Loading page
About this tool
See what common workplace monitoring actually captures, score how much your employer has disclosed, and draft the questions to put to HR in writing.
This explainer sets out what thirteen common workplace monitoring practices actually capture — from web proxy logs and endpoint agents through to keystroke logging, webcam capture and mobile device management on a personal phone — and scores how much of it your employer has put in writing against the ten items a workable monitoring notice normally covers. It then assembles a neutral written request you can send to HR for the gaps. The legal backdrop described includes the Digital Personal Data Protection Act, 2023, which treats an employer as a Data Fiduciary and lists employment among the legitimate uses in Section 7.
Open Employee Monitoring Rights Explainer on AltFTool — it loads instantly in your browser.
Add your input to the workspace.
Adjust the options until the result looks right.
Copy or download the output and put it to work.
Plain descriptions of what screenshots, keystroke logs, DLP agents and MDM profiles actually capture.
Two scores: how much is monitored, and how much of it has been explained in writing.
A neutral request naming the practices in place and the specific points missing from the policy.
Monitoring of employer-provided systems is common and generally permitted where it is disclosed and tied to a defined purpose. Under the Digital Personal Data Protection Act, 2023 the employer is a Data Fiduciary and employment is listed as a legitimate use in Section 7, so consent is not always the basis — but the duties of purpose limitation, security safeguards and erasure once the purpose is served still apply. Whether a specific practice is lawful in your case depends on your contract, sector and facts, so take advice from an employment lawyer.
It depends entirely on the enrolment type. A work profile confines management to work apps and their data, and the employer generally cannot see personal apps, photos or messages outside it. Full device enrolment can extend to installed app inventories, network details, location and the ability to wipe the whole device. Ask for the specific profile in writing, and ask exactly what a remote wipe would remove.
That is the question most policies leave vague, which is why it is worth asking directly. Location tracking on a company phone, always-on video and personal social media review are the practices that most often extend past the working day. Ask whether each tool pauses off-shift and on leave, and get the answer in writing rather than verbally.
Frame it as wanting to work within the policy rather than challenging it: ask for the current monitoring notice, then list the specific points you could not find in it — hours of operation, who can view the data, retention periods, and whether any of it feeds appraisal or automated decisions. A written request that names specifics is answered far more often than a general objection, and it leaves you a dated record either way.