Is collecting employees' biometric fingerprints considered a legitimate use?

Because we have to keep attendence and ensure security of premises and process payroll as per attendence and work dont by employee. So that does have to have say in this context?