{ "name": "Rules on monitoring workers that reach an event log", "title": "Rules on monitoring workers that reach an event log", "kind": "terms-board", "url": "https://sellprocessdatatoai.com/datasets/process-data-employee-monitoring-law/", "csv": "https://sellprocessdatatoai.com/datasets/process-data-employee-monitoring-law.csv", "markdown": "https://sellprocessdatatoai.com/datasets/process-data-employee-monitoring-law/index.md", "computed_at": "2026-10-28", "license": "https://sellprocessdatatoai.com/terms", "headline": "10 UK and US rules on monitoring workers that decide whether event logs about named employees may leave a company, each quoted from the statute or the regulator page, read 28 October 2026.", "quotes": [ "10 UK and US rules on monitoring workers that decide whether event logs about named employees may leave a company, each quoted from the statute or the regulator page, read 28 October 2026.", "Which body of rules, by rule: UK data protection 3 of 10, US state electronic monitoring notice law 3 of 10, US federal interception and stored communications law 2 of 10, US state consumer privacy law 2 of 10 (10 rules, read 28 October 2026).", "What it requires, by rule: the regulator explains the requirement 3 of 10, notice to employees before monitoring 3 of 10, no interception or access without consent or another exception 2 of 10, an impact assessment before high-risk processing 1 of 10, a lawful basis for processing 1 of 10 (10 rules, read 28 October 2026).", "The rule in its own words, by rule: stated 10 of 10 (10 rules, read 28 October 2026)." ], "citation": "\"Rules on monitoring workers that reach an event log\", updated 2026-10-28, https://sellprocessdatatoai.com/datasets/process-data-employee-monitoring-law/.", "national": { "n": 10, "unit": "rules", "documents": 10, "published_sources": 10, "named_sources": 16 }, "board": { "type": "clauses", "noun": { "one": "rule", "many": "rules" }, "document": { "one": "text", "many": "texts" }, "fields": [ { "id": "regime", "label": "Which body of rules", "counts": { "us-federal-interception": 2, "us-state-privacy": 2, "uk-data-protection": 3, "us-state-monitoring": 3 }, "values": [ { "value": "uk-data-protection", "text": "UK data protection" }, { "value": "us-federal-interception", "text": "US federal interception and stored communications law" }, { "value": "us-state-monitoring", "text": "US state electronic monitoring notice law" }, { "value": "us-state-privacy", "text": "US state consumer privacy law" } ] }, { "id": "requires", "label": "What it requires", "counts": { "no-interception": 2, "guidance-only": 3, "impact-assessment": 1, "lawful-basis": 1, "notice-to-employees": 3 }, "values": [ { "value": "lawful-basis", "text": "a lawful basis for processing" }, { "value": "impact-assessment", "text": "an impact assessment before high-risk processing" }, { "value": "notice-to-employees", "text": "notice to employees before monitoring" }, { "value": "no-interception", "text": "no interception or access without consent or another exception" }, { "value": "safeguards", "text": "safeguards such as pseudonymisation" }, { "value": "specific-rules", "text": "more specific rules for the employment context" }, { "value": "guidance-only", "text": "the regulator explains the requirement" } ] }, { "id": "clause", "label": "The rule in its own words", "counts": { "stated": 10 }, "values": [ { "value": "stated", "text": "stated" } ], "clause": true } ], "lead": { "type": "count", "field": null, "value": null, "n": 10, "of": 10, "label": "Rules quoted from source" }, "vendors": [ { "name": "Access to stored communications, US", "answers": { "regime": { "value": "us-federal-interception", "text": "US federal interception and stored communications law", "documents": [ { "document": "18 U.S.C. 2701", "url": "https://www.law.cornell.edu/uscode/text/18/2701", "value": "us-federal-interception", "quote": "intentionally accesses without authorization a facility through which an electronic communication service is provided; or" } ] }, "requires": { "value": "no-interception", "text": "no interception or access without consent or another exception", "documents": [ { "document": "18 U.S.C. 2701", "url": "https://www.law.cornell.edu/uscode/text/18/2701", "value": "no-interception", "quote": "intentionally accesses without authorization a facility through which an electronic communication service is provided; or" } ] }, "clause": { "value": "stated", "text": "intentionally accesses without authorization a facility through which an electronic…", "documents": [ { "document": "18 U.S.C. 2701", "url": "https://www.law.cornell.edu/uscode/text/18/2701", "value": "stated", "quote": "intentionally accesses without authorization a facility through which an electronic communication service is provided; or" } ] } } }, { "name": "Consumer privacy rights, California", "answers": { "regime": { "value": "us-state-privacy", "text": "US state consumer privacy law", "documents": [ { "document": "California Attorney General, CCPA", "url": "https://oag.ca.gov/privacy/ccpa", "value": "us-state-privacy", "quote": "The California Consumer Privacy Act of 2018 (CCPA) gives consumers more control over