UK workplace monitoring consultation: only one of three options would force an employer to consult workers before installing

The Department for Business and Trade has put three options on the table for how the UK should govern workplace monitoring software, and only one of them would actually force your employer to ask before installing it on your company laptop.

The consultation on workplace monitoring technologies opened on 8 July 2026 as part of the government's Plan to Make Work Pay. The window closes 30 September and applies to England, Scotland and Wales; Northern Ireland is excluded.

The consultation paper lays out three options with very different teeth. The lightest is non-statutory guidance, the kind of explanatory document employers can ignore without consequence. The middle option is a statutory code of practice issued under the Employment Rights Bill, which gives regulators a published standard but no formal pre-deployment step. The heaviest is a legal duty on employers to consult recognised trade unions, or elected employee representatives where there is no union, before installing any workplace monitoring technology.

That last tier is the one that would change what happens on a Tuesday morning when an IT team pushes new software to a fleet of laptops. A consultation duty means the employer has to put the proposal in writing, explain what data the tool collects, and give workers a chance to respond before the install goes ahead. The other two tiers do not.

The proposed scope is wide. The consultation defines workplace monitoring technology to include CCTV, access control, biometric systems, location tracking, keystroke monitoring, productivity software, and any system that incorporates automated decision-making or AI. The paper itself asks whether that definition is too broad, too narrow, or about right.

The pressure to widen the rule comes from the spread of the tools. The consultation cites research showing one in three UK organisations said they actively monitored employees' digital activity, up from one in five in earlier Information Commissioner's Office research. AI, algorithmic management and automated decision-making are flagged as a specific concern, with the government warning that monitoring systems can produce biased or unfair outcomes when they rely on incomplete or inaccurate data.

Employers argue monitoring is needed for cybersecurity, regulatory compliance, and managing hybrid work. Workers and unions argue the same tools, deployed without a process, erode autonomy and let managers draw conclusions from data the worker never sees. A consultation duty does not pick a winner; it forces the conversation to happen before the tool goes live, in a form workers can actually answer.

The proposed UK rule would also sit on top of existing law. The UK GDPR and the Data Protection Act already cover most of the personal data these tools collect, and the EU AI Act applies separately to high-risk AI in employment. Pinsent Masons data protection specialist Stephanie Lees told The Register that a statutory consultation duty would add "a further layer of oversight" on top of those regimes. Whether that layer is needed is one of the questions the consultation is asking.

The open question is enforcement. The Department has not said what penalties would apply if an employer installed monitoring software without consulting workers, or which regulator would police the duty. The consultation paper does not name a lead regulator and asks respondents for views. Until those answers are written into whatever the government eventually proposes, the heaviest option is a line item in an employment tribunal claim; the lightest is a leaflet the employer can ignore.

Responses to the consultation close 30 September 2026.