Workplace Privacy: Employee Monitoring and Its Limits

This page is a translation of the original Portuguese text, provided for convenience. It deals with Brazilian law. If there is any discrepancy, the Portuguese version prevails. Read the original in Portuguese

Monitoring employees at work is increasingly common, but the line between an employer’s managerial authority and a worker’s right to privacy calls for careful analysis if unlawful practices are to be avoided.

The Employer’s Managerial Authority and Its Limits

Brazilian law recognizes that employers have what is known as managerial authority (poder diretivo), which gives them the prerogative to organize, supervise, and discipline the performance of work. This authority is grounded in Article 2 of the CLT (Brazil’s Consolidation of Labor Laws), which defines the employer as the party that directs the personal provision of services. But the authority is not absolute. The Federal Constitution sets clear limits, especially the fundamental rights to intimacy, private life, honor, and image under Article 5, item X.

The tension between these two poles, the power to supervise and the right to privacy, has grown considerably with the digital transformation of work. The widespread use of computers, company smartphones, geolocation systems, surveillance cameras, and productivity-monitoring software has created ways of overseeing workers that would have been unimaginable two decades ago. Many companies adopt monitoring practices without giving enough thought to the legal limits, and in doing so they expose themselves to considerable legal risk.

The principle of proportionality is the essential yardstick here. Any monitoring measure an employer adopts must be suitable (capable of achieving its intended goal), necessary (no less invasive means can serve the same purpose), and proportionate in the strict sense (the benefits must outweigh the harm to the worker’s privacy). When any one of these elements is missing, the monitoring may be considered abusive.

This subject is directly related to whistleblower data protection, a topic we cover in a dedicated article.

This subject is directly related to the right to object to data processing, a topic we cover in a dedicated article.

Forms of Monitoring and the Applicable Law

Below, we look at the main types of workplace monitoring and how the law treats each one. Monitoring of company e-mail is among the most debated. The prevailing view in Brazilian labor courts is that a corporate e-mail account is a work tool provided by the employer, so its content may be monitored as long as the employee has been told in advance that this may happen. A worker’s personal e-mail, on the other hand, enjoys constitutional protection even when it is accessed on company equipment, and the employer may not inspect it.

A worker’s right to privacy does not vanish at the company gate: it can coexist with the employer’s managerial authority, but it is never extinguished by it.

Surveillance cameras are another widely used tool. Installing cameras in common work areas (hallways, production floors, reception) is considered lawful, provided employees are notified and the footage is not used to humiliate anyone. Cameras in restrooms, locker rooms, cafeterias, and break rooms, however, are considered strictly prohibited because they disproportionately violate the worker’s intimacy.

GPS tracking of company vehicles or company-issued devices also deserves attention. It is accepted when tied to legitimate purposes such as asset security, logistics, and tracking the working hours of professional drivers. But tracking may not extend to the worker’s rest periods or vacations, or it becomes excessive surveillance.

With the entry into force of Brazil’s General Data Protection Law (LGPD, Law No. 13.709/2018), workplace monitoring gained a new layer of regulation. The LGPD requires that all processing of personal data, including data gathered through monitoring tools, follow principles such as purpose, suitability, necessity, and transparency (Article 6). This means the employer must show a legal basis for the monitoring, tell the worker clearly what data is collected, and make sure collection is limited to what is strictly necessary.

Productivity-Monitoring Software

The rise of remote work has brought with it software that captures screens, logs keystrokes, tracks the websites visited, and even turns on cameras to check that the worker is present. Used indiscriminately, these tools can amount to oppressive surveillance and give rise to moral damages (dano moral, compensation for non-material harm). Taking screenshots at regular intervals or logging every keystroke can reveal a worker’s personal information, passwords to private accounts, and intimate communications, going beyond any reasonable business justification.

The LGPD and Data Due Diligence in Employment Relationships

The LGPD has brought a paradigm shift for companies in how they handle their employees’ data. Data due diligence, in this setting, is a systematic process of identifying, assessing, and mitigating risks related to the processing of workers’ personal data. This practice, once limited to mergers and acquisitions, has become an ongoing necessity for any organization that has employees.

