The UK government is considering a legal requirement for employers in Great Britain to consult workers before deploying workplace monitoring technology, commonly known as "bossware." The proposal is part of a consultation that remains open until September 30, and it covers everything from AI-powered productivity scoring to keystroke logging and biometric surveillance.
The Department for Business and Trade is reviewing whether current rules on workplace surveillance are still adequate. Ministers have not settled on an approach. Options on the table include non-statutory guidance, a statutory code of practice, or a legal duty to consult recognized trade unions or elected employee representatives before introducing workplace monitoring technology (WMT).
What counts as 'bossware'
The consultation defines WMT broadly. It includes CCTV, access control systems, biometric technologies, location tracking, keystroke monitoring, productivity software, and systems that rely on automated decision-making or AI. The government is asking whether that definition is too broad, too narrow, or about right.
AI features prominently in the consultation, but the proposals extend beyond artificial intelligence. WMT can incorporate automated decision-making and algorithmic management, raising questions about transparency, accountability, and impact on workers. Deciding what qualifies as "bossware" may be trickier than deciding what to do about it.
Why the government is acting
The consultation is part of the government's broader "Make Work Pay" reforms. Officials argue that WMT can improve productivity, investment, and economic growth when used well. But they also warn of "risks to privacy and autonomy," "disproportionate or unnecessary surveillance," and "biased or unfair outcomes" from monitoring systems that rely on incomplete or inaccurate data.
The push comes as workplace monitoring becomes more common. Research cited in the consultation found that approximately 1 in 3 UK organizations now actively monitor employees' digital activity. That is up from 1 in 5 two years earlier, according to research from the Information Commissioner's Office (ICO), the UK data protection regulator.
Compliance burden grows
Stay ahead of the AI curve
The most important updates, news, and content — delivered weekly.
No spam. Unsubscribe anytime.
If a statutory consultation duty is imposed, employers would face additional compliance burdens alongside existing obligations under GDPR, local employment laws, and the EU AI Act. Stephanie Lees, a data protection specialist at law firm Pinsent Masons, said the proposals could reshape how companies approach workforce technology.
"Employers will need to think carefully about how they introduce monitoring tools, not just whether they are lawful," Lees said. "The consultation signals that worker voice could become a central part of that process."
Lees added that rolling out AI-powered workforce optimization could become as much an HR exercise as an IT one. Compliance teams, she noted, will have more reading material if the statutory route is chosen.
What happens next
The consultation runs until September 30. After that, the government will decide whether to proceed with guidance, a code of practice, or a legal requirement. The outcome will affect employers across Great Britain, from small businesses to large enterprises.
The article was published on August 4, 2026, with the consultation already underway. The government has not indicated a timeline for a final decision after the consultation closes.
For now, employers watching the space have a clear signal: the era of silent surveillance may be ending. Whether that leads to a lighter touch or a heavier rulebook depends on how the consultation lands.