FOR EMPLOYEES

Workplace Privacy Issue Lawyers

Expert Legal Guidance for Employee Privacy Rights

Workplace surveillance, electronic monitoring, and personal information collection have become standard practices in modern employment, but these activities must respect employee privacy rights. While Ontario lacks comprehensive private-sector privacy legislation, employees maintain protections under federal law, the Employment Standards Act, 2000 (ESA), common law privacy principles, and the Human Rights Code. Greenwood Law’s employment lawyers help employees challenge invasive monitoring practices, assert privacy rights, and pursue accountability when employers overstep legal boundaries.

Greenwood Law Team

Greenwood Law’s workplace privacy issue specialists bring over 15 years of combined expertise in employment law, electronic monitoring regulations, privacy protections, and employee rights enforcement across diverse workplace contexts and industries.

Headshot Jessyca - Workplace Privacy Issue Lawyers

Jessyca
Greenwood

Principal Lawyer

Headshot Sabrina - Workplace Privacy Issue Lawyers

Sabrina
Feldman

Partner

Headshot Hilary - Workplace Privacy Issue Lawyers

Hilary
Page

Partner

Employment Lawyer - Matt ‎Chapman Partner at Greenwood Law

Matt
Chapman

Partner

Headshot Lindsay Koruna - Workplace Privacy Issue Lawyers

Lindsay
Koruna

Senior Paralegal

Headshot Bushra - Workplace Privacy Issue Lawyers

Bushra
Hussain

Paralegal

Amanda Termeulen - Greenwood Law

Amanda
Termeulen

Finance & People

Understanding Workplace Privacy Rights in Ontario

Employee privacy in Ontario workplaces is governed by a patchwork of legal protections rather than a single comprehensive statute. Federally regulated employees (in banking, telecommunications, transportation, and other federal sectors) are protected by the Personal Information Protection and Electronic Documents Act (PIPEDA). Provincially regulated employees rely on the ESA’s electronic monitoring disclosure requirements, common law privacy principles including the tort of intrusion upon seclusion, and Human Rights Code protections against discriminatory surveillance.

Employers have legitimate needs to monitor workplace activities, ensure productivity, protect assets, and maintain security. However, monitoring must be proportionate, transparent, and justified by legitimate business purposes. Covert surveillance, excessive monitoring, discriminatory tracking practices, or surveillance exceeding disclosed purposes can violate employee privacy rights and trigger legal liability.

Common Workplace Privacy Issue Scenarios

Hear From Our Clients

Electronic Monitoring Without Proper Disclosure

Since October 11, 2022, Ontario employers with 25 or more employees must maintain written policies disclosing electronic monitoring practices. These policies must state whether monitoring occurs, describe how it’s conducted, identify circumstances triggering monitoring, and explain how collected information may be used. Employers conducting surveillance without policies, monitoring beyond disclosed parameters, or implementing tracking without updating policies violate ESA requirements and may face Ministry of Labour enforcement.

Covert Surveillance and Invasive Monitoring

While employers can use video surveillance in public workplace areas for security purposes, covert surveillance typically requires justification by serious misconduct concerns and evidence that less intrusive methods were inadequate. Hidden cameras in private spaces (washrooms, change rooms, personal offices), keystroke logging without notice, or undisclosed GPS tracking of personal devices constitute intrusive monitoring that may support common law privacy claims. The Ontario Court of Appeal’s decision in Jones v. Tsige (2012) established the tort of intrusion upon seclusion, providing remedies when employers intentionally invade employees’ private affairs in ways that reasonable persons would find highly offensive.

Personal Device and Communication Monitoring

Employers accessing personal emails, text messages, or social media accounts on employees’ personal devices without consent violate privacy expectations. Even on company-owned devices, employees retain some privacy rights over personal communications. Employers must clearly communicate monitoring scope and obtain appropriate consent when accessing personal information beyond what’s necessary for employment management. Under PIPEDA (for federally regulated employers), personal information collection, use, and disclosure must be limited to purposes that a reasonable person would consider appropriate.

Location Tracking and GPS Monitoring

GPS tracking of employee vehicles, mobile devices, or equipment must be disclosed, justified by legitimate operational needs, and proportionate to business purposes. Continuous tracking of employees’ locations during off-duty hours, monitoring personal vehicles, or tracking beyond what’s necessary for work-related purposes constitutes excessive surveillance. Employees whose location data is collected without proper notice or used for inappropriate purposes may challenge these practices under privacy principles.

Discriminatory Surveillance Practices

Monitoring that disproportionately targets employees based on protected grounds, race, disability, sex, age, family status, or other Human Rights Code characteristics, constitutes discrimination. This includes using surveillance to scrutinize employees who have requested accommodation, monitoring targeting specific demographic groups, or enforcement patterns suggesting bias. When surveillance becomes a tool for discriminatory treatment rather than legitimate management, affected employees have human rights remedies.

