The UK still follows the GDPR, and the GDPR doesn't care who owns the device. Device ownership can change what's considered a legitimate interest. For example

The UK still follows the GDPR, and the GDPR doesn't care who owns the device. Device ownership can change what's considered a legitimate interest. For example if you set up a pay telephone box you can implement monitoring of keypresses to prevent fraud. But you can't just record whatever you want without justification, and you can only store the data as long as your justification requires and use it only for that purpose. Everything above that requires consent.