the personal information that businesses collect about them" } ] }, "requires": { "value": "guidance-only", "text": "the regulator explains the requirement", "documents": [ { "document": "California Attorney General, CCPA", "url": "https://oag.ca.gov/privacy/ccpa", "value": "guidance-only", "quote": "The California Consumer Privacy Act of 2018 (CCPA) gives consumers more control over the personal information that businesses collect about them and the CCPA regulations provide guidance on how to implement the law." } ] }, "clause": { "value": "stated", "text": "The right to know about the personal information a business collects about them and how…", "documents": [ { "document": "California Attorney General, CCPA", "url": "https://oag.ca.gov/privacy/ccpa", "value": "stated", "quote": "The right to know about the personal information a business collects about them and how it is used and shared;" } ] } } }, { "name": "Employee data rulemaking, California", "answers": { "regime": { "value": "us-state-privacy", "text": "US state consumer privacy law", "documents": [ { "document": "California Privacy Protection Agency regulations page", "url": "https://cppa.ca.gov/regulations/", "value": "us-state-privacy", "quote": "In November 2020, California voters passed Proposition 24, which amended the California Consumer Privacy Act of 2018" } ] }, "requires": { "value": "guidance-only", "text": "the regulator explains the requirement", "documents": [ { "document": "California Privacy Protection Agency regulations page", "url": "https://cppa.ca.gov/regulations/", "value": "guidance-only", "quote": "Below are topics that CalPrivacy is exploring to determine whether regulatory changes are necessary." } ] }, "clause": { "value": "stated", "text": "Employee Data –The preliminary comment period closed on May 20, 2026.", "documents": [ { "document": "California Privacy Protection Agency regulations page", "url": "https://cppa.ca.gov/regulations/", "value": "stated", "quote": "Employee Data –The preliminary comment period closed on May 20, 2026." } ] } } }, { "name": "Impact assessment before high-risk processing, UK", "answers": { "regime": { "value": "uk-data-protection", "text": "UK data protection", "documents": [ { "document": "UK GDPR art 35", "url": "https://www.legislation.gov.uk/eur/2016/679/article/35", "value": "uk-data-protection", "quote": "Where a type of processing in particular using new technologies, and taking into account the nature, scope, context and purposes of the processing, is likely to result in a high risk to the rights and freedoms of natural persons" } ] }, "requires": { "value": "impact-assessment", "text": "an impact assessment before high-risk processing", "documents": [ { "document": "UK GDPR art 35", "url": "https://www.legislation.gov.uk/eur/2016/679/article/35", "value": "impact-assessment", "quote": "the controller shall, prior to the processing, carry out an assessment" } ] }, "clause": { "value": "stated", "text": "Where a type of processing in particular using new technologies, and taking into account…", "documents": [ { "document": "UK GDPR art 35", "url": "https://www.legislation.gov.uk/eur/2016/679/article/35", "value": "stated", "quote": "Where a type of processing in particular using new technologies, and taking into account the nature, scope, context and purposes of the processing, is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall, prior to the processing, carry out an assessment" } ] } } }, { "name": "Interception of communications, US", "answers": { "regime": { "value": "us-federal-interception", "text": "US federal interception and stored communications law", "documents": [ { "document": "18 U.S.C. 2511", "url": "https://www.law.cornell.edu/uscode/text/18/2511", "value": "us-federal-interception", "quote": "intentionally intercepts, endeavors to intercept, or procures any other person to intercept or endeavor to intercept, any wire, oral, or electronic communication;" } ] }, "requires": { "value": "no-interception", "text": "no interception or access without consent or another exception", "documents": [ { "document": "18 U.S.C. 2511", "url": "https://www.law.cornell.edu/uscode/text/18/2511", "value": "no-interception", "quote": "It shall not be unlawful under this chapter for a person not acting under color of law to intercept a wire, oral, or electronic communication where such person is a party to the communication or where one of the parties to the communication has given prior consent to such interception" } ] }, "clause": { "value": "stated", "text": "intentionally discloses, or endeavors to disclose, to any other person the contents of…", "documents": [ { "document": "18 U.S.C. 2511", "url": "https://www.law.cornell.edu/uscode/text/18/2511", "value": "stated", "quote": "intentionally discloses, or endeavors to disclose, to any other person the contents of any wire, oral, or electronic communication, knowing or having reason to know that the information was obtained through the interception of a wire, oral, or electronic communication in violation of this subsection;" } ] } } }, { "name": "Lawful basis for processing, UK", "answers": { "regime": { "value": "uk-data-protection", "text": "UK