UK mulls making employers ask before installing bossware
The Register
UK gov wants employers to ask staff before installing surveillance software like keystroke loggers and AI scoring tools. One in three UK firms already monitor workers digitally, up from one in five just two years ago.
The UK government has opened a consultation asking whether companies should be legally required to consult employees before deploying so-called bossware — the catch-all term for software that tracks, scores, or manages workers using everything from CCTV to AI-driven productivity algorithms. The Department for Business and Trade hasn't picked a lane yet. It's weighing three options: leave things to voluntary guidance, introduce a statutory code of practice, or impose a hard legal duty to consult recognized unions or elected worker reps before rolling out monitoring tech.
The numbers driving this are stark. Research cited in the consultation found that a third of UK organizations now actively monitor employee digital activity, up from one in five according to an ICO study conducted just two years prior. That's a fast climb, and it tracks with the broader rise of workplace AI tools that don't just watch what employees do but make decisions about them — flagging underperformers, ranking output, even influencing pay or promotion calls through algorithmic management.
Ministers aren't pretending this technology is all bad. The consultation acknowledges genuine upside: better productivity, smarter investment decisions, economic growth when monitoring tools are deployed thoughtfully. But the government is equally blunt about the risks — invasive surveillance that outstrips any real business need, and biased outcomes when systems lean on messy or incomplete data to judge human performance.
What's trickier than the policy question is the definitional one. The government's proposed scope for workplace monitoring technology is deliberately wide, folding in access control systems, biometric scanners, location trackers, keystroke loggers, and any software that uses automated decision-making or AI. The consultation itself asks whether that net is cast too wide, too narrow, or just right, which suggests even Whitehall isn't sure where bossware ends and ordinary IT infrastructure begins.
Stephanie Lees, a data protection specialist at Pinsent Masons, points out the practical fallout: any statutory consultation duty would stack on top of GDPR, UK employment law, and the EU AI Act, adding fresh compliance overhead for companies already stretched thin. The consultation runs through September 30, and it sits inside the government's larger Make Work Pay agenda — meaning the fate of that shiny new AI workforce-optimization platform IT wants to buy may soon depend less on procurement and more on HR sign-off.
My take
Good — bossware has spread through offices with roughly the oversight given to a new coffee machine, and workers deserve a say before software starts scoring their every keystroke. The real test is whether Whitehall picks the statutory consultation option instead of toothless guidance, because voluntary codes have a long track record of being ignored by exactly the employers most eager to surveil. Given how casually companies have bolted AI onto HR systems already, a legal duty to actually talk to staff first feels less like red tape and more like basic decency.
Read more about this at: The Register
