‘At present all employers have to comply with the Data Protection Act 1998 (DPA) when conducting employee surveillance, as they will be gathering and using personal data about living, identifiable individuals (location, movements, internet browsing history and so on). Part 3 of the Information Commissioner’s Office (ICO) Data Protection Employment Practices Code is an important document to follow to avoid DPA breaches. It covers all types of employee surveillance.’
Law Society's Gazette, 31st July 2017
Source: www.lawgazette.co.uk