data protection", "documents": [ { "document": "UK GDPR art 6", "url": "https://www.legislation.gov.uk/eur/2016/679/article/6", "value": "uk-data-protection", "quote": "the data subject has given consent to the processing of his or her personal data for one or more specific purposes;" } ] }, "requires": { "value": "lawful-basis", "text": "a lawful basis for processing", "documents": [ { "document": "UK GDPR art 6", "url": "https://www.legislation.gov.uk/eur/2016/679/article/6", "value": "lawful-basis", "quote": "processing is necessary for compliance with a legal obligation to which the controller is subject;" } ] }, "clause": { "value": "stated", "text": "the data subject has given consent to the processing of his or her personal data for one…", "documents": [ { "document": "UK GDPR art 6", "url": "https://www.legislation.gov.uk/eur/2016/679/article/6", "value": "stated", "quote": "the data subject has given consent to the processing of his or her personal data for one or more specific purposes;" } ] } } }, { "name": "Monitoring workers, UK regulator guidance", "answers": { "regime": { "value": "uk-data-protection", "text": "UK data protection", "documents": [ { "document": "ICO, Employment practices and data protection: monitoring workers", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/monitoring-workers/", "value": "uk-data-protection", "quote": "This guidance discusses the monitoring of workers by employers, and how this interacts with data protection." } ] }, "requires": { "value": "guidance-only", "text": "the regulator explains the requirement", "documents": [ { "document": "ICO, Employment practices and data protection: monitoring workers", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/monitoring-workers/", "value": "guidance-only", "quote": "The guidance provides clarity and practical advice to help employers to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018)." } ] }, "clause": { "value": "stated", "text": "It is aimed at all circumstances where there is an employment relationship or otherwise a…", "documents": [ { "document": "ICO, Employment practices and data protection: monitoring workers", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/monitoring-workers/", "value": "stated", "quote": "It is aimed at all circumstances where there is an employment relationship or otherwise a relationship between an organisation and a person who performs work for the organisation, regardless of the nature of the contract." } ] } } }, { "name": "Notice of monitoring email and internet use, Delaware", "answers": { "regime": { "value": "us-state-monitoring", "text": "US state electronic monitoring notice law", "documents": [ { "document": "19 Del. C. s705", "url": "https://delcode.delaware.gov/title19/c007/sc01/index.html", "value": "us-state-monitoring", "quote": "No employer, nor any agent or any representative of any employer, shall monitor or otherwise intercept any telephone conversation or transmission, electronic mail or transmission, or Internet access or usage of or by a Delaware employee unless the employer either:" } ] }, "requires": { "value": "notice-to-employees", "text": "notice to employees before monitoring", "documents": [ { "document": "19 Del. C. s705", "url": "https://delcode.delaware.gov/title19/c007/sc01/index.html", "value": "notice-to-employees", "quote": "Provides an electronic notice of such monitoring or intercepting policies or activities to the employee at least once during each day the employee accesses the employer-provided e-mail or Internet access services; or" } ] }, "clause": { "value": "stated", "text": "No employer, nor any agent or any representative of any employer, shall monitor or…", "documents": [ { "document": "19 Del. C. s705", "url": "https://delcode.delaware.gov/title19/c007/sc01/index.html", "value": "stated", "quote": "No employer, nor any agent or any representative of any employer, shall monitor or otherwise intercept any telephone conversation or transmission, electronic mail or transmission, or Internet access or usage of or by a Delaware employee unless the employer either:" } ] } } }, { "name": "Prior notice of electronic monitoring, Connecticut", "answers": { "regime": { "value": "us-state-monitoring", "text": "US state electronic monitoring notice law", "documents": [ { "document": "Conn. Gen. Stat. s31-48d", "url": "https://www.cga.ct.gov/current/pub/chap_557.htm", "value": "us-state-monitoring", "quote": "each employer who engages in any type of electronic monitoring shall give prior written notice to all employees who may be affected, informing them of the types of monitoring which may occur." } ] }, "requires": { "value": "notice-to-employees", "text": "notice to employees before monitoring", "documents": [ { "document": "Conn. Gen. Stat. s31-48d", "url": "https://www.cga.ct.gov/current/pub/chap_557.htm", "value": "notice-to-employees", "quote": "each employer who engages in any type of electronic monitoring shall give prior written notice to all employees who may be affected, informing them of the types of monitoring which may occur." } ] }, "clause": { "value": "stated", "text": "means the collection of