Privacy at work: what you're entitled to
If you work in the UK, you have certain privacy rights, even while on the job. Your employer can set rules about how you use their equipment and monitor your activity in some circumstances, but there are legal limits on what they can do.
The Information Commissioner's Office publishes guidance on workplace privacy. This article summarises the main points covering email and phone use, workplace monitoring, and how your personal data should be handled.
Image and Photo Use Rights Checker (UK)
Someone has used your photo (or your child's) on a website, social media or marketing and you are not sure what your rights are. Answer a few questions and we will explain the position and what to do.
Try our Image and Photo Use Rights Checker (UK) free, here on this site →Using email and phones for personal matters
The Human Rights Act incorporates Article 8 of the European Convention on Human Rights, which protects your right to respect for private and family life. In practice, the extent to which this applies at work depends heavily on context and employer policies. Where employers provide clear notice restricting personal use, they may significantly limit it.
If no policy exists, reasonable personal use is generally considered acceptable. Problems tend to arise when usage becomes excessive or interferes with work.
You may wish to clarify the following with your employer:
- What is the policy on personal phone calls and emails during work hours?
- Can you access personal email accounts on work devices or the company network?
- Should personal calls be made on a mobile rather than a work landline?
- Are you able to receive emergency calls during the working day?
Getting clear answers to these questions can help you ensure compliance with workplace policies. If your employer has written guidelines, ask for a copy.
Your situation may be slightly different. ask a question below ↓ and our editorial team will reply with our advice.
Workplace monitoring and surveillance
Employers may monitor staff activity for legitimate reasons, including protecting company systems, checking productivity, or preventing misconduct. However, they must do so lawfully and proportionately.
Under UK data protection law, employers are legally required to tell you if monitoring takes place, though compliance varies in practice. This includes checking emails, recording calls, tracking computer use, or using CCTV. Covert monitoring is permitted only in exceptional circumstances, such as investigating suspected criminal activity, and must still be a proportionate response to the problem being addressed.
Employers conducting monitoring may have undertaken a Privacy Impact Assessment to evaluate the risks and benefits, in line with GDPR requirements.
If your employer monitors communications, they should explain who has access to the information and how personal messages will be treated. In most cases, employers will have a policy that distinguishes between work and personal correspondence.
Some workplaces allow staff to mark emails as personal. If this system exists, use it consistently. It can help protect private messages if your employer ever needs to review your account, for example during an absence.
Your personal data at work
Your employer holds personal information about you, including contact details, payroll records, absence history, and performance reviews. Under the UK General Data Protection Regulation and the Data Protection Act 2018, they must handle this data fairly, keep it secure, and retain it only for as long as necessary.
You have the right to request access to your personal data. This is known as a subject access request. Your employer must respond within one month in most cases. They cannot charge a fee unless your request is excessive or repetitive, and any fee must be reasonable and based on administrative costs.
If you believe your employer has mishandled your data or breached your privacy, raise a complaint with them first. If informal discussions do not resolve the issue, you might consider mediation or alternative dispute resolution before making a formal complaint to the Information Commissioner's Office. Trade unions, where present, can also provide support in privacy disputes.
For detailed information on your rights under data protection law, visit the ICO website or check the employment section on GOV.UK.
Thank you
What are my rights?
They decided to take my laptop anyway - On taking my laptop I specially requested them not to invade on my iCloud account which is where my PERSONAL phone was linked with for temporary purposes.
My HR and line manager both said they were looking to conduct checks only on my browser history.
When I got the laptop back it appeared on the programs > recent documents that they in fact went through my iCloud account and found private images of my wife and me. They also opened up photos of my 2yr old daughter that at the time was sick and in a vulnerable state. (Picture used to show docs due to an up burst of a rash)
They are now saying I broke the policy for the storing of pornographic material stored on company laptop..
Have I a case?? Did they break my privacy protections ??
Would it be unlawful for the registered keeper (Employer) to interfere with the natural course of justice after returning the section 172 without good reason or cause.
I assume that this would be an invasion of privacy.
Ask Your Privacy a question
Ask our editorial team a question and we will reply with our advice. Tell us as much about your situation as you can: the more detail you give, the more useful our answer can be.
You do not need to use your real name. Please do not include your full address, phone number, email address, or the names of other people. We may edit or remove identifying details for privacy and legal reasons.
Comments are moderated before publication.