On 12 October 2022, the Information Commissioner's Office (ICO) opened a public consultation on its draft guidance outlining the regulatory data protection standards that entities monitoring employees must comply with. The guidelines outline the conditions under which employers are allowed to collect and store data, noting the need for identifying a specific lawful basis. In particular, the guidance states that employers collecting sensitive data, such as biometric data, have to conduct a data protection impact assessment. Finally, the guidance notes the legal obligation to inform workers if they employ automated decision-making and profiling systems. The stakeholders are invited to submit their comments by 11 January 2023.
Original source