Privacy at work: monitoring, cameras and employment data

1. Describe the processing before reaching conclusions

Identify the system and what it records: logins, location, visits, images, productivity or communications. Security logs may later be used to assess employees, so ask about the actual and announced purpose. Check the privacy statement, handbook and separate notices you received. Distinguish data about you from general business information. Ask which organisation is responsible, whether an outside supplier processes data and who sees the results. A foreign supplier does not automatically make monitoring unlawful, but raises access, transfer and safeguard questions. Describe observations rather than treating a system's potential capabilities as proof that they are being used. Dates, messages and identifiable uses help frame a question the employer can answer concretely.

2. Assess necessity and proportionality

An employer must explain why processing is needed and why a less intrusive approach will not suffice. Protecting money or customer data may be a purpose but does not justify every method automatically. Consider duration, frequency, staff affected and sensitivity. Continuous screenshots differ from a limited investigation into a particular event. Ask whether security data are later used for performance assessments or disciplinary action. Signing a handbook does not resolve every question. Because employment involves dependency, freely given consent is often difficult to establish. Request a separate explanation of purpose, legal basis and balancing, and put uncertainties in writing. Assess both the original collection and later uses instead of assuming one valid security purpose covers all employment decisions.

3. Cameras, location and covert monitoring

Images and location data can reveal much about behaviour and contacts. A sign announcing cameras does not make every use permissible. Ask which area is filmed, whether audio is recorded and why continuous tracking is needed. Covert monitoring has strict additional requirements: suspicion or a practical problem is not blanket permission for unlimited surveillance. AP guidance addresses a targeted, temporary approach and prior consideration of risks. Do not disable security systems through technical countermeasures. Gather policy, relevant messages and a chronology instead, and request explanation. If accused of misconduct, assess both the monitoring and the resulting employment measure. A privacy issue and an allegation about conduct are related questions but do not automatically determine one another's outcome.

4. Works council, privacy officer and personnel records

The works council often has a formal role concerning rules for staff-data processing and employee-tracking systems. This can also arise where a system could track staff but is not yet used that way. Ask what was approved and within which limits. A data protection officer, where appointed, supervises privacy compliance internally; HR is not automatically that same independent role. For your own file, request access specifically to your personal data. The right concerns personal data and processing information, not necessarily every entire document or other people's data. Indicate the period, category or decision you need to understand. This produces a useful request and distinguishes it from a general employment complaint or a demand for unrestricted corporate files.

5. Prepare access, correction or complaint requests

State whether you seek an explanation, access, correction of factual errors or assessment of unlawful processing. Identify events and retain your sent request. A disagreement with an assessment is not always an objective inaccuracy requiring deletion; ask to attach your response and explain the processing. An organisation should normally respond to a privacy request within one month; conditional extensions require timely explanation. If refused, request reasons and available challenge or complaint routes. Share only identification information that is necessary. An AP complaint and a court claim about pay or dismissal have different purposes and deadlines. Record those separately rather than expecting the privacy regulator to grant the employment remedy you want.

6. Handle health, home working and evidence safely

Medical data require additional protection. Discuss diagnoses and medical limitations with the occupational physician; managers do not automatically have access to your full medical file. Home working does not lower the threshold for technical surveillance. Ask whether task and outcome agreements achieve the same purpose less intrusively. Prepare a chronology and keep material lawfully available to you. Do not download customer databases or colleagues' mailboxes to prove a point. Store documents securely and share selectively with an adviser. Privacy rights do not suspend employment-law deadlines. A dismissal, pay suspension or penalty may require immediate action alongside an access request. Keep both tracks visible so that a slow information dispute does not prevent timely protection of your income or job.

Practical checklist

• Identify system, data, period and concrete consequences.
• Keep the privacy notice, monitoring policy and relevant messages.
• Ask about legal basis, necessity, access and retention.
• Involve the works council or data protection officer where appropriate.
• Track employment-dispute deadlines alongside the privacy request.