Howard Levitt: It’s completely legal for your employer to spy on you — but there’s a catch
At the end of the day, the employer has a right to ensure that employees are doing what they are paid to do
It should not have taken a pandemic to realize how much we rely upon technology although we intuitively understood that.
The amount of technology devices we rely upon is, in many respects, not good for us. We reflexively pick up our phone with every jingle or buzz. It sometimes seems that our smartphones know more about what we are thinking than we do ourselves. We utter a mere thought and our phone has an advertisement turning that thought into reality.
It’s no surprise that, while privacy has always been a concern, it became a greater one once Canadians were sent home to work in the midst of the pandemic. With many employees being told that they will not see the inside of their offices until 2021, a prevalent question is: what are my privacy rights when it comes to working at home?
The thought of your phone listening to you seems unhinged. It will alarm the Canadian public to know that their employer may be listening or even watching them at any hour of the day, too.
It is somewhat routine for various organizations to monitor their employees’ customer calls but some of these organizations have now taken up monitoring their employee’s screens.
The software, referred to as tattleware, is being downloaded on personal computers to allow employers to track employees’ mouse movements. This means your employer can observe your interactions with clients or what you are searching for on the internet while on the clock. Some versions of this software actually allow employers to download videos of their employee’s screens.
It may surprise you to know that this is completely legal. But there is a catch, or rather, a balance.
An employee must be aware of how their information is being used and collected and it must be balanced with the employer’s justification. For example, if it’s being used to properly manage the organization’s operations, your employer can do so. If your manager is wondering what you have on your desktop for pure entertainment, then that would be offside to a court.
At the end of the day, the employer has a right to ensure that employees are doing what they are paid to do. Otherwise, employers should refrain from randomly checking in on their employees unless it’s tied to a reasonable justification related to work productivity or operations.
At this point, there is no case law on the topic of tracking software specifically, but there are general privacy laws.
Canada’s main statute governing privacy is the Personal Information Protection and Electronic Documents Act (PIPEDA). The act applies to private-sector organizations across Canada, except provinces that have enacted their own privacy legislation such as British Columbia, Quebec and Alberta, regarding the collection, use or disclosure of personal information in the course of a commercial activity. In those provinces that have their own legislation, PIPEDA will still continue to apply to federal bodies, such as telecommunications and banking sectors.
The law defines a commercial activity as: “any particular transaction, act, or conduct, or any regular course of conduct.”
An employee covered by PIPEDA, who believes their personal information has been mishandled can file a complaint with the Office of the Privacy Commissioner of Canada (OPC). Once a complaint is filed, an investigation will take place. One of the remedies that can be rendered is a compliance agreement, which is enforceable by the Federal Court, where the employer will commit to implementing certain measures to resolve the original dispute.
Specifically, section 16 of PIPEDA allows a court to award damages. In one of the first cases, Randall v. Nubodys Fitness Centre, the court confirmed that there is a very high bar for the award of damages under this section and it is only to be used for the most “egregious situations.” In this case, the Fitness Centre disclosed Randall’s frequency of gym attendance to his employer, without the necessary consent.
In the alternative, an employee may bring a suit under the tort of “inclusion upon seclusion.” The leading case is Jones v. Tsige from Ontario’s Court of Appeal. In order to prove this tort, there must be conduct that was intentional or reckless, a defendant who invaded, without lawful justification, the plaintiff’s affairs, and lastly, that a reasonable person would regard the invasion as highly offensive causing distress, humiliation, or anguish. In this case, which involved an extraordinary outrageous privacy breach, the plaintiff was still awarded damages of only $10,000.
But before filing a complaint or getting a court involved, there are steps both employees and employers can take. Employees should ask questions as to what kind of personal information is being collected and why. Employers should be advising their employees of the mechanisms they use for monitoring, their reasoning, and finally the consent of their employees. If employers do not advise their employees, they may be hit with a complaint that can lead to damages.
Employees should not be too keen on bringing matters of this nature to court. Aside from extensive legal fees, the employee is jeopardizing their position in a COVID-19 economy. You may be angered that your employer has been monitoring you, but surely, you would rather be monitored then have no job at all. That is the modern, arguably ugly truth.
Got a question about employment law during COVID-19? Write to me at levitt@levittllp.com.
Howard Levitt is senior partner of Levitt LLP, employment and labour lawyers. He practises employment law in eight provinces. He is the author of six books including the Law of Dismissal in Canada.