What is the personal data being unnecessarily collected here? Reference pictures for facial recognition? Cause attendance would be collected regardless...
Linked article states:
"The General Data Protection Regulation, which came into force last year, classes facial images and other biometric information as being a special category of data, with added restrictions on its use."