Standard
Presence Inference Limitations Standard
This standard sets normative limits on what may be inferred from network and system presence signals about a person's work. It operationalizes the prohibition in the Workforce Network Monitoring Policy (Section 7, "Presence is not proof of work") by defining, in enforceable terms, how presence-derived signals may and may not be used, the caveats any presence-derived metric must carry, how the error modes of presence data are handled, and who governs presence metrics.
- Type
- Standard
- Version
- 0.1.6
- Date
- 2026-10-24
- Owner
- Data Protection Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Privacy
- Review frequency
- Annual and upon material privacy, employment-law, framework, or monitoring-technology change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Core normative limit: presence is not proof of work
- 5. Requirements
- 6. Roles and responsibilities
- 7. Framework alignment
- 8. Limitations
Frameworks it maps to
- ISO/IEC 27001:2022
- NIST CSF 2.0
- NIST Privacy Framework 1.0
- CSA CCM v4.1
- GDPR (EU)
- UK GDPR
- Article 29 Working Party Opinion 2/2017 on data processing at work (WP 249)
- UK ICO, Employment practices and data protection: Monitoring workers (June 2024)
- ILO Code of Practice on the Protection of Workers' Personal Data (1997)
- Council of Europe Recommendation CM/Rec(2015)5 (processing of personal data in the context of employment)
Related documents
- Workforce Network Monitoring Policysecurity
- Human Capital and Ethical Conduct Frameworkgovernance
- Privacy and Data Governance Policyprivacy
- Insider Risk Programme Frameworksecurity
- Logging and Monitoring Standardsecurity
- Data Retention Schedulegovernance
Next
All Documents