Computer Monitoring in the Workplace and Your Privacy

Why employers monitor computer use at work

Most employers carry out some form of workplace monitoring. This might be to check that company policies are being followed, to protect sensitive data, or simply to see how time is being spent during working hours. Computer monitoring has become common in many workplaces, and the technology available to employers has grown more capable over the years.

There are legitimate reasons why a business might want to keep track of what happens on its systems. Protecting confidential information, preventing misuse of company resources, and meeting legal or regulatory requirements can all play a part. Some industries have specific obligations around record keeping and data security that make monitoring necessary.

The extent of monitoring varies widely. A small business might do little more than check that staff are not visiting inappropriate websites. A larger organisation may use software that logs keystrokes, takes screenshots, tracks application usage, or records emails and instant messages. Some tools can monitor in real time, while others compile reports for managers to review later.

What often goes unmentioned is the effect this can have on workplace culture. Extensive monitoring can create an atmosphere of distrust, affecting morale and how employees feel about their employer. This is worth considering from both sides of the employment relationship.

How workplace monitoring has changed

Monitoring at work is not new. Employers have long used methods like swipe cards to track when staff arrive and leave, CCTV to watch premises, and call recording in customer service roles. What has changed is the depth and range of monitoring that modern technology allows.

Earlier attempts at surveillance were sometimes intrusive. There have been cases over the years where companies installed hidden microphones or hired investigators to watch staff. These approaches often attracted criticism and were challenged by unions. Today, monitoring tends to be more discreet and more digital. Software can run quietly in the background, collecting data that employees may not fully understand or be aware of. Under data protection law, employers should inform staff about monitoring capabilities, though the level of detail provided varies considerably between organisations.

The shift to remote and hybrid working has added another layer. When staff work from home, employers may feel they have less visibility over what is happening. This has led some businesses to adopt monitoring tools designed for home workers, including software that tracks mouse movements, logs activity levels, or captures webcam images at intervals.

What the law says about monitoring employees

UK law does allow employers to monitor their staff, but there are rules. The main legal frameworks are the Data Protection Act 2018 and the UK General Data Protection Regulation. The UK GDPR is essentially the EU's GDPR as retained after Brexit, with some amendments to reflect the UK's independent status. Together, these laws set out how personal data must be handled, and monitoring data counts as personal data.

Employers need to have a lawful basis for monitoring. In most cases, this will be either legitimate interests or a legal obligation. Consent is another possible basis, though it is rarely relied upon for workplace monitoring because of the power imbalance between employer and employee. Even where consent is not the primary basis, involving employees in discussions about monitoring can help build trust and understanding.

Employers should also be transparent with staff about what monitoring takes place and why. This is usually done through a workplace privacy policy or an acceptable use policy for IT equipment. The concept of reasonable expectation of privacy is relevant here. Employees may have a limited expectation of privacy when using company systems, but this does not mean employers can monitor without restriction. Context matters, and monitoring personal communications or activity outside working hours raises different considerations.

The Information Commissioner's Office provides guidance on employment practices and monitoring. According to the ICO, employers should carry out an impact assessment before introducing monitoring, weighing up the benefits against the effect on employees' privacy. Monitoring should be proportionate, meaning it should not go further than necessary to achieve its purpose.

Covert monitoring is permitted only in highly restricted circumstances. An employer would usually need to have grounds for suspecting wrongdoing, such as fraud or theft, and believe that telling staff about the monitoring would prevent it from being effective. Even then, covert monitoring must be necessary and proportionate, targeted at specific concerns, time limited, and fully documented in line with ICO guidelines. This is not a route employers can take lightly.

For the most up to date guidance on workplace monitoring and data protection, visit the ICO website or GOV.UK.

Your situation may be slightly different. ask a question below ↓ and our editorial team will reply with our advice.

Your rights as an employee

If your employer monitors your computer use, you have certain rights under data protection law. These include:

• The right to be informed about what monitoring takes place, why it happens, and how the data is used
• The right to access any personal data your employer holds about you, including monitoring records
• The right to object to monitoring in some circumstances, though this does not automatically mean the employer must stop
• The right to complain to the ICO if you believe your employer is not handling your data properly

In practice, most employers will set out their monitoring policies in a staff handbook or IT policy. If you are unsure what monitoring applies to you, ask your manager or HR department. They should be able to explain what is recorded, who has access to the data, and how long it is kept. If your organisation has a Data Protection Officer, they can also be a useful point of contact for questions or concerns about monitoring practices.

It is worth keeping up to date with any changes to these policies. As remote working becomes more established and technology evolves, employers may update their monitoring practices. Checking policies periodically can help you understand your current position.

Company equipment and company time are generally treated differently from personal devices and personal time. An employer will usually have more grounds to monitor what happens on a work laptop during working hours than on a personal phone during a lunch break. However, the boundaries can become unclear, particularly when staff use personal devices for work or when work systems are accessible from home.

Practical steps to protect your privacy

While employers do have the right to monitor their systems, there are steps you can take to manage your privacy at work.

Read any IT or acceptable use policies your employer provides. These will usually tell you what is and is not allowed, and what kind of monitoring is in place. If the policies are vague or out of date, you can ask for clarification.

Keep personal activity separate from work devices where possible. If you use a work laptop or phone, assume that your employer could, in theory, see what you do on it. Avoid accessing personal email, online banking, or social media on work equipment unless you are comfortable with that being visible.

Be cautious about what you say in work emails and messaging apps. These may be recorded or reviewed. If you need to have a private conversation, consider whether a work channel is the right place.

If you work from home, be aware that some monitoring tools can capture information beyond your work tasks. Software that tracks activity levels or takes screenshots may inadvertently record personal data if you use the same device for non-work purposes. This could include details visible on screen during personal browsing, or images captured by webcam software. Employers should be transparent about these capabilities, though the level of disclosure varies.

If you believe your employer is monitoring you unfairly or without proper justification, you can raise the matter internally first. Many workplaces have grievance procedures for this. If that does not resolve things, you may be able to make a complaint to the ICO or seek advice from ACAS, the Advisory, Conciliation and Arbitration Service.

For further information on your rights at work, ACAS offers free guidance for employees and employers. The ICO website has detailed resources on data protection and employment. GOV.UK provides an overview of employment law and links to relevant legislation.

The Next Step