information on an employer's premises concerning employees'…", "documents": [ { "document": "Conn. Gen. Stat. s31-48d", "url": "https://www.cga.ct.gov/current/pub/chap_557.htm", "value": "stated", "quote": "means the collection of information on an employer's premises concerning employees' activities or communications by any means other than direct observation, including the use of a computer, telephone, wire, radio, camera, electromagnetic, photoelectronic or photo-optical systems" } ] } } }, { "name": "Prior notice of electronic monitoring, New York", "answers": { "regime": { "value": "us-state-monitoring", "text": "US state electronic monitoring notice law", "documents": [ { "document": "N.Y. Civil Rights Law s52-c*2", "url": "https://www.nysenate.gov/legislation/laws/CVR/52-C*2", "value": "us-state-monitoring", "quote": "Any employer who monitors or otherwise intercepts telephone conversations or transmissions, electronic mail or transmissions, or internet access or usage of or by an employee by any electronic device or system" } ] }, "requires": { "value": "notice-to-employees", "text": "notice to employees before monitoring", "documents": [ { "document": "N.Y. Civil Rights Law s52-c*2", "url": "https://www.nysenate.gov/legislation/laws/CVR/52-C*2", "value": "notice-to-employees", "quote": "shall give prior written notice upon hiring to all employees who are subject to electronic monitoring." } ] }, "clause": { "value": "stated", "text": "The notice required by this subdivision shall be in writing, in an electronic record, or…", "documents": [ { "document": "N.Y. Civil Rights Law s52-c*2", "url": "https://www.nysenate.gov/legislation/laws/CVR/52-C*2", "value": "stated", "quote": "The notice required by this subdivision shall be in writing, in an electronic record, or in another electronic form and acknowledged by the employee either in writing or electronically." } ] } } } ] }, "subject_kind": "rule", "rows": [ { "subject": "Access to stored communications, US", "url": "https://www.law.cornell.edu/uscode/text/18/2701", "document": "18 U.S.C. 2701", "question": "regime", "answer": "us-federal-interception", "answer_text": "US federal interception and stored communications law", "status": "stated", "retrieved_at": "2026-10-28", "quote": "intentionally accesses without authorization a facility through which an electronic communication service is provided; or", "text_sha256": "8300d39331feaab70aa18321c7183dca4ecafd529bdf6a7583e9e52f30722e78" }, { "subject": "Access to stored communications, US", "url": "https://www.law.cornell.edu/uscode/text/18/2701", "document": "18 U.S.C. 2701", "question": "requires", "answer": "no-interception", "answer_text": "no interception or access without consent or another exception", "status": "stated", "retrieved_at": "2026-10-28", "quote": "intentionally accesses without authorization a facility through which an electronic communication service is provided; or", "text_sha256": "8300d39331feaab70aa18321c7183dca4ecafd529bdf6a7583e9e52f30722e78" }, { "subject": "Access to stored communications, US", "url": "https://www.law.cornell.edu/uscode/text/18/2701", "document": "18 U.S.C. 2701", "question": "clause", "answer": "stated", "answer_text": "intentionally accesses without authorization a facility through which an electronic…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "intentionally accesses without authorization a facility through which an electronic communication service is provided; or", "text_sha256": "8300d39331feaab70aa18321c7183dca4ecafd529bdf6a7583e9e52f30722e78" }, { "subject": "Consumer privacy rights, California", "url": "https://oag.ca.gov/privacy/ccpa", "document": "California Attorney General, CCPA", "question": "regime", "answer": "us-state-privacy", "answer_text": "US state consumer privacy law", "status": "stated", "retrieved_at": "2026-10-24", "quote": "The California Consumer Privacy Act of 2018 (CCPA) gives consumers more control over the personal information that businesses collect about them", "text_sha256": "6ce79ef139388c7a04e5d336209d8dd1320dde2e0bb1bd70b28e565bbc9a0401" }, { "subject": "Consumer privacy rights, California", "url": "https://oag.ca.gov/privacy/ccpa", "document": "California Attorney General, CCPA", "question": "requires", "answer": "guidance-only", "answer_text": "the regulator explains the requirement", "status": "stated", "retrieved_at": "2026-10-24", "quote": "The California Consumer Privacy Act of 2018 (CCPA) gives consumers more control over the personal information that businesses collect about them and the CCPA regulations provide guidance on how to implement the law.", "text_sha256": "6ce79ef139388c7a04e5d336209d8dd1320dde2e0bb1bd70b28e565bbc9a0401" }, { "subject": "Consumer privacy rights, California", "url": "https://oag.ca.gov/privacy/ccpa", "document": "California Attorney General, CCPA", "question": "clause", "answer": "stated", "answer_text": "The right to know about the personal information a business collects about them and how…", "status": "stated", "retrieved_at": "2026-10-24", "quote": "The right to know about the personal information a business collects about them and how it is used and