The HSE (Health & Safety Executive) recommends you follow a clear policy, gain consent, and maintain confidentiality. Always follow UK data protection and employment laws [2].