United Kingdom: Closed consultation on ICO draft guidelines on Data Protection Standards in employment monitoring practices

On 11 January 2023, the Information Commissioner's Office (ICO) closed its public consultation on its draft guidance outlining the regulatory data protection standards that entities monitoring employees must comply with. The guidelines outline the conditions under which employers are allowed to collect and store data, noting the need for identifying a specific lawful basis. In particular, the guidance states that employers collecting sensitive data, such as biometric data, have to conduct a data protection impact assessment. Finally, the guidance notes the legal obligation to inform workers if they employ automated decision-making and profiling systems.