GDPR took the headlines in May 2018 but it seems that since then it may have fallen off the radar. This would be a dangerous trap to fall in to and there is some interesting cases coming through across the EU and, in particular in Scandinavia.
A recent case that received a great deal of interest in the Danish legal press involved the monitoring employees via GPS which is often a requirement in relation to sales force teams/those undertaking deliveries and such services.
The case shows that monitoring of employees via GPS has to be very limited and must serve a necessary objective purpose. Surveillance is a highly regulated area under GDPR with good reason. It is interesting to see that courts outside the UK jurisdiction are wrestling very similar issues in relation to the implementation of GDPR.
No doubt, the ICO will be starting to look more clearly and closely at such areas going forward.