Employee monitoring law · Ireland
The DPC accepts a legitimate business interest, and then tests proportionality hard.
Document the legitimate interest, then evidence the proportionality assessment that sits behind it.
- Region
- Europe
- Instruments
- 3 governing
- Employer duties
- 3 listed
- Last reviewed
- August 22, 2026
Ireland · what the law requires
Notice and proportionality
Ireland applies the GDPR and the Data Protection Act 2018 with DPC guidance on workplace monitoring. The DPC accepts that employers have a legitimate interest in protecting their business, reputation, resources and equipment, but insists any limitation of the employee's privacy be proportionate to the likely damage. In practice the DPC looks for a documented assessment, clear prior notice, and evidence that a less intrusive option was considered.
- Proportionate to the likely damageThe DPC frames it as a comparison: the intrusion has to be measured against the harm the employer is guarding against.
- Clear prior noticeEmployees must know what is monitored and why, before it begins, in language they will actually read.
- A documented assessmentA DPIA for high-risk monitoring, and a legitimate interests assessment where that is the basis relied on.
- Proof Ledger
- Outcomes
- Certificates
- Audit log
- Data access
- Disputes
- Data egress
- Export
- What We See
- Controls
- AKAria K. viewed screenshotsLena M. · 3 capturesScreen capturemacOS · London09:42a91f…4c023d7b…91ee
- JMJon M. exported time reportDesign team · CSVmacOS · Berlin09:313d7b…91ee77c5…0ba4
- SDSara D. opened capture reviewRavi P. · one flagged frameWindows · Manchester09:1877c5…0ba4e208…5f13
- wm_live_7f2… read /v1/deliverablesScoped key · read onlyPublic API · allowlisted IP08:57e208…5f13b64a…2d90
- LMLena M. viewed her own recordWhat We SeemacOS · London08:44b64a…2d901cf9…8e77
- AKAria K. changed capture policyBlur set to alwaysmacOS · London08:261cf9…8e7705d2…ae31
The instruments, and which control answers each duty
- GDPR: Regulation (EU) 2016/679. Sets the floor everywhere in the EEA: a lawful basis, purpose limitation, data minimisation, transparency and a DPIA where monitoring is high risk. National law below adds to this, never subtracts.
- Data Protection Act 2018: DPA 2018 (Ireland). The Irish implementation, including the DPC's enforcement powers.
- DPC workplace guidance: Data Protection Commission: data protection in the workplace. Guidance on monitoring of networks, internet and email, and on the proportionality analysis expected.
No product does this part
What you must still do yourself
Compliance is a property of your deployment. These are the steps in Ireland that no vendor can complete on your behalf, and skipping them is what turns a rollout into a finding.
- 1Write the proportionality assessment and keep it with the DPIA.
- 2Give clear prior notice and record that you did.
- 3Review the configuration periodically: the DPC treats a stale assessment as no assessment.
- If you get it wrongDPC fines up to €20m or 4% of global turnover, plus Workplace Relations Commission exposure.
Verify the claim
Every control above, on the page that describes it
- Aggregate focus and capacity analytics that run with screenshot capture disabledShow a less intrusive option was available and chosen
- Notice and consent record with policy version and dateEvidence prior notice per person
- Per-person self-view plus the read-only v1 REST APIRespond to an access request without a manual trawl
Sources and review date
Last reviewed August 22, 2026This is a summary of how employee-monitoring rules generally work in this jurisdiction, written to help you scope a rollout and brief your own advisers. It is not legal advice, it is not a substitute for it, and law changes. Verify against the primary sources listed and take local counsel before you deploy.
Nearby jurisdictions
Monitoring law elsewhere in Europe
- SwedenCo-determination negotiation before any significant change, including this one.
- NorwayControl measures need discussion with employee representatives and periodic review.
- DenmarkSix weeks' notice under the collective agreement framework, and a strict purpose test.
- GermanyThe works council holds a veto, and a productivity dashboard is enough to trigger it.
- AustriaA works council veto with no workaround, and no council means individual consent.
- ItalyUnion agreement or a labour inspectorate authorisation, a filing, not a policy.
Point it at one team for a week.
Create the account, put the agent on a handful of desks, and leave it alone. On Friday you read the week instead of reconstructing it: hours against their projects, focus and idle per person, and the timesheets already filled in.
Free for two seats. No card, and no sales call to sit through.