shared;", "text_sha256": "6ce79ef139388c7a04e5d336209d8dd1320dde2e0bb1bd70b28e565bbc9a0401" }, { "subject": "Employee data rulemaking, California", "url": "https://cppa.ca.gov/regulations/", "document": "California Privacy Protection Agency regulations page", "question": "regime", "answer": "us-state-privacy", "answer_text": "US state consumer privacy law", "status": "stated", "retrieved_at": "2026-10-24", "quote": "In November 2020, California voters passed Proposition 24, which amended the California Consumer Privacy Act of 2018", "text_sha256": "1ed6300f1a442be25428d16b95e3192626f2255da79f6f6a67aaaf55c0bdb5b9" }, { "subject": "Employee data rulemaking, California", "url": "https://cppa.ca.gov/regulations/", "document": "California Privacy Protection Agency regulations page", "question": "requires", "answer": "guidance-only", "answer_text": "the regulator explains the requirement", "status": "stated", "retrieved_at": "2026-10-24", "quote": "Below are topics that CalPrivacy is exploring to determine whether regulatory changes are necessary.", "text_sha256": "1ed6300f1a442be25428d16b95e3192626f2255da79f6f6a67aaaf55c0bdb5b9" }, { "subject": "Employee data rulemaking, California", "url": "https://cppa.ca.gov/regulations/", "document": "California Privacy Protection Agency regulations page", "question": "clause", "answer": "stated", "answer_text": "Employee Data –The preliminary comment period closed on May 20, 2026.", "status": "stated", "retrieved_at": "2026-10-24", "quote": "Employee Data –The preliminary comment period closed on May 20, 2026.", "text_sha256": "1ed6300f1a442be25428d16b95e3192626f2255da79f6f6a67aaaf55c0bdb5b9" }, { "subject": "Impact assessment before high-risk processing, UK", "url": "https://www.legislation.gov.uk/eur/2016/679/article/35", "document": "UK GDPR art 35", "question": "regime", "answer": "uk-data-protection", "answer_text": "UK data protection", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Where a type of processing in particular using new technologies, and taking into account the nature, scope, context and purposes of the processing, is likely to result in a high risk to the rights and freedoms of natural persons", "text_sha256": "92ccade231d67c87b29af64f5eaac9a80a83730d0c99d83ca55adb44ffb15fa8" }, { "subject": "Impact assessment before high-risk processing, UK", "url": "https://www.legislation.gov.uk/eur/2016/679/article/35", "document": "UK GDPR art 35", "question": "requires", "answer": "impact-assessment", "answer_text": "an impact assessment before high-risk processing", "status": "stated", "retrieved_at": "2026-10-28", "quote": "the controller shall, prior to the processing, carry out an assessment", "text_sha256": "92ccade231d67c87b29af64f5eaac9a80a83730d0c99d83ca55adb44ffb15fa8" }, { "subject": "Impact assessment before high-risk processing, UK", "url": "https://www.legislation.gov.uk/eur/2016/679/article/35", "document": "UK GDPR art 35", "question": "clause", "answer": "stated", "answer_text": "Where a type of processing in particular using new technologies, and taking into account…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Where a type of processing in particular using new technologies, and taking into account the nature, scope, context and purposes of the processing, is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall, prior to the processing, carry out an assessment", "text_sha256": "92ccade231d67c87b29af64f5eaac9a80a83730d0c99d83ca55adb44ffb15fa8" }, { "subject": "Interception of communications, US", "url": "https://www.law.cornell.edu/uscode/text/18/2511", "document": "18 U.S.C. 2511", "question": "regime", "answer": "us-federal-interception", "answer_text": "US federal interception and stored communications law", "status": "stated", "retrieved_at": "2026-10-24", "quote": "intentionally intercepts, endeavors to intercept, or procures any other person to intercept or endeavor to intercept, any wire, oral, or electronic communication;", "text_sha256": "0e5bba577f01f153ebd44da971afbb5222e906378537006d77d0f5abab6f3d50" }, { "subject": "Interception of communications, US", "url": "https://www.law.cornell.edu/uscode/text/18/2511", "document": "18 U.S.C. 2511", "question": "requires", "answer": "no-interception", "answer_text": "no interception or access without consent or another exception", "status": "stated", "retrieved_at": "2026-10-24", "quote": "It shall not be unlawful under this chapter for a person not acting under color of law to intercept a wire, oral, or electronic communication where such person is a party to the communication or where one of the parties to the communication has given prior consent to such interception", "text_sha256": "0e5bba577f01f153ebd44da971afbb5222e906378537006d77d0f5abab6f3d50" }, { "subject": "Interception of communications, US", "url": "https://www.law.cornell.edu/uscode/text/18/2511", "document": "18 U.S.C. 2511", "question": "clause", "answer": "stated", "answer_text": "intentionally discloses, or endeavors to disclose, to any other person the contents of…", "status": "stated", "retrieved_at": "2026-10-24", "quote": "intentionally discloses, or endeavors to disclose, to any other person the contents of any wire, oral, or electronic