I think my employer is monitoring me at work. Can they do that?
Employers have the right to monitor activities in many situations at work. Monitoring in the workplace includes:
- recording on CCTV cameras
- opening mail or email
- use of automated software to check email
- checking phone logs or recording phone calls
- checking logs of websites visited
- videoing outside the workplace
- getting information from credit reference agencies
- collecting information through point of sale terminals, such as supermarket checkouts, to check the performance of individual staff
Data protection law sets out rules about the circumstances and the way in which monitoring can be carried out.
Before deciding whether to introduce monitoring, your employer should:
- be clear about the reasons for monitoring staff and the benefits that this will bring
- identify any negative effects the monitoring may have on staff. This is called an impact assessment
- consider whether there are any, less intrusive, alternatives to monitoring
- work out whether the monitoring is justified
Employers must take reasonable steps to you know that monitoring is happening, what is being monitored and why it is necessary – except in very limited circumstances.
Employers who can justify monitoring once they have carried out a proper impact assessment will usually not need the consent of individual members of staff.
Monitoring electronic communications at work
Your employer can legally monitor phone, internet, email or fax use in the workplace if:
- the monitoring relates to the business
- the equipment being monitored is provided partly or wholly for work
- your employer has made all reasonable efforts to inform you that your communications will be monitored
You should bear in mind that these circumstances cover almost every situation where your employer might want to monitor your electronic communications, except where the monitoring is for purely private or spiteful reasons.
If your employer sticks to these rules, they don’t need your consent before monitoring your electronic communications for any of these reasons:
- to establish facts which are relevant to the business, to check that procedures are being followed, or to check standards – for example, listening to phone calls to assess the quality of your work
- to prevent or detect crime
- to check for unauthorised use of telecommunications systems, such as whether you are using the internet or email for personal use
- to make sure electronic systems are operating effectively – for example, to prevent computer viruses entering the system
- to check whether a communication you have received, such as an email or phone call is relevant to the business. Your employer can open your emails or listen to voicemails but is not allowed to record your calls
- to check calls to confidential help lines. Your employer can listen but is not allowed to record your calls
- in the interests of national security
Secret monitoring
Some employers monitor their workers without informing them that this is happening, for example, by use of hidden cameras or audio devices. This is usually not legal. Guidance under data protection law says that secret monitoring should not be allowed in private areas at work, such as staff toilets, unless there is serious crime involved – for example, dealing drugs.
Employer’s policy on monitoring
Ideally, an employer should have a code of conduct or policy that covers workplace monitoring. If a code or policy has been agreed, it will usually form part of your contract of employment. This means that where an employer is allowed to monitor your activities, these activities could be the subject of disciplinary action if you are using workplace equipment in ways that are not permitted in your contract of employment.
ACAS has produced a guide to social media at work.
What to do if you are unhappy with monitoring at work
If you think that your employer has been monitoring you in a way which is not allowed, you will need expert advice.
You may be able to:
- talk to your employer about the monitoring and try to persuade them to stop. If you’re still working for your employer, you will need to think about whether raising this issue will put your job at risk
- take out a grievance against your employer
- check your contract of employment, staff handbook or anywhere else where your employer might have a policy about monitoring to see what it says
- ask your trade union to help you, if you are a member
Get more information about taking out a grievance (at www.citizensadvice.org.uk ).
If you think that your employer isn’t sticking to the law, you can ask the Information Commissioner to assess whether your employer is meeting their obligations under data protection law.
The Information Commissioner supervises and enforces the law on data protection, and can advise both workers and employers on their rights and duties under the Data Protection Act. There is no charge for this.
If the Commissioner decides that your employer is not following the law, recommendations can be made to them or an enforcement notice can be issued. The Information Commissioner cannot award you compensation.
You can contact the Information Commissioner at:
Information Commissioner’s Office (England, Wales and Scotland)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline: 0303 123 1113 (Monday to Friday from 9.00am to 4.30pm)
Fax: 01625 524 510
Email: casework@ico.org.uk
Website: www.ico.org.uk
Your local Citizens Advice can also advise you if you’re concerned about workplace monitoring.
Get more information
You can find information about monitoring at work on the TUC’s Worksmart website.
The Information Commissioner has a code of practice called the Employment Practices Data Protection Code . This gives guidance on how the Data Protection Act should be used in the workplace.