On 11 January 2023, the Information Commissioner's Office (ICO) closed its public consultation on its draft guidance outlining the regulatory data protection standards that entities monitoring employees must comply with. The guidelines outline the conditions under which employers are allowed to collect and store data, noting the need for identifying a specific lawful basis. In particular, the guidance states that employers collecting sensitive data, such as biometric data, have to conduct a data protection impact assessment. Finally, the guidance notes the legal obligation to inform workers if they employ automated decision-making and profiling systems.
Original source