communication, knowing or having reason to know that the information was obtained through the interception of a wire, oral, or electronic communication in violation of this subsection;", "text_sha256": "0e5bba577f01f153ebd44da971afbb5222e906378537006d77d0f5abab6f3d50" }, { "subject": "Lawful basis for processing, UK", "url": "https://www.legislation.gov.uk/eur/2016/679/article/6", "document": "UK GDPR art 6", "question": "regime", "answer": "uk-data-protection", "answer_text": "UK data protection", "status": "stated", "retrieved_at": "2026-10-08", "quote": "the data subject has given consent to the processing of his or her personal data for one or more specific purposes;", "text_sha256": "7a5a6f24fb31d9243763b59989fd13d94b3c2be38ee902535f7781e7fa9a121d" }, { "subject": "Lawful basis for processing, UK", "url": "https://www.legislation.gov.uk/eur/2016/679/article/6", "document": "UK GDPR art 6", "question": "requires", "answer": "lawful-basis", "answer_text": "a lawful basis for processing", "status": "stated", "retrieved_at": "2026-10-08", "quote": "processing is necessary for compliance with a legal obligation to which the controller is subject;", "text_sha256": "7a5a6f24fb31d9243763b59989fd13d94b3c2be38ee902535f7781e7fa9a121d" }, { "subject": "Lawful basis for processing, UK", "url": "https://www.legislation.gov.uk/eur/2016/679/article/6", "document": "UK GDPR art 6", "question": "clause", "answer": "stated", "answer_text": "the data subject has given consent to the processing of his or her personal data for one…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "the data subject has given consent to the processing of his or her personal data for one or more specific purposes;", "text_sha256": "7a5a6f24fb31d9243763b59989fd13d94b3c2be38ee902535f7781e7fa9a121d" }, { "subject": "Monitoring workers, UK regulator guidance", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/monitoring-workers/", "document": "ICO, Employment practices and data protection: monitoring workers", "question": "regime", "answer": "uk-data-protection", "answer_text": "UK data protection", "status": "stated", "retrieved_at": "2026-10-24", "quote": "This guidance discusses the monitoring of workers by employers, and how this interacts with data protection.", "text_sha256": "d89bddec187cd8cecf2691ea8f08a46bc79359e2d2d9eca7b76254e7fab86ecf" }, { "subject": "Monitoring workers, UK regulator guidance", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/monitoring-workers/", "document": "ICO, Employment practices and data protection: monitoring workers", "question": "requires", "answer": "guidance-only", "answer_text": "the regulator explains the requirement", "status": "stated", "retrieved_at": "2026-10-24", "quote": "The guidance provides clarity and practical advice to help employers to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).", "text_sha256": "d89bddec187cd8cecf2691ea8f08a46bc79359e2d2d9eca7b76254e7fab86ecf" }, { "subject": "Monitoring workers, UK regulator guidance", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/monitoring-workers/", "document": "ICO, Employment practices and data protection: monitoring workers", "question": "clause", "answer": "stated", "answer_text": "It is aimed at all circumstances where there is an employment relationship or otherwise a…", "status": "stated", "retrieved_at": "2026-10-24", "quote": "It is aimed at all circumstances where there is an employment relationship or otherwise a relationship between an organisation and a person who performs work for the organisation, regardless of the nature of the contract.", "text_sha256": "d89bddec187cd8cecf2691ea8f08a46bc79359e2d2d9eca7b76254e7fab86ecf" }, { "subject": "Notice of monitoring email and internet use, Delaware", "url": "https://delcode.delaware.gov/title19/c007/sc01/index.html", "document": "19 Del. C. s705", "question": "regime", "answer": "us-state-monitoring", "answer_text": "US state electronic monitoring notice law", "status": "stated", "retrieved_at": "2026-10-28", "quote": "No employer, nor any agent or any representative of any employer, shall monitor or otherwise intercept any telephone conversation or transmission, electronic mail or transmission, or Internet access or usage of or by a Delaware employee unless the employer either:", "text_sha256": "d0bfe35dae8779e9db9be44659e027ae64934431a20ee4295413f0784a49d9b0" }, { "subject": "Notice of monitoring email and internet use, Delaware", "url": "https://delcode.delaware.gov/title19/c007/sc01/index.html", "document": "19 Del. C. s705", "question": "requires", "answer": "notice-to-employees", "answer_text": "notice to employees before monitoring", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Provides an electronic notice of such monitoring or intercepting policies or activities to the employee at least once during each day the employee accesses the employer-provided e-mail or Internet access services; or", "text_sha256": "d0bfe35dae8779e9db9be44659e027ae64934431a20ee4295413f0784a49d9b0" }, { "subject": "Notice of monitoring email and internet use, Delaware", "url": "https://delcode.delaware.gov/title19/c007/sc01/index.html", "document": "19 Del. C. s705", "question": "clause", "answer": "stated", "answer_text": "No