Hello Stack Overflow Community,

I am developing a digital attendance application and need some guidance regarding GDPR compliance. Specifically, I want to know if it is permissible to store scanned handwritten signatures of users.

Here are some details:

The application will be used to track attendance for events and meetings.
Each participant will provide a handwritten signature, which will then be scanned and stored in the database.
The signatures will be used for verification purposes and to maintain records of attendance.
My questions are:

Is it compliant with GDPR to store scanned handwritten signatures?
Are there any specific guidelines or best practices I should follow to ensure compliance?
How should I handle and protect these signatures to meet GDPR requirements?
Thank you in advance for your insights and advice.

I wonder if this is still legal or not at all