You are legally required to record each employee's working hours. At the same time, you are also legally prohibited from collecting more data than necessary. Two rules that seem to push in opposite directions, and in the middle, an SME that just wants to know when its staff clocks in without the AEPD opening a case against it.