What notice must employers give before commencing workplace surveillance in Australia?

The notice requirements for workplace surveillance vary by state and territory. In New South Wales, the Workplace Surveillance Act 2005 (NSW) imposes the most detailed notification requirements in Australia. Under s7 of the Act, an employer must give each worker notice of camera surveillance, computer surveillance, or tracking surveillance before commencing such surveillance. The notice must be given at least 14 days before the surveillance commences, must be in writing, and must notify the worker that the surveillance will be conducted. If a new worker commences employment after the notice period has elapsed, the employer must give the worker notice before the worker commences work. If a new form of surveillance is introduced that was not covered by the original notice, a further 14-day notice must be given before that new form of surveillance commences. In Victoria, the Surveillance Devices Act 1999 (VIC) does not contain the same prescriptive prior notice requirements as the NSW Act, but operates through prohibitions on the use of surveillance devices without consent. Other states and territories have their own surveillance legislation, and employers operating in multiple jurisdictions should ensure their policy complies with the legislation in each relevant jurisdiction. This Workplace Surveillance Policy satisfies the notice requirements under the applicable legislation, provided it is distributed to all workers at least 14 days before the relevant surveillance commences.

Can employers monitor employees' emails and internet use in Australia?

Yes, but subject to important legal constraints. In New South Wales, s3 of the Workplace Surveillance Act 2005 (NSW) defines 'computer surveillance' broadly to include monitoring or recording by a computer surveillance device of information input into or output from a computer used by a worker. This captures monitoring of emails, websites visited, files downloaded, and software used. An employer can lawfully conduct computer surveillance of workers if it has given the required prior written notice under s7 of the Act. There is no requirement to obtain the worker's consent, but the surveillance must be overt (not covert). Under the Telecommunications (Interception and Access) Act 1979 (Cth), the interception of private communications while in transit (i.e. before they reach the recipient's device) is generally prohibited without lawful authority. However, an employer monitoring email on its own servers or accessing stored emails (rather than intercepting them in transit) is generally permitted where notice has been given. Employers should also be aware that the Privacy Act 1988 (Cth) governs the collection and use of personal information obtained through computer surveillance, and employers should have a clear purpose for collection that is set out in their privacy policy. Monitoring of personally-owned devices (BYOD) is more restricted and should be limited to Organisation data and systems only.

Is covert surveillance of employees lawful in Australia?

Covert surveillance (surveillance conducted without the worker's knowledge) is generally prohibited under Australian surveillance legislation. In New South Wales, s10 of the Workplace Surveillance Act 2005 (NSW) prohibits an employer from conducting covert computer surveillance, and s11 prohibits covert camera surveillance and covert tracking surveillance of workers. There is a limited exception in s9: an employer may apply to the Magistrates Court for an order authorising covert surveillance if the employer has reasonable grounds to believe that the worker is engaged in or will engage in conduct that: (a) is an offence against a law of the Commonwealth or New South Wales; or (b) would justify termination of the worker's employment. The court may make an order authorising the covert surveillance if it is satisfied that the employer has reasonable grounds for that belief and that it is appropriate to issue the order. Even if an order is obtained, the surveillance must be conducted in accordance with the terms of the order and must be proportionate to the suspected misconduct. In Victoria, the Surveillance Devices Act 1999 (VIC) generally prohibits the use of listening devices, optical surveillance devices, tracking devices, and data surveillance devices without consent, but contains exceptions for surveillance conducted in connection with investigating a serious criminal offence. Employers who suspect an employee of serious misconduct should seek legal advice before conducting any covert surveillance.

Can surveillance evidence be used to dismiss an employee in Australia?

Yes, but the surveillance must have been conducted lawfully and the dismissal process must comply with the procedural fairness requirements under the Fair Work Act 2009 (Cth). Under the Fair Work Act, a dismissal is unfair if it is harsh, unjust, or unreasonable. In assessing whether a dismissal was unfair, the Fair Work Commission will consider whether there was a valid reason for the dismissal, whether the employee was notified of that reason, whether the employee was given an opportunity to respond, and whether any other person was involved in the decision. Surveillance evidence (such as CCTV footage or computer logs) can constitute a valid reason for dismissal if it shows that the employee engaged in serious misconduct. However, the admissibility and weight of such evidence in Fair Work Commission proceedings can be affected by how the surveillance was conducted. Surveillance conducted in breach of the Workplace Surveillance Act 2005 (NSW) or other applicable legislation may be challenged. In particular, evidence obtained through unlawful covert surveillance is less likely to be admitted or given significant weight. Employers should ensure that: all surveillance is conducted in accordance with the applicable legislation and this Policy; employees are given the opportunity to view and respond to any surveillance evidence before any decision to dismiss is made; and the decision to dismiss is made by an appropriate decision-maker after proper consideration of all relevant evidence.

