A high school in the United Kingdom introduced facial recognition technology for student catering services. Students were processed under an opt-out consent model and no DPIA was completed before deployment. The ICO found that students were deprived of the ability to properly exercise their rights and freedoms in relation to the processing between March and November 2023.