Monitoring staff — CCTV, computer and email logging, or GPS on work vehicles — is legal in Australia, but it’s tightly regulated, and getting it wrong can mean penalties and destroyed trust. The rules come mainly from state surveillance laws (the NSW Workplace Surveillance Act 2005 is the most detailed), overlaid with privacy and work health and safety obligations. This guide explains what employers can and can’t do, and how to monitor lawfully. Put the rules into practice with our free workplace monitoring policy template.
Quick summary
- Three types:
Camera, computer and tracking surveillance — each has its own rules
- Give notice:
In NSW, at least 14 days’ written notice before overt surveillance starts
- Hard limits:
No cameras in toilets/change rooms; no tracking staff off-duty; covert needs a magistrate
- Document it:
Computer surveillance requires a circulated policy — put it in writing
The laws that apply
There’s no single national workplace-surveillance law. The clearest and most-cited is the Workplace Surveillance Act 2005 (NSW), which regulates three categories — camera, computer and tracking surveillance. The ACT has similar legislation, and Victoria, SA, WA, QLD, Tasmania and the NT regulate surveillance through their surveillance/listening-devices laws. On top of that sit privacy obligations and your work health and safety duties. Even where a state has lighter surveillance rules, monitoring can still breach privacy or employment obligations, so treat notice and a written policy as the baseline everywhere.
Camera, computer and tracking surveillance
Camera (CCTV)
Cameras must be clearly visible with signage at each entrance. Absolutely no cameras in toilets, change rooms or other areas where staff undress — no notice makes that lawful.
Computer & email
Monitoring of computers, email and internet use requires a circulated written policy telling staff how and when it happens.
Tracking (GPS)
Vehicle/asset tracking needs a clearly visible notice on the vehicle, and you can’t track employees when they’re off duty.
The notice and policy rules
The single most important rule is notice. In NSW you must give employees at least 14 days’ written notice before overt surveillance starts (a shorter period can be agreed in writing). The notice should say what kind of surveillance it is, how it will be carried out, when it starts, and whether it’s continuous or for a set period. New employees should be notified before they start.
For computer surveillance specifically, notice isn’t enough on its own — you need a written, circulated policy setting out how computer/email/internet monitoring is done. A monitoring policy plus an internet use policy cover this, and they pair with your broader technology & data policies.
Covert surveillance is a different beast
Covert (secret) surveillance of employees is heavily restricted — in NSW it generally requires authority from a magistrate. Don’t rely on hidden cameras or secret computer monitoring to catch misconduct; do it the lawful way with notice and policy, or seek legal advice first. Getting this wrong can attract civil and criminal penalties.
What you can never do
Hard limits
-
No cameras in toilets, bathrooms, change rooms or showers — regardless of notice or signage
-
No tracking of employees when they are not at work (e.g. a work-vehicle GPS running during personal time)
-
No covert surveillance without proper authority (in NSW, a magistrate’s authorisation)
-
No monitoring that isn’t covered by notice and, for computers, a circulated policy
-
No using surveillance for a purpose you didn’t tell staff about
How to monitor lawfully
The safe path is straightforward: decide what you genuinely need to monitor and why, put it in a written policy, give staff proper notice (14 days in NSW), make cameras visible and signed, keep tracking to work time only, and secure and limit access to the footage/logs. Because monitoring data is personal information, handle it in line with your workplace privacy obligations too.
Much of the legitimate need for monitoring — knowing who worked when — is better met by transparent, consented systems. RosterElf’s time and attendance captures start/finish times and GPS clock-ins that employees opt into shift by shift, giving you accurate records without covert surveillance.
Get the accurate records without the surveillance headache. RosterElf’s time and attendance captures consented clock-ins and exact hours, and our free technology & data policy templates help you document lawful monitoring — notice, policy and all.
Frequently asked questions
Can my employer monitor my work computer and emails?
Yes, employers can monitor work computers, email and internet use — but in NSW (and similarly elsewhere) only if they have a written, circulated policy telling staff how and when computer surveillance happens, and staff have been notified. Monitoring without a policy and notice is unlawful. Covert computer surveillance generally requires authority from a magistrate.
Does an employer have to tell you about surveillance?
Yes. In NSW you must give employees at least 14 days’ written notice before overt surveillance (camera, computer or tracking) begins, stating the type of surveillance, how it’s carried out, when it starts and whether it’s continuous. New employees must be notified before starting. Covert surveillance is separately restricted and usually needs a magistrate’s authorisation.
Is CCTV legal in the workplace?
Yes, with conditions. Cameras must be clearly visible (along with signage at entrances), staff must be notified, and cameras are absolutely prohibited in toilets, change rooms and similar private areas — no amount of notice makes surveillance there lawful. Footage is personal information and must be stored securely and used only for the stated purpose.
Can an employer track my work vehicle with GPS?
Yes, for work purposes and with notice — a clearly visible notice must be on the vehicle indicating it is tracked. Crucially, you cannot track an employee when they are not at work, so if a work vehicle is used in personal time the tracking must be off. Track only what you’ve told staff about, in a written policy.
What are the penalties for unlawful workplace surveillance?
Breaching workplace surveillance laws can attract civil and criminal penalties, and employers may have to pay affected employees damages or compensation. Beyond the legal risk, unlawful or covert monitoring badly damages trust. The safe approach is notice plus a written policy, visible cameras, work-time-only tracking, and legal advice before any covert surveillance.