Does GPS tracking of employee vehicles require employee consent in Australia?

In New South Wales, GPS tracking of workers in company vehicles is classified as 'tracking surveillance' under the Workplace Surveillance Act 2005 (NSW). An employer can conduct overt tracking surveillance without the worker's individual consent, provided the employer has given each worker written notice of the tracking at least 14 days before it commences (or before the worker starts work if they start after the notice period). The notice must state that tracking surveillance will be conducted, the kind of tracking surveillance (e.g. GPS on company vehicles), and when surveillance may occur. Covert tracking surveillance (where the GPS is installed without the worker's knowledge) is prohibited under s11 of the Workplace Surveillance Act 2005 (NSW), subject to the limited exception where a court order has been obtained. In Victoria, tracking devices installed on vehicles require consent under the Surveillance Devices Act 1999 (VIC), subject to exceptions including where the person in control of the vehicle has consented. An employer who owns the vehicles and gives workers prior notice of tracking may be able to rely on implied consent or the terms of the employment contract. In Western Australia, the Surveillance Devices Act 1998 (WA) similarly restricts the installation of tracking devices without consent. Employers should review the applicable legislation for their state and territory before installing GPS tracking devices, and should ensure that their employment contracts and vehicle use policies clearly address GPS tracking.

What are the consequences of conducting unlawful workplace surveillance in Australia?

The consequences of conducting unlawful workplace surveillance in Australia can be significant and include criminal penalties, civil liability, and adverse outcomes in employment proceedings. In New South Wales, under the Workplace Surveillance Act 2005 (NSW), conducting covert surveillance in breach of the Act constitutes an offence that can attract fines of up to $11,000 for an individual and $55,000 for a corporation. The District Court may also order that any surveillance device used in the unlawful surveillance be forfeited or rendered inoperable. In Victoria, the Surveillance Devices Act 1999 (VIC) imposes criminal penalties for the unauthorised use of surveillance devices, including imprisonment for up to two years and substantial fines. At the federal level, if unlawful surveillance involves the interception of private communications in transit, the Telecommunications (Interception and Access) Act 1979 (Cth) can apply, with penalties including imprisonment. In addition to criminal penalties, an employer who conducts unlawful surveillance may face civil liability, including damages claims from affected employees. In Fair Work Commission proceedings (such as unfair dismissal applications), unlawfully obtained surveillance evidence is less likely to be admitted or relied upon, and the use of such evidence may itself be characterised as a factor making the dismissal harsh or unreasonable. Employers who conduct or are considering conducting workplace surveillance should seek legal advice to ensure compliance with all applicable state, territory, and federal legislation.

Workplace Surveillance Policy (Australia) — Australia

Create a compliant Australian Workplace Surveillance Policy notifying employees of camera/CCTV, computer and internet monitoring, and GPS/vehicle tracking. Compliant with the Workplace Surveillance Act 2005 (NSW), Surveillance Devices Act 1999 (VIC), Surveillance Devices Act 2007 (NT), Listening and Surveillance Devices Act 1992 (TAS), Surveillance Devices Act 2016 (SA), and Privacy Act 1988 (Cth) APPs. Satisfies the mandatory 14-day prior written notice requirement under the NSW Act. Covers overt and covert surveillance provisions, BYOD (Bring Your Own Device) monitoring, data use and retention, disciplinary use of surveillance evidence, and worker rights and complaint procedures.

What Is a Workplace Surveillance Policy (Australia)?

A Workplace Surveillance Policy is a document that employers provide to workers (employees, contractors, and other personnel) explaining that the employer conducts surveillance in the workplace, describing the nature and scope of that surveillance, and providing the notice required by applicable Australian law. Workplace surveillance in Australia is primarily regulated by state and territory legislation, with the Workplace Surveillance Act 2005 (NSW) being the most comprehensive and prescriptive statute. Other relevant Acts include the Surveillance Devices Act 1999 (VIC), Surveillance Devices Act 2007 (NT), Listening and Surveillance Devices Act 1992 (TAS), and Surveillance Devices Act 2016 (SA).

Under the Workplace Surveillance Act 2005 (NSW), workplace surveillance is categorised into three types: camera surveillance (including CCTV cameras and other optical surveillance devices); computer surveillance (including monitoring of email, internet use, data storage, and other computer activity); and tracking surveillance (including GPS tracking of vehicles and mobile devices). Employers may conduct overt surveillance of all three kinds without the worker's individual consent, provided they give each worker at least 14 days' written notice before surveillance commences.