employer, nor any agent or any representative of any employer, shall monitor or…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "No employer, nor any agent or any representative of any employer, shall monitor or otherwise intercept any telephone conversation or transmission, electronic mail or transmission, or Internet access or usage of or by a Delaware employee unless the employer either:", "text_sha256": "d0bfe35dae8779e9db9be44659e027ae64934431a20ee4295413f0784a49d9b0" }, { "subject": "Prior notice of electronic monitoring, Connecticut", "url": "https://www.cga.ct.gov/current/pub/chap_557.htm", "document": "Conn. Gen. Stat. s31-48d", "question": "regime", "answer": "us-state-monitoring", "answer_text": "US state electronic monitoring notice law", "status": "stated", "retrieved_at": "2026-10-24", "quote": "each employer who engages in any type of electronic monitoring shall give prior written notice to all employees who may be affected, informing them of the types of monitoring which may occur.", "text_sha256": "f88f2bde7440bd644ca675643e1e3a007021445e8ef4a59a5dbdd1d39663ddc4" }, { "subject": "Prior notice of electronic monitoring, Connecticut", "url": "https://www.cga.ct.gov/current/pub/chap_557.htm", "document": "Conn. Gen. Stat. s31-48d", "question": "requires", "answer": "notice-to-employees", "answer_text": "notice to employees before monitoring", "status": "stated", "retrieved_at": "2026-10-24", "quote": "each employer who engages in any type of electronic monitoring shall give prior written notice to all employees who may be affected, informing them of the types of monitoring which may occur.", "text_sha256": "f88f2bde7440bd644ca675643e1e3a007021445e8ef4a59a5dbdd1d39663ddc4" }, { "subject": "Prior notice of electronic monitoring, Connecticut", "url": "https://www.cga.ct.gov/current/pub/chap_557.htm", "document": "Conn. Gen. Stat. s31-48d", "question": "clause", "answer": "stated", "answer_text": "means the collection of information on an employer's premises concerning employees'…", "status": "stated", "retrieved_at": "2026-10-24", "quote": "means the collection of information on an employer's premises concerning employees' activities or communications by any means other than direct observation, including the use of a computer, telephone, wire, radio, camera, electromagnetic, photoelectronic or photo-optical systems", "text_sha256": "f88f2bde7440bd644ca675643e1e3a007021445e8ef4a59a5dbdd1d39663ddc4" }, { "subject": "Prior notice of electronic monitoring, New York", "url": "https://www.nysenate.gov/legislation/laws/CVR/52-C*2", "document": "N.Y. Civil Rights Law s52-c*2", "question": "regime", "answer": "us-state-monitoring", "answer_text": "US state electronic monitoring notice law", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Any employer who monitors or otherwise intercepts telephone conversations or transmissions, electronic mail or transmissions, or internet access or usage of or by an employee by any electronic device or system", "text_sha256": "ece641de2ae91caee68a5c06b21c05e759fc744d2192eafa7342461f9c8788e9" }, { "subject": "Prior notice of electronic monitoring, New York", "url": "https://www.nysenate.gov/legislation/laws/CVR/52-C*2", "document": "N.Y. Civil Rights Law s52-c*2", "question": "requires", "answer": "notice-to-employees", "answer_text": "notice to employees before monitoring", "status": "stated", "retrieved_at": "2026-10-28", "quote": "shall give prior written notice upon hiring to all employees who are subject to electronic monitoring.", "text_sha256": "ece641de2ae91caee68a5c06b21c05e759fc744d2192eafa7342461f9c8788e9" }, { "subject": "Prior notice of electronic monitoring, New York", "url": "https://www.nysenate.gov/legislation/laws/CVR/52-C*2", "document": "N.Y. Civil Rights Law s52-c*2", "question": "clause", "answer": "stated", "answer_text": "The notice required by this subdivision shall be in writing, in an electronic record, or…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "The notice required by this subdivision shall be in writing, in an electronic record, or in another electronic form and acknowledged by the employee either in writing or electronically.", "text_sha256": "ece641de2ae91caee68a5c06b21c05e759fc744d2192eafa7342461f9c8788e9" } ], "sources": [ { "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/monitoring-workers/", "label": "ICO", "license": "from the publisher's own statute texts and regulator guidance on monitoring workers and on personal data; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.legislation.gov.uk/eur/2016/679/article/6", "label": "legislation.gov.uk", "license": "from the publisher's own statute texts and regulator guidance on monitoring workers and on personal data; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.law.cornell.edu/uscode/text/18/2511", "label": "Cornell LII, U.S. Code", "license": "from the publisher's own statute texts and regulator guidance on monitoring workers and on personal data; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.nysenate.gov/legislation/laws/CVR/52-C", "label": "New York State Senate", "license": "from the publisher's own statute texts