Workplace privacy rights you should know

Have you ever wondered if your boss can read your work emails, track your movements, or watch you on CCTV throughout the day? In today’s interconnected world, where technology is an integral part of our jobs, it’s natural to feel a bit uneasy about how much your employer knows about your activities. Understanding your workplace privacy rights in Cyprus isn’t just a legal formality; it’s about safeguarding your personal space and dignity while at work. This article is designed to shed light on what employers can and cannot do when it comes to monitoring their employees, helping you feel more secure and informed about your rights as a resident of Cyprus.

What Does ‘Workplace Privacy’ Really Mean in Cyprus?

Workplace privacy, simply put, is your right to control your personal information and activities while you are at work. In Cyprus, like the rest of the EU, this right is primarily protected by the General Data Protection Regulation (GDPR) and local data protection laws. These laws aim to strike a balance between an employer’s legitimate business needs (like productivity, security, and preventing misuse of company resources) and your fundamental right to privacy.

Emails, Phones, and Internet Usage: Can My Boss See It All?

This is one of the most common concerns. Generally, employers have a right to monitor company-issued equipment and networks if it’s for legitimate business purposes. However, they can’t just snoop around. They must have a clear policy in place, inform you about it, and ensure the monitoring is proportionate and necessary.

• Company Email and Internet: If your employer provides you with an email address or internet access, they can monitor its usage. BUT, they should inform you about this monitoring. They also can’t read your personal emails or browse your personal internet history if you accidentally used company equipment for personal reasons, unless there’s a serious suspicion of misconduct.
• Personal Devices: Your employer generally has NO right to monitor your personal phone or laptop, even if you use it for work purposes.
• Practical Tip: Always assume that anything you do on company devices or networks could potentially be monitored. It’s best to keep personal communications separate using your own devices and networks. If your workplace allows some personal use, make sure you understand the boundaries.

CCTV and Biometrics: Am I Always on Camera?

CCTV cameras are common in many workplaces in Cyprus for security reasons. However, their use is strictly regulated to protect your privacy.

• CCTV: Employers can install cameras in workplaces for security, health and safety, or to prevent theft. However, they must inform you about the presence of cameras and their purpose. They cannot place cameras in areas where you have a reasonable expectation of privacy, such as restrooms, changing rooms, or break areas where you’re not performing work duties. Monitoring should also be limited to what is necessary – constant surveillance of individual employees without cause is generally not allowed.
• Biometrics (Fingerprints, Facial Recognition): Using biometric data for clocking in/out or access control is a hot topic. While it offers convenience, it involves processing ‘special category’ personal data under GDPR, which requires stricter rules. Employers need a strong justification and your explicit consent or a legal basis that allows it, and they must demonstrate that it’s absolutely necessary and proportionate.
• Practical Tip: If you notice new cameras or biometric systems and haven’t been informed, don’t hesitate to ask your employer about the purpose and the company’s policy on their use.

Location Tracking: Where Do I Stand?

For roles that involve travel or working off-site, GPS tracking can be a concern.

• Company Vehicles/Devices: If your employer provides a company car or a mobile phone with GPS tracking, they can generally monitor your location during working hours, especially if it’s necessary for your job (e.g., delivery drivers, field technicians). Again, they MUST inform you about it.
• Outside Working Hours: Employers generally cannot track your location outside of working hours, even if you’re using a company device, unless there’s a very specific and justified reason (e.g., serious security risk) and clear prior notification.
• Personal Devices: An employer tracking your personal mobile phone’s location without your explicit consent is a major privacy breach.
• Practical Tip: Clarify your company’s policy on location tracking. If you use a company phone, ask if tracking is active 24/7 or only during work hours.

Data Protection Law in Cyprus: Your Shield

The Cyprus Commissioner for Personal Data Protection is the supervisory authority that enforces GDPR and local data protection laws. These laws grant you several important rights as an employee.

Your Rights as an Employee: What You Can Do

Knowing your rights is the first step in protecting your privacy:

• Right to Information: Your employer must tell you what data they collect about you, why they collect it, how they use it, and who they share it with. This includes information about any monitoring practices.
• Right of Access: You have the right to request access to the personal data your employer holds about you.
• Right to Object: In certain situations, you can object to your employer processing your personal data, especially if it’s not for a legitimate purpose or goes beyond what’s necessary.
• Right to Rectification: If your employer holds inaccurate or incomplete data about you, you have the right to have it corrected.
• Right to Erasure (‘Right to be Forgotten’): In some cases, you can request your employer to delete your personal data.
• Practical Tip: If you feel your privacy rights are being violated, start by addressing it with your employer or HR department. Many issues can be resolved internally through open communication. Keep records of any communications.

Understanding your workplace privacy rights is crucial for a comfortable and secure working environment. While employers have legitimate interests, your privacy is a fundamental right that is protected by law here in Cyprus. By being informed and proactive, you can ensure that your personal space and data are respected.

If you’re concerned about specific monitoring practices in your workplace or feel your privacy rights have been infringed, it’s always wise to seek professional guidance. Ask a legal expert to assess your privacy situation to understand your options and ensure your rights are protected.