17.Intrusive Surveillance at Work is a Psychosocial Hazard
What is intrusive surveillance as a psychosocial hazard in Australian workplaces?
Intrusive surveillance is a recognised psychosocial hazard under the Managing Psychosocial Hazards at Work Code of Practice 2024. It occurs when monitoring of workers is excessive, disproportionate or conducted without appropriate transparency — creating feelings of distrust, loss of autonomy and psychological discomfort. The hazard is not monitoring itself, but monitoring that exceeds what is operationally necessary and reasonable in the circumstances. Under the WHS Act 2011, businesses must identify, assess and control this hazard using the hierarchy of controls.
What Is Intrusive Surveillance?
Intrusive surveillance occurs when monitoring of workers in the workplace — or in connection with work — crosses the line from legitimate operational oversight into surveillance that is excessive, disproportionate or psychologically harmful.
This is a nuanced hazard. Monitoring is a normal and often legitimate feature of workplaces. A business has reasonable interests in productivity, safety, data security and compliance. A CCTV camera in a retail store is not intrusive surveillance. A GPS tracker on a company vehicle used for work purposes is not intrusive surveillance.
The hazard arises when monitoring:
Exceeds what is operationally necessary
Is conducted without worker knowledge or transparency
Is used punitively rather than for operational purposes
Removes all sense of privacy or autonomy from the working day
Creates a persistent psychological experience of being watched, distrusted and unable to behave naturally
The distinction the law draws — and that the Code of Practice 2024 reinforces — is between proportionate monitoring that workers are aware of and that serves a legitimate purpose, and surveillance that creates the experience of distrust and control that damages psychological health.
The SafeWize Psychosocial Hazard Register rates intrusive surveillance at 3 — Medium inherent risk across most industries, rising to 4 — High in environments where monitoring is intensive, real-time and individually reported — particularly call centres, logistics and remote work environments with software-based tracking. Safe Work Australia recognises intrusive surveillance as a work design hazard requiring active management, and Comcare's psychosocial hazard framework provides additional context on proportionate monitoring as part of a compliant workplace system.
What Intrusive Surveillance Looks Like
Real-time productivity tracking: A call centre worker whose every call is timed, scored and reported daily to their manager — with league tables visible to the whole team showing individual performance rankings updated in real time.
Keystroke and screen monitoring: A remote worker whose employer has installed software that captures screenshots every two minutes, logs every keystroke and reports idle time to management — without the worker being clearly informed of the scope of monitoring.
GPS tracking beyond work hours: A delivery driver whose company vehicle is GPS tracked — including during their lunch break, their commute home, and on weekends when the vehicle is used for personal travel by agreement.
Biometric monitoring: A worker in a logistics facility required to scan their fingerprint every time they enter and exit a work zone, with data used to calculate their movement efficiency and reported as a performance metric.
Email and communication monitoring: Workers whose work emails, instant messages and documents are scanned by software — without clear disclosure — creating a pervasive sense that nothing in their working day is private.
Attendance monitoring used punitively: A worker whose bathroom breaks are timed and reported, whose time away from their desk is tracked to the minute and raised in performance conversations.
Why Intrusive Surveillance Causes Harm
The psychological harm from intrusive surveillance is rooted in two fundamental human needs: autonomy and trust.
Autonomy — the sense that one has some degree of agency and self-direction — is one of the most fundamental psychological needs in a work context. Surveillance that removes all sense of privacy and autonomy from the working day is experienced as a form of control that signals distrust.
Trust — the sense that one is regarded as a capable, good-faith adult — is the foundation of a functional working relationship. Monitoring that is covert, excessive or punitive signals the opposite: that the employer does not trust the worker to do their job without constant oversight. Once that signal is received, it is very difficult to undo.
