Analysis
Scanning a driving licence and checking visitors against a list feels like good security. Often it is more data than the risk justifies. A case for starting with the decision the check will change, and working back from there.
Guide
What to collect at sign-in, which lawful basis fits, how to show a privacy notice on a kiosk, how long to keep records, and how to handle photos, ID scans and subject access requests.
Analysis
The visitor book on the reception desk looks free. In practice it shows every visitor's details to the next one, cannot run a roll-call, and quietly keeps personal data for as long as nobody throws it away.