Data mapping is the first step of an effective employment data due diligence. In it, the company identifies all the employee personal data it collects, stores, and processes, including data obtained through monitoring tools. The mapping makes it possible to check whether collection is excessive, whether the legal bases are appropriate, and whether retention periods are proportionate.

As for the legal bases for monitoring, the employee’s consent, although the most intuitive legal basis, is considered problematic by legal scholars. The reason is that the employment relationship is marked by an imbalance of power that can undermine the freedom of consent. Other legal bases, such as the controller’s legitimate interest (Article 7, item IX, of the LGPD) and compliance with a legal obligation (Article 7, item II), tend to be more appropriate, provided they are accompanied by an impact assessment showing that the monitoring is proportionate.

Preparing a Personal Data Protection Impact Report (RIPD) is highly advisable when a company adopts monitoring practices. This document, provided for in Article 38 of the LGPD, lets the organization systematically assess the privacy risks to its employees and document the safeguards it has put in place. The National Data Protection Authority (ANPD) may request this report at any time, and not having one can make the company’s situation worse if an incident occurs.

Best Practices for Lawful Monitoring

Based on our analysis of the legal framework and the guidance of legal scholars, we have identified a set of best practices that companies should follow for workplace monitoring to be considered lawful and proportionate.

Transparency and Advance Notice

The first and most fundamental requirement is transparency. Employees must be told, clearly and accessibly, which monitoring tools are used, what data is collected, for what purposes, and how long it will be stored. This information should be set out in an internal privacy and monitoring policy, preferably incorporated into the employment contract or the company’s internal rules. Advance notice not only satisfies the LGPD’s transparency principle but also strengthens the company’s legal position if the monitoring is ever challenged.

Purpose Limitation and Data Minimization

Monitoring must be tied to specific, legitimate purposes, such as information security, asset protection, compliance with regulatory obligations, or prevention of wrongdoing. Data collection should be limited to the minimum needed to achieve those purposes. Software that indiscriminately captures all of a worker’s activity, without distinguishing between what is relevant and what is personal, violates the minimization principle and exposes the company to significant risk.

Respect for Private Spaces

Even at work, there are spaces and moments that should be shielded from employer surveillance. Meal and rest breaks, the use of restrooms and locker rooms, and personal communications on the worker’s own devices are areas that corporate monitoring should not reach. Preserving these spaces is not only a legal requirement but also helps maintain a healthy workplace and trust in the employment relationship.

Periodic Review and Proportionality

Monitoring practices should be reviewed periodically to confirm they remain necessary and proportionate. The circumstances that justified a given surveillance tool may have changed, making it unnecessary or excessive. This review is part of ongoing due diligence and shows the company’s good faith in handling its employees’ data.

Consequences of Abusive Monitoring

Monitoring that goes beyond the limits of the law can have severe consequences for the employer. In labor law, abusive monitoring can support a claim for constructive dismissal (rescisão indireta) of the employment contract (Article 483 of the CLT), as well as awards of individual or collective moral damages. Where the monitoring affects a significant group of workers, the Labor Public Prosecutor’s Office (Ministério Público do Trabalho) may file a public civil action (ação civil pública) seeking to stop the practice and to obtain collective moral damages.

On the administrative side, the ANPD may impose sanctions ranging from warnings to fines of up to 2% of the company’s revenue (capped at R$ 50 million per violation), and it may also order the deletion of personal data that was processed unlawfully. Publicizing the violation, which the LGPD provides for as an administrative sanction, can cause significant reputational harm to the company.

Evidence obtained through unlawful monitoring may also be ruled inadmissible in court under Article 5, item LVI, of the Federal Constitution, which prohibits the use of evidence obtained by unlawful means. An employer who fires an employee for cause based on information gathered through abusive monitoring may therefore see the for-cause termination overturned in court and be ordered to pay all severance entitlements.

As informações deste artigo são de caráter informativo e não substituem consulta jurídica individualizada. Cada caso possui particularidades que exigem análise específica.