El tratamiento de datos personales biométricos dentro de entornos laborales en el marco de la Ley Orgánica de Protección de Datos Personales frente al principio de legalidad.

Abstract

The research analyzes the processing of biometric personal data within Ecuadorian work environments, in light of the principle of legality and the Organic Law on Personal Data Protection (2021). This research examines the conflict between the need for corporate control and the guarantee of fundamental rights, highlighting the importance of informational self-determination and human dignity. Biometric data, due to its unique and immutable nature, requires enhanced protection, as its misuse can violate privacy and lead to discrimination or undue control over workers. The 2008 Constitution recognized the right to personal data protection for the first time in the country, while the establishment of the Superintendency of Personal Data Protection in 2023 marked an institutional advance that is still in its beginnings. The research compares Ecuadorian regulations with international standards such as the European Union's General Data Protection Regulation (GDPR) and OECD guidelines, highlighting the need to strengthen oversight, proportionality, and free consent in labor relations. It concludes that the effectiveness of this right depends on its actual application, institutional training, and the consolidation of a legal culture that prioritizes privacy protection in the labor and technological spheres.