Monitoring in the Workplace

Workplace deployments carry obligations beyond general data protection, and they are the ones organisations most often discover late.

General orientation, not legal advice; requirements vary substantially by jurisdiction.

Why the workplace is different

The power imbalance. An employee cannot freely refuse, which undermines consent as a basis and raises the proportionality bar.

Continuity. Monitoring at work is not an isolated interaction; it is the conditions of someone's daily life.

Employment law applies alongside data protection, including consultation duties, collective agreements and rules on changes to working conditions.

Which means a deployment lawful in a public space may not be lawful pointed at staff, and the assessment has to be done separately.

Consultation

A legal requirement in a number of jurisdictions before introducing monitoring, and frequently a condition in collective agreements.

Beyond the requirement, it improves the design. The people doing the work know which detections will be wrong, where the camera cannot see, and which workarounds already exist.

Consult before the decision, not after. Consultation on a completed design is an announcement and is recognised as one.

Respond in writing, including where the answer is no and why. A consultation with no written response is remembered as a meeting.

Proportionality in practice

The test is whether the monitoring is necessary for a legitimate aim and whether a less intrusive means would serve.

Aggregate counting is almost always the less intrusive alternative, which means it must be considered and the rejection reasoned.

Scope matters: which areas, which hours, which detections. Monitoring the whole site continuously when the concern is one loading bay is disproportionate on its face.

Duration matters. A temporary measure for a specific problem is easier to justify than a permanent capability.

Purpose limitation

The boundary most often crossed, and the one that costs most.

Safety detection repurposed for productivity assessment produces the same result it produces in every other monitoring context: people avoid the camera, near-miss reporting falls, and the safety data stops describing the hazard.

State the limitation in writing and enforce it in the first hard case, which is when it becomes either real or decorative.

Decide in advance who decides, because deciding under pressure gets it wrong.

What must be excluded

Welfare facilities, changing areas, medical rooms, rest areas, prayer rooms.

Excluded at the camera configuration level, so no data exists, rather than filtered in the reviewing software.

Publish the exclusion list, which is what makes the assurance credible and invites correction if something was missed.

Health and disability

A question that arrives in every consultation and needs an answer prepared.

A detection system may perform differently for someone with a mobility aid, an atypical gait, or a condition affecting appearance or movement.

Adjustments may be a legal requirement, and a system that repeatedly flags one person because of a disability is a discrimination problem before it is a technical one.

Design the reporting so that a person is not flagged repeatedly without a human looking at why, and have the adjustment route defined before deployment rather than at the first case.

The purpose limitation, written

The document that decides whether the deployment keeps the cooperation it depends on.

What the system is for, narrowly.

What it will not be used for, listed explicitly, including individual performance assessment.

Who may access individual-level data and under what trigger.

Who decides on an exception, named in advance.

Published to everyone affected, not only to representatives.

Tested by the first request and held, which is when it becomes either real or decorative.

The health and disability question

It arrives in every consultation and needs an answer prepared.

A detection system may perform differently for someone with a mobility aid, an atypical gait, or a condition affecting appearance.

Repeatedly flagging one person because of a disability is a discrimination problem before it is a technical one.

Have the adjustment route defined before deployment: who to tell, who decides, what changes.

Design the reporting so nobody is flagged repeatedly without a human looking at why.

Do not improvise the answer in the room, because the answer given there becomes the policy.