ELECTRONIC MONITORING OF EMPLOYEES – LEGALITY

Introduction

Electronic monitoring of employees refers to the use of digital and technological tools by an employer to observe, record, or analyse employees’ activities during employment. It may include monitoring official emails, internet usage, computer activity, attendance through biometric systems, CCTV cameras, GPS/location tracking, access-control systems, keystroke monitoring, call recording, and productivity-monitoring software.

Electronic monitoring can serve legitimate organisational purposes such as protecting confidential information, preventing cyber-security incidents, ensuring workplace safety, verifying attendance, and investigating misconduct. However, excessive or secret monitoring may interfere with an employee’s right to privacy and dignity. Therefore, the legality of employee monitoring depends upon factors such as the purpose of monitoring, notice, necessity, proportionality, legitimate business interest, confidentiality, and applicable data-protection law.

Legal Position in India

The Indian Constitution does not create an unlimited right of employers to monitor employees. The Supreme Court in K.S. Puttaswamy v. Union of India, (2017) 10 SCC 1 recognised privacy as a constitutionally protected right arising primarily from Article 21. The Court also recognised that privacy is connected with dignity and personal autonomy.

Consequently, workplace monitoring involving personal information, communications, location or biometric information should be examined against the principles of legality, legitimate purpose, necessity and proportionality.

1. Right to Privacy

The most important constitutional consideration is Article 21. Although an employee's workplace privacy is not absolute, employment does not automatically eliminate the employee's legitimate expectation of privacy.

In K.S. Puttaswamy v. Union of India, the Supreme Court held that privacy is a fundamental right but is not absolute. Any interference with privacy must satisfy constitutional requirements, including a legally valid basis and a fair, just and reasonable procedure.

Therefore, employers should avoid unnecessarily intrusive surveillance and should collect only information reasonably connected with the employment purpose.

2. Information Technology Act, 2000

The Information Technology Act, 2000 contains provisions dealing with interception, monitoring and decryption of computer information. Section 69 empowers the Central or State Government, subject to statutory requirements and safeguards, to direct interception, monitoring or decryption in specified circumstances.

The Information Technology (Procedure and Safeguards for Interception, Monitoring and Decryption of Information) Rules, 2009 prescribe procedures and authorisation requirements for such governmental interception and monitoring. Rule 24 also addresses unauthorised interception or monitoring and provides specific circumstances in which certain monitoring activities may be undertaken by authorised persons in the course of their duties.

These provisions should not be interpreted as giving every private employer an unrestricted statutory power to intercept employees' private communications.

3. Data Protection Considerations

Electronic monitoring frequently involves processing personal data. Examples include employee names, attendance records, photographs, biometric information, location information, device identifiers and digital activity records.

The employer should therefore establish a clear purpose for collection, limit access to authorised personnel, protect the information against unauthorised disclosure and retain it only for an appropriate period, subject to the applicable legal framework.

The principle is particularly important where monitoring technology continuously tracks employees rather than merely verifying a specific employment-related activity.

Important Case Laws

A. K.S. Puttaswamy v. Union of India, (2017) 10 SCC 1

This landmark Supreme Court judgment recognised privacy as a fundamental right under the Constitution.

The judgment is particularly relevant to employee monitoring because modern surveillance technologies can enable extensive collection, profiling and processing of personal information. The Court recognised concerns relating to technological surveillance, profiling and collection of personal data.

Principle: Privacy is constitutionally protected, and technological surveillance must respect the requirements applicable to legitimate restrictions on privacy.

B. Bărbulescu v. Romania, Grand Chamber, European Court of Human Rights (2017)

In Bărbulescu v. Romania, the European Court of Human Rights considered an employee's dismissal after his employer monitored his workplace electronic communications.

The Court recognised that workplace communications could fall within the concepts of private life and correspondence under Article 8 of the European Convention on Human Rights. It emphasised that an employee's private social life cannot simply be reduced to zero because communications occur at the workplace.

The Court identified important considerations for determining whether employee monitoring is justified, including whether the employee was informed beforehand, the nature and extent of monitoring, the employer's legitimate reasons, whether less intrusive methods were available, and the consequences for the employee.

Principle: Prior information, legitimate purpose, necessity and proportionality are central considerations in electronic workplace monitoring.

C. ONGC Officers Association v. Oil and Natural Gas Corporation Ltd. (Delhi High Court, 2026)

A recent Delhi High Court order concerned a technology-based attendance system involving geo-fencing, facial recognition and liveness checks.

The Court noted that the system involved collection of personal data and therefore raised privacy concerns. At the same time, the Court distinguished attendance verification within a designated workplace area from continuous or roving surveillance throughout the working day.

Principle: The intensity and nature of monitoring matter. Limited monitoring for a specific employment purpose may be legally distinguishable from continuous tracking of an employee's movements.

When Electronic Monitoring May Be Lawful

Electronic monitoring is more likely to be legally defensible when:

There is a legitimate employment-related purpose.

Employees are adequately informed about the monitoring.

The monitoring policy clearly specifies what is monitored.

The information collected is relevant to the stated purpose.

Monitoring is proportionate to the legitimate objective.

Less intrusive alternatives are considered where appropriate.

Personal information is securely stored.

Access is restricted to authorised persons.

Information is not used for unrelated purposes.

Appropriate retention and deletion procedures are followed.

For example, monitoring official email systems for cybersecurity or recording entry into a restricted workplace may have a stronger justification than continuously tracking an employee's location outside working hours.

When Monitoring May Become Unlawful or Legally Vulnerable

Monitoring may raise serious legal concerns where an employer:

secretly records private communications without sufficient justification;

continuously tracks employees without a legitimate necessity;

monitors employees outside working hours without an adequate legal basis;

collects excessive personal or biometric information;

uses monitoring information for an unrelated purpose;

discloses employee information unnecessarily;

retains surveillance information indefinitely;

fails to provide meaningful notice of monitoring;

uses surveillance in a discriminatory or arbitrary manner.

The fact that an employer owns the computer, telephone or network does not automatically mean that every form of employee communication or personal information loses all privacy protection.

Employer's Legitimate Interests

Employers nevertheless have genuine interests that may justify reasonable monitoring. These include:

protection of trade secrets and confidential information;

prevention of cyberattacks;

investigation of workplace misconduct;

protection against fraud;

compliance with legal and regulatory obligations;

workplace safety;

verification of attendance;

protection of company property and information systems.

The legal issue is therefore generally one of balancing legitimate employer interests against employee privacy and dignity.

Conclusion

Electronic monitoring of employees is not inherently illegal. Its legality depends substantially upon purpose, transparency, necessity, proportionality, security and the applicable statutory framework.

Indian constitutional jurisprudence, particularly K.S. Puttaswamy v. Union of India, establishes privacy as a fundamental constitutional value. International jurisprudence such as Bărbulescu v. Romania demonstrates the importance of prior notice, legitimate purpose and proportionality in workplace electronic surveillance. Recent Indian judicial consideration of technology-based attendance systems also illustrates the distinction between limited workplace verification and continuous employee surveillance.

Thus, a lawful workplace monitoring policy should clearly identify what is monitored, why it is monitored, how the information is protected, who can access it, and how long it will be retained. Electronic surveillance should remain connected to a legitimate employment purpose and should not become an unrestricted mechanism for invading employees' private lives.