Ethical employee monitoring that employees can see
Monitoring works when the people being measured know what is recorded, why, and how to see or pause it. Here is the standard emai is built on, and the legal basics to check before you start.
- Visible to every employee, always
- Consent-based and pausable by design
- Only the data the purpose needs
Employees see their own data
Self-service access means every person can view their own time entries, categories and the reports that include their time.
Employees hold the timer
People start and stop their own timer or add manual entries. Nothing runs in the background without a visible, active timer.
Team-level insight, not scores
Reports show workload by team and project. emai does not produce individual scoring or rankings of people.
Audit trail and data rights
Corrections are logged with a clear history. Data export and deletion are available, and data is stored in the EU (Frankfurt).
Most monitoring disputes start with secrecy. Employees learn that they were measured, and only then ask what was collected and why. Ethical employee monitoring starts from the opposite position. The people being measured know the rules before the first record is made, can see their own data, and have a clear way to pause or question it. emai is built on that standard.
What ethical employee monitoring means
Ethical monitoring is not a single feature. It is a set of tests a system has to pass in daily use:
- Visible: employees know what is recorded and can see it.
- Consented or clearly agreed: the policy is shared before tracking starts, and it is explained in plain language.
- Purpose-limited: data is used for the stated purpose, such as project budgets or payroll, and nothing else.
- Minimal: only the data the purpose needs is collected, and it is kept for a fixed period.
- Owned by the employee: people can see, correct and export their own records.
A tool that fails any of these tests may still produce reports, but the trust it builds will not last.
The five principles behind emai
Visible: no hidden layer
Every record in emai has an owner who can see it. Employees see their own time entries, the project and task categories applied to them, and the reports that include their hours. If something is recorded, it is on the screen, not in a file the employee will never see.
Consent-based: explained before it starts
Agreement needs information first. Before a team uses emai, the policy should describe what is tracked, who can view it, how long it is kept and how to raise a concern. Sharing this document before the first report is the difference between monitoring people accept and monitoring they discover.
Pausable: the employee holds the timer
emai's time tracking is driven by the employee. People start and stop their own timer, or add manual entries afterwards. Tracking is not a background process that runs out of sight. Where your policy allows a pause, employees use it openly.
Data-minimised: collect what the purpose needs
Ethical monitoring asks a narrow question: what does this purpose require? For time tracking and project budgets, that is hours, projects and task types. It is not keystrokes, private messages or continuous screenshots. Less data means fewer risks, shorter retention and fewer questions later.
Employees own their view
Team leaders need insight, but individuals need access to their own record. emai gives managers team and project reports, and gives employees their own entries and corrections. Changes are logged in the audit trail, so a question about a record can be answered by looking at the history rather than by memory.
What covert monitoring looks like, and why we reject it
Some tools market hidden features as "stealth" or "invisible" monitoring. These typically include keystroke logging, screenshots taken without notice, and activity tracking that the user cannot see. emai does not offer these features, and it does not support configurations that hide tracking from the people it affects.
The reason is practical as well as ethical. Covert monitoring is hard to justify under data protection law, it damages trust once discovered, and it turns a time tool into an investigation tool. A team that wants to know where its hours go should be able to show every employee exactly how that works.
Is employee monitoring legal? US and UK basics
The rules vary widely, so treat the summary below as a starting point. It is not legal advice.
United States
Federal law, mainly the Electronic Communications Privacy Act (18 U.S.C. §2511), restricts intercepting communications. Employers usually have more room to monitor company-owned devices and networks, especially when employees have been told in advance. Several states go further. New York Civil Rights Law §52-c requires written notice and a signed or electronic acknowledgment before employers monitor phone, email or internet use. Connecticut (Conn. Gen. Stat. §31-48d) requires prior written notice and a posted notice. Delaware also has notice rules for electronic monitoring. Check the law where your employees work, not only where your head office is.