The psychological consequences of intrusive surveillance include:
Chronic stress from the felt sense of constant evaluation
Reduced intrinsic motivation — workers shift from doing the work because it matters to doing it to avoid being caught doing something wrong
Disengagement and cynicism — the experience of being monitored rather than trusted erodes commitment and belonging
Anxiety — the fear of being observed making a mistake, even ordinary human variation in productivity, generates sustained low-level threat
Loss of psychological safety — workers become reluctant to ask questions, make mistakes openly or raise concerns for fear of how it will look "on the data"
Three Workplaces Managing Intrusive Surveillance
Case Study 1 — A Warehouse and Storage Facility
A large warehouse uses a workforce management system that tracks every picker's movement, scan rate and location in real time. Individual productivity data is displayed on screens visible to the whole floor and updated every 15 minutes. Workers whose scan rate drops below a daily target receive an automated notification. Three workers have received formal warnings based on productivity data alone, without any conversation about why their rate dropped. Two have resigned. The remaining workers describe the environment as "suffocating" and say they feel like they cannot stop to think without it being held against them.
The hazard: Real-time, individually reported monitoring used punitively without contextual investigation — creating a persistent experience of surveillance that removes all psychological safety from the work environment.
The control applied — Level 2 Substitution + Level 4 Engineering: The business substitutes individual real-time productivity displays with team-level daily summaries — the floor screens now show team output against daily targets, not individual rankings. Individual productivity data is still collected but reviewed by the manager weekly as a trend indicator — not as a basis for automated notifications. A performance conversation protocol is introduced — no worker receives a performance consequence based on productivity data without a manager conversation first that explores context. The automated warning function is disabled.
Residual risk: Low (2) — operational data is still collected for legitimate purposes, but the surveillance experience is significantly reduced and punitive use of data without context is eliminated.
Case Study 2 — A Technology and Software Company
A software company introduced a remote work monitoring tool when staff moved to fully remote working. The tool captures screenshots every three minutes, logs active and idle time, and produces a daily "productivity score" that is sent to each worker's manager. Workers were told about the tool in an email but the scope of monitoring was not clearly explained. A developer notices the screenshot function capturing personal information visible on his second monitor — his banking details during a lunch break. He raises it with HR. It emerges that several workers did not understand the monitoring was continuous. Three senior developers resign within two months.
The hazard: Monitoring that exceeded what workers understood they had consented to — creating a covert surveillance experience — with scope that captured personal information outside working hours, breaching both the psychosocial hazard framework and privacy obligations.
The control applied — Level 1 Elimination + Level 5 Administrative: The screenshot and keystroke monitoring functions are eliminated entirely — they are removed from the tool configuration. What remains is voluntary time-tracking that workers log themselves and review with their manager in weekly check-ins. A transparent monitoring policy is written, reviewed by an employment lawyer, and signed by all workers — clearly stating what is monitored, why, how it is used and what it is not used for. Workers are given the right to turn off monitoring during their lunch break. The company's privacy obligations under the Privacy Act 1988 are reviewed and a compliance checklist introduced.
Residual risk: Very Low (1) — the intrusive elements are eliminated, what remains is transparent and consensual.
Case Study 3 — A Logistics and Transport Business
A logistics business uses GPS tracking on all company vehicles — including vehicles that drivers are permitted to take home. The GPS system logs all movement 24 hours a day, seven days a week. A driver discovers that his weekend movements — including a trip to a medical appointment and visits to family — are visible to the fleet manager. He raises it informally. The fleet manager says "it's just for the vehicle, not for you." The driver is not reassured. He feels his personal life is being monitored without his consent and becomes increasingly anxious about what information the company holds about him.
The hazard: Monitoring that extends beyond work hours and into personal time — creating a reasonable perception of surveillance of private life that is both psychologically harmful and raises significant privacy concerns.
The control applied — Level 4 Engineering + Level 5 Administrative: The GPS system is reconfigured to record location only during defined work hours — a geofence function is activated that automatically pauses recording when a vehicle leaves a defined work area outside work hours. A vehicle use policy is updated and communicated clearly — what is monitored, when, and what happens with the data. Workers taking vehicles home are shown the hours during which monitoring applies. The driver is given a direct conversation acknowledging the concern and confirming the change.
