The Information Commissioner's Office (ICO) has directed Serco Leisure, a leisure center group, to cease the use of facial recognition technology for monitoring staff, citing unlawful processing of biometric data and concerns over fairness and proportionality.