It's enforced to the point where the access control system to the building, even if it tracks entry and exit timestamps, cannot be used for e.g. time keeping or to monitor employee attendance. German companies will have to have a separate time keeping system, even if the access control system uses the exact same (RFID) cards for identification.