Surveillance in the Australian Workplace – is it legal and what do I need to know?

What is workplace surveillance?

In recent decades with the growth of technology, there have been growing questions and concerns regarding the issue of employee surveillance and privacy.

So, what is workplace surveillance?

Workplace surveillance can take various forms, including video surveillance, computer monitoring, telephone monitoring, email monitoring, and GPS tracking. There are certainly legitimate reasons for employers to monitor their employees using these means, such as ensuring productivity, preventing theft, or maintaining cybersecurity. However, in Australia, employee surveillance is subject to legal regulation, and employees have certain rights regarding privacy and monitoring in the workplace.

This article will provide an overview of the legal framework concerning workplace surveillance.

Legal Framework

The legal framework governing workplace surveillance in Australia is a mixture of federal and state or territory legislation. Generally, state and territory law cover the installation and use of CCTV, and some states also have specific workplace surveillance legislation, while federal law provides broader privacy protections.

Privacy Act 1988

Under the federal Privacy Act 1988, and the related Australian Privacy Principles (APPs), employees across Australia have a right to personal privacy, even while performing their duties at work.

Under this legislation, employers should respect the privacy of their employees and ensure that any surveillance measures are reasonable, proportionate, and necessary for the legitimate business needs of the employer.

Excessive or intrusive surveillance that goes beyond what is necessary may infringe on employees’ privacy rights.

Important information for employers

It is important for employers to know that the data they collect through surveillance of their employees, such as images of individuals collected through CCTV recordings, is considered personal information.

Employers must take reasonable steps to protect this personal information from misuse, interference, and loss, as well as unauthorised access, modification or disclosure. When an employer no longer needs to hold the personal information for the purpose for which it was collected, it must take reasonable steps to destroy the information or ensure that it is de-identified. It is also recommended that you have a privacy policy in place regarding this information.

Employees who believe their privacy rights have been violated by surveillance undertaken by their employer have the right to lodge a complaint with the relevant authority, such as the Office of the Australian Information Commissioner (OAIC) or the Fair Work Commission.

Employee Consent to Surveillance

In most states it is necessary for employees to be notified about surveillance in their workplace. This can be achieved through clear policies, employment contracts, or workplace agreements.

For some forms of surveillance, the employer must not only inform the employee, but also seek consent. When consent is required, it must be freely given, informed, and voluntary.

There are also specific areas of a workplace that cannot be monitored, including toilets, changing rooms and shower facilities. It is essential that any permitted surveillance does not accidentally record an area where an employee has a higher expectation of and right to privacy.

Covert Surveillance

Covert workplace surveillance is surveillance that takes place without the awareness of employees, and it is strictly prohibited in many jurisdictions across Australia.

However, even where covert surveillance is prohibited, there are exceptions for an employer who has sought authority through the courts. In New South Wales, for instance, a magistrate can issue an authority for the purposes of monitoring unlawful activity in a workplace.

Case Study

Krav Maga Defence Institute Pty Ltd t/a KMDI v Saar Markovitch was a case that considered the use of covert surveillance in the workplace.

In New South Wales, the Workplace Surveillance Act 2005 requires that an employee be given at least 14 days’ notice prior to workplace surveillance commencing and, in the case of camera surveillance, there must be signs notifying employees that they may be under surveillance and these signs must be clearly visible.

In this case, however, surveillance cameras were installed at a gym with no prior notification and no signage. An employee at the gym was observed acting in a way that his employer created a reasonable basis for his termination. The dismissed employee applied to the Fair Work Commission on the basis that his dismissal was predicated on information gathered through unlawful surveillance.

When the case was first heard, the CCTV footage was excluded because it was recorded in breach of the requirement that employees be given proper notice. On appeal, the Full Bench of the Fair Work Commission held that, even if the employer’s CCTV footage had been illegally or improperly obtained, the Commissioner had erred in automatically excluding such evidence. The Full Bench stated that the proper approach to be applied in considering whether or not illegally or improperly obtained surveillance should be admitted as evidence requires the consideration of the factors in the Evidence Act 1995 (NSW), including the probative value of the surveillance and its importance to the case.

Case Study Conclusion

This case illustrates that, although employers in NSW are required to give notice of surveillance, employees should be aware that their conduct can still endanger their employment if it is captured by undeclared covert surveillance.

Data and Privacy

Does your privacy policy comply with the privacy laws?

Does your privacy policy comply with the privacy laws? Privacy laws in Australia were updated in 2014 with the introduction of the Australian Privacy Principles, a new set of privacy principles affecting the handling of personal information. If you have a website privacy policy you should review it for compliance...

Read more

COVID-19 Data and Privacy

Data and privacy implications in a COVID-19 world

Data and privacy implications in a COVID-19 world There is no question data privacy and security are essential. From a commercial perspective, a single company – and no, not just Amazon – may possess the personal information of millions of customers. It is increasingly important this data be kept private...

Read more