Employee monitoring law · Portugal
The Labour Code prohibits remote means used to monitor employee performance.
Performance monitoring by remote means is prohibited outright. Scope the deployment away from it.
- Region
- Europe
- Instruments
- 3 governing
- Employer duties
- 3 listed
- Last reviewed
- August 22, 2026
Portugal · what the law requires
Specific practices restricted
Article 20 of the Código do Trabalho bars the employer from using remote surveillance technology for the purpose of controlling employee performance. The exception is narrow, protection of people and property, and safety requirements, and the purpose test is applied to what the system is actually for, not to how it is labelled. Combined with the CNPD's position on continuous capture, this makes performance-motivated screen monitoring effectively unavailable, regardless of consent.
- No performance-purpose remote monitoringThe prohibition attaches to the purpose. A tool deployed to measure output falls foul of it even where employees have signed something.
- Teleworkers cannot be watched more closelyRemote staff must not be subject to more intensive monitoring than colleagues in the office. A remote-only rollout is a legal problem here.
- Security purposes must be genuineProtection of people and property is a real exception, but it has to be the actual reason, evidenced, and the configuration has to match it.
- Proof Ledger
- Outcomes
- Certificates
- Audit log
- Data access
- Disputes
- Data egress
- Export
- What We See
- Controls
- AKAria K. viewed screenshotsLena M. · 3 capturesScreen capturemacOS · London09:42a91f…4c023d7b…91ee
- JMJon M. exported time reportDesign team · CSVmacOS · Berlin09:313d7b…91ee77c5…0ba4
- SDSara D. opened capture reviewRavi P. · one flagged frameWindows · Manchester09:1877c5…0ba4e208…5f13
- wm_live_7f2… read /v1/deliverablesScoped key · read onlyPublic API · allowlisted IP08:57e208…5f13b64a…2d90
- LMLena M. viewed her own recordWhat We SeemacOS · London08:44b64a…2d901cf9…8e77
- AKAria K. changed capture policyBlur set to alwaysmacOS · London08:261cf9…8e7705d2…ae31
The instruments, and which control answers each duty
- GDPR: Regulation (EU) 2016/679. Sets the floor everywhere in the EEA: a lawful basis, purpose limitation, data minimisation, transparency and a DPIA where monitoring is high risk. National law below adds to this, never subtracts.
- Labour Code: Código do Trabalho art. 20. Prohibits remote surveillance means for the purpose of controlling employee performance; permits them only for protection of people and property or safety.
- Telework regime: Código do Trabalho art. 169-B. Explicitly forbids the employer from using technology to monitor teleworkers more intensively than on-site staff.
No product does this part
What you must still do yourself
Compliance is a property of your deployment. These are the steps in Portugal that no vendor can complete on your behalf, and skipping them is what turns a rollout into a finding.
- 1Decide honestly what the deployment is for. If the answer is performance measurement, art. 20 is a blocker and no configuration fixes it.
- 2Take Portuguese employment-law advice before rolling out to Portuguese staff. This is a jurisdiction where the answer may be "not this way".
- 3Notify the CNPD where required and keep the DPIA current.
- If you get it wrongBreach of art. 20 is a serious administrative offence under the Labour Code, separate from GDPR exposure, and evidence obtained through it is not usable in disciplinary proceedings.
Verify the claim
Every control above, on the page that describes it
Sources and review date
Last reviewed August 22, 2026This is a summary of how employee-monitoring rules generally work in this jurisdiction, written to help you scope a rollout and brief your own advisers. It is not legal advice, it is not a substitute for it, and law changes. Verify against the primary sources listed and take local counsel before you deploy.
Nearby jurisdictions
Monitoring law elsewhere in Europe
- SwitzerlandSystems for monitoring worker behaviour are prohibited by the labour ordinance.
- FranceConsult the CSE first. Skipping it is the criminal offence of obstruction.
- BelgiumCBA 81 governs electronic monitoring and binds every private-sector employer.
- SpainDigital rights are written into the data protection act, and reps must be involved.
- FinlandA dedicated working-life privacy act, and a necessity test read very narrowly.
- PolandThe Labour Code lists the permitted purposes, and productivity is not one of them.
Point it at one team for a week.
Create the account, put the agent on a handful of desks, and leave it alone. On Friday you read the week instead of reconstructing it: hours against their projects, focus and idle per person, and the timesheets already filled in.
Free for two seats. No card, and no sales call to sit through.