Covert Deployment

Requests for monitoring that people are unaware of arrive with reasons that sound compelling. The answer is almost always no, and the reasons the answer is no are worth having ready.

Why notice matters

It is a legal requirement in most data protection regimes. Processing personal data requires informing the people concerned, with narrow exceptions.

It is what makes the processing fair, which is a separate legal test from lawfulness in several regimes.

It is the control that makes everything else meaningful. A person who does not know they are monitored cannot exercise access rights, cannot object, and cannot correct an error about themselves.

It also improves the system, which is the practical argument: people who know a camera counts them do not object; people who discover it identifies them do.

The exceptions, and why they are narrow

Covert monitoring for a specific investigation is permitted in some jurisdictions under strict conditions: a specific suspicion of serious wrongdoing, authorisation at a senior level, a defined scope and duration, no less intrusive alternative, and a review.

These conditions are cumulative and they are checked afterwards.

They do not support standing covert capability, which is what most requests are actually for.

They do not support "we might need it later", which is the usual framing.

A covert deployment that has run continuously for a year is not an investigation. It is unnotified monitoring with a paperwork trail.

Requests that get made

Worth recognising, because they are phrased persuasively.

"We cannot tell them or they will change their behaviour." That is the purpose of notice: monitoring is meant to deter, and if the behaviour changes because people know, the objective was achieved.

"It is only for a short period." Then the investigation conditions apply, and they should be met.

"They agreed in their contract." A general clause does not constitute notice of a specific processing operation, and consent in employment is a weak basis.

"It is a public space." Public visibility does not mean automated analysis needs no notice.

"The system is already there, we are just adding analysis." Covered elsewhere: adding analysis changes what is happening and requires fresh notice.

What to do instead

Notify, and monitor openly. The deterrent effect is the point.

Where a specific investigation is genuinely warranted, use the defined process: authorisation, scope, duration, review, and a record.

Where the concern is a specific individual, that is a management or a security matter with its own procedures, not a reason to build a capability.

Where the concern is theft or safety, detection of conditions works openly and does not require anyone to be unaware.

How to decline

Name the legal position rather than expressing discomfort.

Name the exception process and offer to help with it if the conditions are genuinely met.

Ask what the underlying concern is, which frequently has a better answer.

Escalate rather than complying quietly. A capability built covertly is discovered eventually, and the discovery is worse for everyone than the refusal would have been.

Record the request and the refusal, because the second one will be easier and because the precedent matters.

The exception conditions, in full

Where covert monitoring is permitted at all, the conditions are cumulative and checked afterwards.

A specific suspicion of serious wrongdoing, not a general concern.

Authorisation at a defined senior level, recorded.

A defined scope: which areas, which people, which period.

A defined and short duration.

No less intrusive alternative available, with the reasoning recorded.

A review at the end, and deletion of what was not relevant.

Meeting five of six is not meeting the conditions, and a standing capability meets none of them.

Why notice helps the objective

The practical argument, which lands with people the legal one does not reach.

Deterrence requires awareness. A monitoring system nobody knows about deters nothing.

Behaviour changing because people know is the objective, not a contamination of the evidence.

Discovered covert monitoring produces a dispute, a complaint and frequently a story, which costs far more than the thing being investigated.

Open monitoring with a clear notice is accepted; concealed monitoring, once found, is not, regardless of what it found.