Residual risk: Low (2) — GPS tracking continues for legitimate operational purposes during work hours, but personal time monitoring is technically eliminated.
The Hierarchy of Controls Applied to Intrusive Surveillance
L1 — Eliminate: Remove monitoring tools or functions that exceed operational necessity. Disable covert monitoring capabilities. Eliminate monitoring that extends into personal time or captures personal information.
L2 — Substitute: Replace individual real-time performance monitoring with team-level or outcome-based measures. Substitute surveillance-based management with trust-based management using structured check-ins and outcome reviews.
L3 — Isolate: Exempt workers in roles involving confidential information — clinical, legal, HR, counselling — from monitoring systems where their work involves sensitive third-party data that monitoring would compromise.
L4 — Engineering: Configure monitoring systems to collect only what is operationally necessary. Implement geofencing to limit monitoring to work hours and locations. Build automatic data deletion schedules so data does not persist beyond the period needed. Privacy by design.
L5 — Administrative: SOP-37 (Workplace Surveillance and Privacy). A transparent monitoring policy reviewed by an employment lawyer and signed by all workers. Regular review of monitoring scope against operational necessity. Clear prohibition on punitive use of monitoring data without contextual investigation.
L6 — Personal Support: EAP for workers experiencing distress from monitoring environments. Direct manager conversations acknowledging the impact of monitoring and explaining its purpose and limits.
What You Need to Document
Your risk assessment for intrusive surveillance must include:
What monitoring is currently in place and its stated purpose
Whether workers are informed of the scope and nature of monitoring
Pre-control risk rating
Controls at each hierarchy level
Post-control risk rating
Responsible person, monitoring method and review date
Frequently Asked Questions
What is intrusive surveillance as a psychosocial hazard?
Intrusive surveillance is a recognised psychosocial hazard under the Code of Practice 2024. It occurs when monitoring of workers is excessive, disproportionate or conducted without appropriate transparency, creating feelings of distrust, loss of autonomy and psychological harm. The hazard is not monitoring itself but monitoring that exceeds what is operationally necessary and reasonable.
Is it legal to monitor employees in Australia?
Employee monitoring is permitted in Australia within limits set by privacy legislation, surveillance laws and WHS obligations. Employers must generally inform workers about monitoring — covert surveillance of employees in most circumstances is prohibited under state surveillance legislation. The scope of monitoring must be proportionate to the legitimate business purpose. Monitoring that creates psychosocial harm must be assessed and controlled under the WHS Act 2011.
Can employers track remote workers in Australia?
Employers can use productivity monitoring tools for remote workers, but the scope must be transparent, proportionate and clearly communicated. Covert monitoring, monitoring that captures personal information, or monitoring that extends beyond work hours raises both WHS obligations and privacy law concerns. The Code of Practice 2024 recognises intrusive surveillance as a psychosocial hazard that must be assessed and controlled.
What is the difference between acceptable monitoring and intrusive surveillance?
Acceptable monitoring is proportionate to the operational purpose, transparent to workers, limited to work hours and work activities, and not used punitively without contextual investigation. Intrusive surveillance exceeds operational necessity, may be covert, may extend into personal time, and creates the psychological experience of being distrusted and constantly evaluated. The line is drawn by asking: does this monitoring serve a legitimate operational purpose, and is it conducted in a way a reasonable person would accept as proportionate?
This is the final post in the SafeWize Psychosocial Hazard Series.
Read the full series: The 17 Psychosocial Hazards — Complete Guide → The 6 Levels of the Hierarchy of Controls →
SafeWize provides practical psychosocial hazard compliance tools for Australian small and medium businesses. This guide is for educational purposes and does not constitute legal advice. Always confirm requirements with your applicable state or territory WHS regulator and seek independent legal advice where required.
Comments