Access to Personal Files and Medical Information

Employers collecting medical information, accessing personal files stored on company systems, or reviewing private documents without authorization may violate privacy rights. Medical information collection must be limited to what’s necessary for accommodation, benefits administration, or attendance management. Accessing employees’ personal cloud storage, private folders, or medical files beyond legitimate purposes supports privacy violation claims.

Expert Workplace Privacy Advocacy

Partner with experienced employment lawyers who protect your privacy rights against intrusive monitoring and surveillance practices across Ontario.

Table of Contents

Hear From Our Clients

Expert Workplace Privacy Advocacy

Partner with experienced employment lawyers who protect your privacy rights against intrusive monitoring and surveillance practices across Ontario.

Why Choose Greenwood Law

Privacy Law Expertise

We understand how multiple legal frameworks, ESA monitoring requirements, PIPEDA privacy principles, common law torts, and Human Rights Code protections, interact to protect employee privacy across different workplace contexts.

Multi-Forum Experience

We navigate Ministry of Labour complaints, Privacy Commissioner processes, Human Rights Tribunal applications, and civil litigation, selecting appropriate forums based on violation types and desired remedies.

Evidence and Documentation Strategy

We help you systematically document privacy violations, gather comparative evidence, and preserve materials supporting intrusion upon seclusion claims or regulatory complaints.

Holistic Claim Assessment

We recognize that privacy violations often support broader employment claims including constructive dismissal, wrongful dismissal, discrimination, or reprisal, ensuring comprehensive legal strategies that address all aspects of your situation.

Frequently Asked Questions

Employers can monitor work email and computer activity on company-owned systems if they’ve disclosed this monitoring in written policies (required for employers with 25+ employees under the ESA). However, monitoring must be proportionate to legitimate business purposes and cannot extend to personal email accounts or private folders without consent. Federally regulated employers must also comply with PIPEDA requirements limiting collection, use, and disclosure of personal information to appropriate purposes. Even with disclosure, excessive or discriminatory monitoring may violate privacy rights.

Video surveillance is permitted in public workplace areas (entrances, common spaces, sales floors) for legitimate security purposes, but employees must be informed. Surveillance in private spaces with reasonable privacy expectations (washrooms, change rooms, personal offices) is generally prohibited absent exceptional circumstances like investigating serious misconduct. Audio recording is particularly restricted, recording conversations without at least one party’s consent violates section 184 of the Criminal Code of Canada. Surveillance cameras should have audio recording disabled.

Intrusion upon seclusion, established by the Ontario Court of Appeal in Jones v. Tsige (2012), is a privacy tort providing remedies when someone intentionally invades another person’s private affairs in a manner that would be highly offensive to a reasonable person. In workplace contexts, this applies when employers conduct surveillance or access information without authorization in ways that violate reasonable privacy expectations, such as accessing personal banking records, reading private emails stored in the cloud, or conducting covert surveillance in private spaces without justification.

GPS tracking of company vehicles or work-issued devices must be disclosed in electronic monitoring policies, justified by legitimate operational needs (such as fleet management or service dispatch), and limited to work purposes and hours. Continuous tracking during personal time, monitoring personal vehicles, or using location data for purposes beyond disclosed business needs may violate privacy rights. Federally regulated employers must comply with PIPEDA principles requiring proportionate collection and limiting use to appropriate purposes.

PIPEDA governs personal information collection, use, and disclosure by federally regulated employers (banks, airlines, telecommunications, transportation). Under PIPEDA, employers can collect employee personal information without consent when necessary to establish, manage, or terminate employment, but must inform employees about collection, use, and disclosure. Personal information must be collected for appropriate purposes, limited to what’s necessary, and kept secure. Employees can access their personal information and challenge accuracy. Complaints about PIPEDA violations go to the Privacy Commissioner of Canada.

Outright refusal may result in discipline, but you can raise concerns formally, request policies if not provided, seek clarification about monitoring scope, and document any invasive practices. If monitoring is discriminatory, retaliatory, or clearly violates privacy rights, consult employment counsel before refusing compliance. In some cases, filing complaints while complying under protest preserves both your position and legal claims. Wrongful dismissal following privacy-related concerns may support both termination claims and privacy violation claims.

Contact Greenwood Law

If you’re facing workplace surveillance without proper disclosure, experiencing invasive monitoring practices, subject to discriminatory tracking, or concerned about employer access to personal information, Greenwood Law provides strategic analysis of your privacy rights and available remedies. Our employment lawyers help you understand legal protections, challenge violations, and pursue accountability through appropriate legal channels.