ARTICLE
28 September 2026

Workplace Monitoring And Employee Privacy: Where Are The Limits?

GGI Global Alliance

Contributor

GGI is the leading global alliance of independent accounting, law, and advisory firms. With approximately 900 offices in 120+ countries, GGI member firms are committed to providing clients with specialist solutions for their international business requirements.
A Spanish case involving workplace surveillance has sparked renewed debate over employee monitoring limits. Portuguese law expert Laura Mendes Tique examines how Portuguese labour legislation balances employers' managerial oversight powers against employees' fundamental rights to privacy, dignity, and personal data protection in the workplace.
Portugal Employment and HR

A recent case in Spain has reignited the debate on how far employers may go when monitoring employees. The case concerned a supermarket chain employee who benefited from a reduced working schedule for family care purposes, and whose activities were monitored by a private detective engaged by the employer. Beyond its specific facts, the case raises a broader question: where does legitimate supervision end and unlawful intrusion begin?

Portuguese law recognises the employer's managerial powers to organise and direct work, but it also sets clear limits designed to protect employees' privacy and personal data.

One of the most significant restrictions is set out in Article 20 of the Portuguese Labour Code, which prohibits the use of technological surveillance tools for the purpose of monitoring employees' performance or professional activity. Video surveillance, geolocation systems, and other monitoring technologies cannot therefore be used as instruments for assessing productivity or disciplinary compliance.

Video surveillance may be used for security and asset-protection purposes, but not to continuously monitor employees' work. Additionally, cameras cannot cover areas reserved exclusively for employees, such as changing rooms, restrooms, or staff dining areas.

Similar limits apply to electronic communications. While employers may establish rules governing the use of company IT systems and corporate email accounts, Article 22 of the Labour Code prohibits access to the content of employees' personal messages and private accounts. 

Geolocation also remains heavily restricted. Continuous tracking cannot be used to monitor performance or attendance, and may only be justified for specific legitimate purposes (e.g. protection of high-value or hazardous assets). The Portuguese Data Protection Authority has adopted a particularly restrictive approach regarding the geolocation of devices assigned to employees.

The Spanish case is a reminder that the key question is not whether employers may monitor employees, but where the limits lie. Under Portuguese law, monitoring measures are lawful only to the extent that they pursue a legitimate purpose and comply with the restrictions imposed by labour and data protection legislation. Ultimately, employers must balance their interest in overseeing the employment relationship against employees' rights to privacy, dignity, and the protection of their personal data.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

[View Source]

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More