Covert surveillance — surveillance conducted without the worker's knowledge — is generally prohibited under the Workplace Surveillance Act 2005 (NSW) and equivalent legislation in other states and territories. An employer may only conduct covert surveillance with a court order obtained on specific grounds (reasonable belief of serious misconduct by the worker).

A Workplace Surveillance Policy serves multiple functions: it satisfies the mandatory prior notice requirements under the NSW and other state Acts; it documents the scope and purpose of the employer's surveillance activities; it informs workers of their rights (including the right to make enquiries and complaints); and it creates a record that notice was given to each worker before surveillance commenced.

When Do You Need a Workplace Surveillance Policy (Australia)?

A Workplace Surveillance Policy is needed by any employer in Australia that conducts any form of surveillance of workers. Given the broad definition of 'surveillance' under the applicable legislation, this category is broad and includes most employers that operate CCTV cameras, monitor email or internet use, or use GPS tracking on company vehicles.

Employers operating in New South Wales have the most pressing need for a Workplace Surveillance Policy. The Workplace Surveillance Act 2005 (NSW) imposes mandatory 14-day prior written notice requirements and prohibits covert surveillance without a court order. Employers who do not provide this notice before commencing surveillance commit an offence under the Act and may face criminal penalties. Even if the surveillance has been in place for some time, it is good practice to issue (or update) a Workplace Surveillance Policy when significant changes are made to surveillance practices.

Retail and hospitality businesses that use CCTV cameras for security and theft prevention need a Workplace Surveillance Policy to ensure that employees are properly notified of the cameras and understand the purpose and limitations of camera surveillance.

Technology and financial services companies that monitor employees' use of IT systems — including email monitoring, web filtering, data loss prevention tools, and endpoint monitoring software — need a Workplace Surveillance Policy that clearly explains the scope of computer surveillance and the employer's rights to access and review employee data.

Logistics, transport, and field services businesses that use GPS tracking on company vehicles or mobile devices to monitor driver safety, route compliance, and delivery times need a Workplace Surveillance Policy that provides the required notice of tracking surveillance and explains the purposes for which tracking data is used.

Any employer operating a Bring Your Own Device (BYOD) program — where workers use personally-owned devices to access employer systems — should have a Workplace Surveillance Policy that specifically addresses the employer's monitoring capabilities on personal devices and clearly delineates between personal and employer data.

What to Include in Your Workplace Surveillance Policy (Australia)

A legally compliant and effective Australian Workplace Surveillance Policy must include the following key elements.

Employer identification: The full legal name, ABN or ACN, and contact details of the employing organisation, and the identity of the person responsible for the Policy (such as the HR Manager or Privacy Officer).

Legal framework: A reference to the applicable surveillance and privacy legislation, including the Workplace Surveillance Act 2005 (NSW), Surveillance Devices Act 1999 (VIC), and other applicable Acts. Workers should understand the legal basis on which surveillance is conducted.

Scope of application: Who the Policy applies to — typically all workers including employees, contractors, labour hire workers, and other personnel who access the employer's premises or use the employer's systems.

Camera surveillance notice: If CCTV cameras are used, the Policy must identify the locations where cameras are installed. Cameras must be positioned in a way that respects workers' reasonable expectation of privacy, and must not be installed in bathrooms, change rooms, or other areas of personal privacy.

Computer surveillance notice: If computer and internet monitoring is conducted, the Policy must describe the scope of monitoring — including what systems, data, and activities are monitored. Workers must be informed that employer-provided devices and systems are subject to monitoring and that they should have no expectation of privacy on those systems.

Tracking surveillance notice: If GPS or location tracking is used, the Policy must identify what is tracked (vehicles, devices, or equipment), when tracking applies (working hours only or at all times), and the purposes of tracking.

Covert surveillance provisions: The Policy should address the employer's approach to covert surveillance — specifically, that covert surveillance is generally prohibited and will only be conducted in accordance with applicable law (including with a court order in NSW).

Data use and retention: The Policy should explain how surveillance data is used (including in disciplinary proceedings), how long it is retained, and to whom it may be disclosed.

Worker rights and complaint process: Workers must be informed of their right to make enquiries about surveillance, their privacy rights, and the process for making a complaint — including escalation to the OAIC or relevant workplace regulator.

What Is a Workplace Surveillance Policy (Australia)?

When Do You Need a Workplace Surveillance Policy (Australia)?

What to Include in Your Workplace Surveillance Policy (Australia)

Frequently Asked Questions

Related Documents

Employee Privacy Notice (Australia)

Privacy Policy (Australia)