Reply to post:

Our office had the GDPR legal consultants in, their advice was that collecting biometrics for time management was a lawsuit waiting to happen and that the employer must offer an opt-out / alternative path for employees.