and regulator guidance on monitoring workers and on personal data; reproduced for comment", "class": "primary-government", "status": "not-terms", "why": "the stored read of this address is New York Civil Rights Law s52-c on sexually explicit depictions; the electronic-monitoring notice section shares the number and is not the text read" }, { "url": "https://www.legislation.gov.uk/eur/2016/679/article/35", "label": "legislation.gov.uk", "license": "from the publisher's own statute texts and regulator guidance on monitoring workers and on personal data; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.law.cornell.edu/uscode/text/18/2701", "label": "Cornell LII, U.S. Code", "license": "from the publisher's own statute texts and regulator guidance on monitoring workers and on personal data; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.legislation.gov.uk/ukpga/2018/12/section/19", "label": "legislation.gov.uk", "license": "from the publisher's own statute texts and regulator guidance on monitoring workers and on personal data; reproduced for comment", "class": "primary-government", "status": "not-terms", "why": "Data Protection Act 2018 s19, which the stored text shows omitted on 5.2.2026 by the Data (Use and Access) Act 2025: no rule in force to quote" }, { "url": "https://www.legislation.gov.uk/eur/2016/679/article/88", "label": "legislation.gov.uk", "license": "from the publisher's own statute texts and regulator guidance on monitoring workers and on personal data; reproduced for comment", "class": "primary-government", "status": "not-terms", "why": "UK GDPR art 88, which the stored text shows omitted on 31.12.2020 by the EU Exit Regulations 2019: no rule in force to quote" }, { "url": "https://www.legislation.gov.uk/eur/2016/679/article/89", "label": "legislation.gov.uk", "license": "from the publisher's own statute texts and regulator guidance on monitoring workers and on personal data; reproduced for comment", "class": "primary-government", "status": "not-terms", "why": "UK GDPR art 89, which the stored text shows omitted on 5.2.2026 by the Data (Use and Access) Act 2025: no rule in force to quote" }, { "url": "https://delcode.delaware.gov/title19/c007/sc01/index.html", "label": "Delaware Code", "license": "from the publisher's own statute texts and regulator guidance on monitoring workers and on personal data; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.cga.ct.gov/current/pub/chap_557.htm", "label": "Connecticut General Statutes", "license": "from the publisher's own statute texts and regulator guidance on monitoring workers and on personal data; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://cppa.ca.gov/regulations/", "label": "California Privacy Protection Agency", "license": "from the publisher's own statute texts and regulator guidance on monitoring workers and on personal data; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.edpb.europa.eu/our-work-tools/our-documents/opinion-board-art-64/opinion-282024-certain-data-protection-aspects_en", "label": "European Data Protection Board", "license": "from the publisher's own statute texts and regulator guidance on monitoring workers and on personal data; reproduced for comment", "class": "primary-government", "status": "not-terms", "why": "an EDPB document listing page carrying the opinion's title, not its text, and EU rather than UK or US law" }, { "url": "https://oag.ca.gov/privacy/ccpa", "label": "California Attorney General", "license": "from the publisher's own statute texts and regulator guidance on monitoring workers and on personal data; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.ftc.gov/business-guidance/privacy-security/data-security", "label": "https://www.ftc.gov/business-guidance/privacy-security/data-", "license": "from the publisher's own statute texts and regulator guidance on monitoring workers and on personal data; reproduced for comment", "class": "primary-government", "status": "not-terms", "why": "FTC data-security business guidance, which does not address monitoring or recording workers" }, { "url": "https://www.nysenate.gov/legislation/laws/CVR/52-C*2", "label": "New York State Senate", "license": "from the publisher's own statute texts and regulator guidance on monitoring workers and on personal data; reproduced for comment", "class": "primary-government", "status": "read" } ], "methodology": "Each rule's own statute texts and regulator guidance on monitoring workers and on personal data were read through estate-fetch and stored whole (sha256 on every row). For every text, three questions were answered from its own words: which body of rules, what it requires, the rule in its own words. Every stated answer carries the sentence it rests on, checked against the stored text; 'not stated' means the text read does not address the question. A rule with several texts reads 'varies' where they disagree. 10 rules, 10 texts.", "embed": "
10 UK and US rules on monitoring workers that decide whether event logs about named employees may leave a company, each quoted from the statute or the regulator page, read 28 October 2026.
Rules on monitoring workers that reach an event log, sellprocessdatatoai.com
" }