Your company laptop arrives on day one, pre-configured and ready to go. Within days you spot an idle-status indicator that changes colour when you stop typing, a login-time dashboard, and an attendance marker on every calendar invite. No one mentioned any of it during the recruitment process. If that scenario feels familiar, you are part of a substantial majority: according to Owl Labs' 2026 State of Hybrid Work Report, 59% of UK employees say they are closely monitored at work, with tracking spanning login times, mouse and keyboard activity, and meeting attendance.

What close monitoring looks like in practice

Workplace monitoring rarely announces itself. It sits inside the software you already use every day: activity logs in your collaboration platform, idle timers in your endpoint management tool, keystroke counts, calendar metadata. That invisibility is precisely what makes it unsettling once you do notice it, and precisely why knowing the legal framework matters.

The stakes can be significant. Brazilian bank Itau reportedly laid off hundreds of employees after covertly tracking their devices, a case that sharpened the broader debate about how far monitoring data should shape decisions about people's jobs and livelihoods.

Not every tool is built to surveil, though. Mark Banfield, chief revenue officer at TeamViewer, made the distinction clearly when speaking to ITPro:

Someone can be logged in all day and still lose a lot of time to slow applications, unreliable devices, and technical problems that keep coming back.

Banfield's point is that responsible monitoring software diagnoses friction in your working day rather than scoring your productivity. That is a useful framing for evaluating any tool your employer deploys: is it fixing your laptop, or rating you?

Managers are split, and their reasons matter to you

Monitoring is not a settled question even among the managers who approve it. A 2025 survey by the Chartered Management Institute (CMI) found that 53% of managers support employee monitoring, while 42% oppose it. Those in favour most commonly cited safeguarding against inappropriate behaviour (60%) and detecting misuse of systems or working time (56%).

The managers who resist monitoring gave reasons you will likely recognise. Among them, 79% said it undermines trust, 58% said it damages morale, and 59% said better alternatives already exist, including clearly defined key performance indicators.

For you as an employee or candidate, that split carries a practical implication. The way a company handles monitoring is a deliberate cultural choice, not an operational inevitability. When you are evaluating an offer or reconsidering your current role, it is worth reading that choice as evidence of how management views the people it employs.

What UK GDPR and the ICO require from your employer

In the UK, any monitoring that processes information about you is a data protection matter. UK GDPR applies, and the Information Commissioner's Office (ICO) has published specific employment practices guidance making clear that covert or disproportionate monitoring is very unlikely to be lawful. Becky White, senior data protection and privacy solicitor at Harper James, set out the core test when speaking to ITPro:

Under UK GDPR, employers need a lawful basis, a clear purpose, and a proportionate approach, including considering whether a less intrusive option would work.

Broken down into practical checkpoints, UK GDPR gives you four things to hold any monitoring programme against:

• Lawful basis and clear purpose. Your employer should be able to state, in writing, why the monitoring exists and on what legal ground under UK GDPR it proceeds.
• Proportionality. The scope of tracking should match the problem it is meant to address. A less intrusive option must have been considered first.
• Transparency. Article 13 of UK GDPR sets out what employees must be told about how their data is processed, including monitoring. Silence is not a compliant approach.
• Data minimisation. This is a legal requirement: only the information genuinely necessary for the stated purpose should be collected.

Transparency alone is not enough to make monitoring lawful. As White noted, where monitoring is likely to result in a high risk to workers' rights and freedoms, Article 35 of UK GDPR requires a data protection impact assessment (DPIA) before anything is switched on. Her summary is worth keeping in mind: software that can capture every click does not automatically have permission to do so.

The ICO's employment practices guidance also makes clear that monitoring should not extend to workers' private lives or personal devices without explicit justification, and that any covert monitoring requires exceptional circumstances and senior sign-off. The ICO can issue enforcement notices and civil monetary penalties for serious breaches, so employers do have a material incentive to get this right.

Questions to ask before you sign a contract or a monitoring policy

Monitoring rarely surfaces during an interview, but you are fully entitled to ask about it. Bradley Beighton, senior technical architect at the Ricoh Digital Experience Centre, told ITPro that the threshold is straightforward: if a manager would feel uncomfortable explaining a particular measure to their team, that is a reliable signal it probably should not be measured.

The four things Beighton identified as basic disclosures translate directly into questions you can ask before accepting an offer or at any point once you are in post:

• What data is collected: login times, activity levels, meeting attendance, location, or something else?
• What is explicitly not collected, and how is that boundary maintained?
• Who has access to the data, and is it used in performance reviews or disciplinary proceedings?
• How long is data retained, and what triggers its deletion?
• Was a DPIA completed before the monitoring tool went live, as required by Article 35 of UK GDPR where risk to workers' rights is high?

Under the Employment Rights Act 1996, any dismissal must be fair and based on a sound evidentiary process. If monitoring data forms part of a disciplinary case against you, the lawfulness of how that data was collected becomes directly relevant to whether the dismissal holds up. Clear, specific answers during your due diligence now may protect you later. Reading verified employee reviews from people already working at a company can also give you a more accurate picture of how monitoring plays out in practice, beyond what any written policy commits to.

If you believe the tracking goes beyond what is lawful

You have concrete options, and most of them begin with a written question rather than a confrontation. These steps are graded from low-stakes to escalation:

• Request the transparency notice in writing. Ask for the written policy or privacy notice that sets out what is monitored, the lawful basis, the purpose, and the retention period. Under Article 13 of UK GDPR, this information should already have been provided to you.
• Raise proportionality and data minimisation directly. If the tool tracks far more than its stated purpose requires, you can point to those specific UK GDPR obligations in your written question. Framing your concern around legal principles rather than personal discomfort makes it easier for HR to respond constructively.
• Keep your own contemporaneous record. Note what you were told, by whom, and when, particularly if monitoring data later surfaces in a performance conversation or formal disciplinary process.
• Contact ACAS for free, independent guidance. ACAS (the Advisory, Conciliation and Arbitration Service) offers free telephone and online advice on workplace disputes and can help you assess whether monitoring evidence used in a disciplinary or dismissal context was gathered lawfully.
• Consider a complaint to the ICO. If your employer cannot demonstrate a lawful basis, failed to carry out a required DPIA, or is processing more data than it needs, you can raise a concern directly with the Information Commissioner's Office. The ICO has the power to investigate and, where appropriate, to act.

This matters most when your position is at risk. Monitoring that bypassed the lawful basis, proportionality, or transparency requirements of UK GDPR can be challenged if the resulting data is used to justify a dismissal, particularly when tested against the fairness provisions of the Employment Rights Act 1996.

The wider picture for UK workers

Close monitoring is now the everyday reality for a majority of UK employees. UK GDPR draws clear lines around it: a lawful basis, a proportionate scope, honest transparency notices, and, where risk to workers is high, a formal DPIA before anything is activated. The ICO provides enforcement backing and published guidance. ACAS provides a free route to independent advice when disputes arise. Knowing those lines puts you in a stronger position whether you are weighing a new offer, reviewing a contract update, or navigating a conversation about performance.

Bradley Beighton's observation from his work at the Ricoh Digital Experience Centre stands as a useful benchmark: the organisations that get the most from their people are those where staff feel comfortable, supported and able to do their best work, not those tracking their every move. If the monitoring culture at your current or prospective employer does not reflect that, your experience, shared through verified and anonymous channels, can help the next person make a better-informed decision before they sign.