Back to Blog
Operations

The Government Is Consulting on AI Staff Monitoring. What UK SMEs Must Know Before 30 September 2026

The government's consultation on workplace monitoring technologies closes 30 September 2026. If you use software to track attendance, flag emails, or schedule staff with AI, here is what the proposed rules mean.

James Paulinson4 min read
Share

If your business uses any software to track attendance, log performance, monitor emails, or manage shifts with AI, a government consultation closing on 30 September 2026 directly concerns you. The proposals could require employers to consult staff before introducing these tools. You have three weeks to respond or prepare.

What counts as a "workplace monitoring technology"?

The government defines workplace monitoring technologies (WMT) as digital tools used by employers to collect, track, analyse, or make decisions based on information about workers and their activities. Under this definition, all of the following qualify:

  • Time and attendance software that flags lateness automatically
  • Email or communication monitoring platforms
  • GPS tracking for field workers and drivers
  • AI scheduling tools that generate rotas or assign tasks
  • Performance dashboards fed by software usage data
  • Algorithmic management systems that set workloads or score output

If you use any of these - or plan to - the consultation applies to your business.

What are the three regulatory options being considered?

The Department for Business and Trade is consulting on three possible approaches:

Option What it means for employers
1. Statutory code of practice A legally recognised code sets minimum standards for transparency, fairness, and worker voice. Breach of the code can be cited as evidence in employment tribunal.
2. Legislative duty to consult Before introducing or changing WMT, employers would be legally required to consult trade unions or elected staff representatives.
3. Non-statutory guidance only Government publishes guidance without legal force. Employers choose whether to follow it.

Options 1 and 2 would create real obligations for SMEs. Option 2 in particular would require a formal consultation process before deploying any new monitoring or AI tool that affects your staff.

What does UK GDPR already require?

Before any new law arrives, UK GDPR already places obligations on you. Workers can challenge decisions made solely by automated means if those decisions have a legal or similarly significant effect - affecting pay, performance review, dismissal, or shift allocation, for example.

If your AI scheduling tool removes someone's shift without a human reviewing the decision, you may already be in breach. The WMT proposals would extend this principle across more types of monitoring, not just fully automated decisions.

What should your business do before 30 September?

You are not required to respond to the consultation. But these three steps are worth taking now:

  1. Audit your monitoring tools. List every piece of software that collects data about how your staff work, where they are, or how they perform. Include HR systems, scheduling platforms, time-tracking apps, and email tools.
  2. Check your privacy notices. Your employee privacy policy should explain what data you collect and why. If it does not mention monitoring software, update it before any new rules arrive.
  3. Consider responding. If the duty-to-consult option becomes law, SMEs with no union recognition will face a consultation process with elected staff representatives before deploying new tools. Feeding your views in now - via the online survey or email to wmtconsultation@businessandtrade.gov.uk - may help shape whether smaller employers get a proportionate regime.

The AI angle

AI is specifically highlighted in the consultation because its use in workforce management increases both the scale and the speed of decisions that affect workers. An algorithm scoring a driver on route efficiency, or flagging a customer-service agent after three minutes of silence, does so at a pace and volume no human manager could match. The government's concern is that workers cannot understand or challenge outcomes if they cannot see how the system works.

If you are using AI agents to manage scheduling, workload assignment, or performance alerts, the safest position is to ensure a human reviews any AI output before it affects an individual worker's pay, hours, or standing. That is not just good practice under the current consultation - it is already the direction of UK GDPR.

The full 68-page consultation document is available on GOV.UK. Responses close at 11:59pm on 30 September 2026.

Frequently asked questions

What is the UK workplace monitoring technologies consultation?

The government launched a consultation on 8 July 2026, closing 30 September 2026, on rules governing digital tools used to track, monitor, or make decisions about workers. It is part of the Employment Rights Act 2025 reform agenda and covers three possible regulatory approaches.

Which businesses does the workplace monitoring consultation affect?

Any UK employer using software to monitor attendance, communications, location, or performance - including AI scheduling tools and algorithmic management systems - is in scope. Proposals could require employers to consult staff before introducing new monitoring or AI tools.

What do UK GDPR rules already say about monitoring staff with AI?

Under UK GDPR, workers can already challenge decisions made solely by automated means if those decisions have a legal or significant effect, such as shift removal, pay changes, or performance scores. This right exists regardless of the outcome of the new consultation.

How can an SME respond to the workplace monitoring consultation?

Respond via the online survey on GOV.UK or by emailing wmtconsultation@businessandtrade.gov.uk. Responses close at 11:59pm on 30 September 2026. Contributing now may influence whether SMEs receive a lighter-touch regulatory approach under whichever option the government selects.

Found this useful?
Share
JP

James Paulinson LinkedIn

Co-Founder, SMEAutomate

James Paulinson is the co-founder of SMEAutomate. With two decades across advertising, technology, and consulting, he focuses on helping boutique businesses and founders scale with AI-powered workflow automation.

Get automation insights in your inbox

Practical tips for UK SMEs. 1–2 per month. No spam, unsubscribe any time.