Employee Image and Data Use: Limits on Employers in the Digital Workplace

This page is a translation of the original Portuguese text, provided for convenience. It deals with Brazilian law. If there is any discrepancy, the Portuguese version prevails. Read the original in Portuguese

As digital tools spread through the workplace, a delicate question keeps coming back: how far may an employer go in watching, recording, and processing information about the people who work for it? The answer requires balancing the company’s power to run its business against the worker’s privacy, image, and consent. The Brazilian Constitution and data protection law guarantee these rights even inside an employment relationship.

The Employer’s Directive Power and Its Constitutional Limits

A company holds what is known as poder diretivo (directive power), the prerogative to organize productive activity, oversee tasks, and impose disciplinary sanctions. This power flows from the very structure of the employment contract, in which the employee works under the direction of the party that bears the risks of the business. But the prerogative has never been absolute.

The Federal Constitution protects people’s privacy, private life, honor, and image, and declares the confidentiality of correspondence and communications inviolable. These fundamental rights go with the worker through the company’s front door. An employment contract places a person’s professional activity under the employer’s direction. It does not extend to the worker’s personality or private sphere.

This is exactly where the tension arises. On one side, the company needs to protect its assets, its security, and the confidentiality of its operations. On the other, the worker keeps a legitimate expectation of privacy, even if a reduced one in the corporate setting. The legal answer rests on proportionality: a control measure must be suited to its intended purpose, necessary, and as minimally invasive as possible.

Workplace Monitoring: What the Law Allows

Brazilian courts generally accept the monitoring of corporate e-mail, computers, and systems provided by the company, as long as the tool belongs to the employer and the worker knew in advance that monitoring could occur. The logic is straightforward: someone who uses company resources for work purposes cannot claim absolute privacy over that work tool.

The situation is different for personal e-mail, private messaging apps, and the employee’s own cell phone. Accessing that content, even on company premises, tends to violate the worker’s privacy and the confidentiality of communications. The line between the corporate sphere and the personal sphere guides much of the case law on this subject.

Security cameras have limits as well. Installing them in walkways, production areas, or customer service areas is generally accepted as a way to protect company property. Cameras in restrooms, locker rooms, and break rooms, by contrast, offend the worker’s dignity and are rejected, because they reach private spaces that no business interest can justify intruding upon.

Geolocation tracking and software that measures productivity in real time also need a concrete justification. Following a driver’s route during working hours is one thing; watching where that driver goes outside work hours is another. Control that intrudes on rest time, days off, and family life goes beyond the directive power and becomes abuse.

Transparency is the common thread. Hidden monitoring, with no notice and no legitimate purpose, rarely survives judicial scrutiny. Clear internal policies, rules on the use of equipment, and advance notice that monitoring exists are all things a company should document so it can show good faith and proportionality if a dispute arises.

This balance gained a new layer of complexity as personal data protection rules took hold. Those rules now govern any processing of information about workers, job applicants, and former employees. The employer is no longer just the party monitoring compliance with the contract; it is now a data controller, with specific duties under the law.

A company holds what is known as poder diretivo (directive power), the prerogative to organize productive activity, oversee tasks, and impose disciplinary sanctions.

Use of a Worker’s Image and Processing of Personal Data

A worker’s image is a personality right. It does not pass to the company automatically just because the worker signed a contract. Using an employee’s photos and videos in advertising campaigns, corporate social media, or institutional materials requires specific authorization, preferably in writing, stating the purpose and the length of use.

Generic consent buried in a standard contract clause carries little legal weight. A company that uses an employee’s image without clear authorization, or that keeps publishing it after the employment ends, may be ordered to pay damages for moral and material harm, especially when the company profits from using that image.

When it comes to personal data, the law requires a legal basis for each instance of processing. Performance of the employment contract, compliance with legal obligations, and the employer’s legitimate interest are common grounds, but none of them permits unlimited collection. Sensitive data, such as health information, biometrics, union membership, and racial or ethnic origin, receives heightened protection and may be processed only in limited circumstances.

Collection must follow the principles of specific purpose and minimization: a company gathers only what is necessary for the stated purpose. Asking a job applicant about family planning, sexual orientation, or medical history unrelated to the job is an abusive practice. Workers keep the right to know what data the company holds, how it uses that data, and how long it stores it.

Using third parties to process data, such as payroll companies, recruiting platforms, and electronic timekeeping systems, does not relieve the employer of responsibility. When a company hires vendors that process its employees’ information, it remains obligated to make sure those partners maintain adequate security standards and respect the authorized purposes.

Company Liability and Compliance Best Practices

An employer is liable for harm caused by improper data processing and excessive monitoring. Liability can arise on three fronts: in labor law, through compensation to the injured employee; administratively, before the data protection authority; and in civil law, for violation of personality rights.

To reduce risk, a company should maintain an accessible internal privacy policy, obtain valid consent when consent is the appropriate legal basis, and record the purpose of each collection. Appointing a data protection officer, adopting information security measures, and periodically reviewing contracts round out the precautions that can be expected of it.

A culture of compliance does not benefit only the worker. Companies that handle data transparently reduce legal liabilities, protect their reputation, and build trust with their own workforce. Respecting privacy is no longer a courtesy. It is a legal requirement, with real economic consequences for those who ignore it.

A worker who feels wronged can seek redress. Keeping evidence, such as internal notices, screenshots of improper publication, and witnesses, strengthens the claim. Depending on the case, the requests may include removal of the content, deletion of data stored without a legal basis, and compensation for the harm to privacy and image, in amounts set according to the seriousness and reach of the violation.

Frequently Asked Questions

Can a company read an employee’s work e-mail?

Yes, provided the e-mail account is a company account supplied for work purposes and the worker was told in advance that monitoring was possible. Accessing personal accounts, private messaging apps, or the employee’s own cell phone, even if used at work, violates the worker’s privacy and the confidentiality of communications, and can lead to liability.

Can a company post a worker’s photos on its social media?

Doing so requires specific, informed authorization that states the purpose and the length of use. Consent buried in a generic contract clause has reduced legal effect. If a company publishes an image without clear permission, or keeps it online after the employment ends, it can be ordered to remove the content and compensate the worker for moral and material harm.

What can an employee do about abusive monitoring?

The worker can gather evidence of the excess, such as notices, images, and witness statements, and seek redress through the appropriate channels. It is possible to demand that the practice stop, that data collected without a legal basis be deleted, and that the worker be compensated for the harm to privacy and image. The seriousness of the conduct and the reach of the abuse guide the amount of any compensation awarded.

As informações deste artigo são de caráter informativo e não substituem consulta jurídica individualizada. Cada caso possui particularidades que exigem análise específica.