Fingerprint time tracking is not prohibited in Spain. But the AEPD has made it so complicated that any company using it without a supporting collective agreement is taking on a serious legal risk.