The Line Between Space Data and Surveillance
The same sensors can answer two very different questions. Where the line sits, how programmes cross it, and what holds it.
People · Analysis
Occupancy analytics and workplace monitoring use overlapping technology for different purposes. The distinction is not technical; it is about the question asked.
The boundary discussed in “The Line Between Space Data and Surveillance” also matters when digital work systems are introduced alongside workplace analytics. A team evaluating ethical employee monitoring in the context of ethical employee monitoring should state the purpose, use only necessary settings and explain clearly what managers can review before any data is collected.
The two questions
"How is this space used?" — the answer is a count, aggregated, about a place.
For a public, independent reference related to “The Line Between Space Data and Surveillance”, consult the ICO guidance on employment practices. Its principles provide a useful check on scope, terminology, governance and the claims made during procurement or review.
"Where is this person, and for how long?" — the answer is about an individual.
The same sensor can produce both. The programme's design decides which.
How programmes cross the line
Gradually, and usually by request rather than by design.
A manager asks whether their team is coming in.
HR asks for attendance data during a dispute.
A security investigation asks who was on the floor.
Each request is individually reasonable and each one, granted, changes what the system is.
What holds the line
Aggregation at source: counts rather than identities leave the sensor layer.
A reporting floor: no figures below a threshold, so small groups cannot be inferred.
No desk-to-person mapping retained, which is the technical decision that makes individual attribution impossible rather than merely prohibited.
A written purpose that excludes individual use.
And a named person who refuses requests, because a policy with no one empowered to apply it does not survive the first senior request.
The data that makes it easy to cross
Assigned desks with sensors: occupancy of a named person's desk is attendance data however it is labelled.
Badge data, which is identified by construction.
Booking data, which carries names.
Where you hold these, the separation has to be deliberate and enforced rather than assumed.
The consent problem
Employees cannot meaningfully refuse workplace monitoring: declining has consequences.
Which means consent is usually not a valid basis in jurisdictions where that matters, and the organisation must rely on something else with a proportionality test attached.
That test asks whether a less intrusive method would do, and for most occupancy questions one would.
When individual data is genuinely needed
Safety: knowing who is in the building during an evacuation.
That is a separate system with a separate purpose and a separate retention, and conflating it with space analytics is how both become untrustworthy.
Keep them apart, including in procurement.
The test to apply
Could this output be used to say something about a named person?
If yes, you are running a monitoring programme, whatever it is called, and the obligations and the consultation requirements are different.
What to check
Could your data identify an individual's attendance, technically?
Is there a reporting floor?
Has anybody ever requested individual data, and what happened?
And is there a named person who can say no?