using biometric systems. Although the AEPD guides do not have the status of a regulation, it does establish the criteria to which its actions will respond in the application of the GDPR. This guide changes the scenario, sets