Your Rights to Email Privacy in the Workplace

Can your employer read your work emails?

If you use an email account provided by your employer, your messages are likely being monitored. Research by the Trades Union Congress suggests a significant proportion of UK employers use electronic monitoring, with email surveillance among the most common methods.

The short answer is yes: employers in the UK can monitor work email accounts. However, they cannot do so without limits. Legal protections balance an employer's legitimate business interests against your right to privacy.

What the law says about workplace email monitoring

Several areas of law shape your email privacy at work: data protection legislation, human rights law, employment law and case law all play a role.

Under the UK General Data Protection Regulation and the Data Protection Act 2018, any monitoring must be lawful, fair and transparent. Employers need a valid reason to monitor emails and must tell staff that monitoring takes place. They cannot read through your messages on a whim. Where monitoring creates high privacy risks, employers must conduct a data protection impact assessment beforehand.

Common reasons employers give for monitoring include:

• Checking that company systems are being used appropriately
• Preventing harassment or bullying
• Protecting confidential business information
• Ensuring compliance with legal or regulatory requirements
• Investigating suspected misconduct

The Human Rights Act 1998 also applies. Article 8 gives everyone the right to respect for their private life and correspondence. This does not mean your employer can never read your emails, but any interference with your privacy must be proportionate.

Employers are legally required to monitor only to the extent necessary for a legitimate purpose. Blanket surveillance of every message without good reason would be harder to justify than targeted checks when there is genuine cause for concern.

Your situation may be slightly different. ask a question below ↓ and our editorial team will reply with our advice.

What employers should tell you

Transparency is a legal requirement. Employers should have a clear policy explaining what monitoring takes place, why it happens, and the consequences of misuse. This policy is often included in an employee handbook, IT usage policy or contract of employment.

If your employer monitors emails, you should be told:

• That monitoring happens and what form it takes
• The reasons for monitoring
• Who has access to the information collected
• How long records are kept
• What is considered acceptable use of work email

If you have not been given this information, ask your HR department or manager for a copy of the relevant policy. The Information Commissioner's Office provides guidance on workplace monitoring at ico.org.uk, explaining both employer obligations and employee rights.

Personal emails at work

Most people accept that emails sent from a work account about work matters are fair game for monitoring. The picture becomes more complicated with personal messages.

Human rights law recognises that employees may have a reasonable expectation of some personal correspondence, even at work. However, if your employer has a clear policy stating that work email accounts should only be used for business purposes and that all messages may be monitored, your expectation of privacy is significantly reduced.

If privacy matters to you, using a personal email account on your own device is generally safer. Check your employer's policies on personal device usage first. Even if you use a personal webmail service on a work computer or work network, traces could remain: some employers log internet activity or use software that captures keystrokes.

What to do if monitoring has gone too far

If you believe your employer has monitored your emails unlawfully, start by checking what policies are in place. Look at your contract, staff handbook and any IT or data protection policies. If monitoring has occurred without notice or beyond what the policy allows, your employer may have acted improperly.

You can raise the matter informally with your manager or HR department. If informal discussions do not resolve the issue, make a formal complaint through your employer's grievance procedure. Keep records of relevant communications and dates.

Where you believe your data protection rights have been breached, you can complain to the Information Commissioner's Office at ico.org.uk. In more serious cases, particularly if you have suffered damage from unlawful monitoring, you may be able to bring a claim in court. Citizens Advice or a solicitor specialising in employment law can help you understand your options. Trade union members may also find support through their union representative.

A few simple habits can help protect your privacy: read your employer's IT policies carefully, assume anything sent from a work account could be read, use personal devices for private correspondence where permitted, and think before you send. For detailed guidance, the ICO website and GOV.UK are reliable starting points.

The Next Step