United Kingdom
In the UK, the UK GDPR and the Data Protection Act 2018 apply to monitoring workers. Monitoring has to be necessary for a clear purpose, proportionate to the risk, and explained to workers. The Information Commissioner's Office expects employers to consider less intrusive options first and to carry out a data protection impact assessment (Article 35 UK GDPR) where monitoring is systematic. The Investigatory Powers Act 2016 also limits intercepting communications, which is one more reason to avoid anything hidden.
EU reference point
For EU teams, the GDPR applies to employee data. The Court of Justice of the European Union (C-55/18, CCOO) ruled that working time must be recorded in an objective, reliable and accessible system. That supports exactly the kind of visible, employee-accessible time record emai provides. Germany adds co-determination rights for works councils. More on the EU side is on our GDPR and employee monitoring page.
How to roll out transparent monitoring in six steps
- Write the purpose. Name the goal in one sentence, such as "track hours per project to manage budgets."
- Limit the data. List only the fields the purpose needs, and set a retention period for each.
- Involve people early. Talk to employees and, where one exists, the works council or staff representatives before the rollout.
- Publish the policy. Explain what is recorded, who sees it, how it is used and how to raise concerns.
- Give access from day one. Each employee should see their own data before the first report is produced.
- Review on a schedule. Check the reports, the retention rules and the feedback every quarter, and change what does not work.
Common mistakes and the transparent alternative
| Practice | Covert approach | Transparent approach |
|---|---|---|
| Data collection | Continuous, unannounced | Only what the stated purpose needs |
| Visibility | Managers see more than employees | Employees see their own records |
| Reporting | Individual rankings | Team and project reports |
| Changes to records | Silent edits | Corrections logged in the audit trail |
| Rollout | Discovered by employees | Announced with a written policy |
Where emai fits
emai is free for up to 3 users, so a small team can test the standard before committing. Paid plans are priced per user per month: Pro at €8 and Business at €14. Both keep the same visibility rules: employees see their own data, reports stay at team and project level, and data is stored in the EU (Frankfurt).
If you are comparing options, look for the same five things: visible records, employee-controlled timers, team-level reporting, a clear audit trail and simple data export and deletion. For a wider view of the category, see our employee monitoring software guide.
Start with the rules, then the tool
Ethical employee monitoring is a process, not a product setting. Decide the purpose, publish the rules, give people access to their own data and only then turn on reports. Start free with up to 3 users and see how a transparent time record works for your team.
FAQ
Is employee monitoring legal?+
Often yes, but the answer depends on the country, the method and how openly it is done. In the US, federal law restricts intercepting communications, and several states such as New York and Connecticut require written notice before electronic monitoring. In the UK, UK GDPR and the Data Protection Act 2018 require monitoring to be necessary, proportionate and explained. This is general information, not legal advice.
What is the difference between transparent and covert monitoring?+
Transparent monitoring is announced in advance, shows employees what is recorded, and lets them see or pause their own data where the policy allows. Covert monitoring is hidden from the people it affects, such as secret screenshots or keystroke logging. emai supports only the transparent model and rejects covert tracking.
Do employees need to consent to monitoring?+
Consent is a weak legal basis inside an employment relationship, because employees rarely feel free to refuse. Under GDPR, employers usually rely on legitimate interests or a legal obligation, backed by a documented assessment and clear notice. emai treats consent as a design principle: employees can see the data, and they can use the pause control where the policy allows.
Can employees see what is collected about them?+
They should. In emai, every employee can view their own entries, the categories applied to them and the reports that include their time. Corrections are recorded in the audit log, so the history of a record stays clear to the person it describes.
Do I need a data protection impact assessment?+
In the UK and EU, a DPIA is often required when monitoring is systematic or carries high risk to employees, under Article 35 of the UK and EU GDPR. In Germany, a works council also has co-determination rights over technical monitoring systems under §87(1) No. 6 BetrVG. Check the requirements for your setting with your data protection officer or counsel.