Employer Monitors Personal Messages on Company Devices

Workplace monitoring of communications is a significant and growing area of conflict between employer interests and employee privacy in Australia. With the widespread use of company laptops, mobile phones, and messaging platforms for work purposes — and often for incidental personal use as well — many employees have no clear idea where the line falls between what their employer can lawfully observe and what remains private. Many employers present monitoring as a self-evident right of ownership: because it's our device, we can see everything on it. While it is true that employers have legitimate interests in monitoring work-related communications on company equipment, Australian law does not grant employers an unlimited surveillance right over all communications that pass through their devices. The Privacy Act 1988 (Cth) — which governs the collection of personal information by organisations with turnover over $3 million and certain others — imposes obligations on what personal information can be collected, how it is used, and how employees must be informed. State and territory workplace surveillance legislation also applies in most jurisdictions, requiring employers to notify employees before activating computer or email monitoring — and in some states, to obtain explicit consent. Many employers implement monitoring without adequate disclosure to employees, assert monitoring rights that go beyond what their policies or the law permits, or use monitoring data in ways that were not disclosed. An employee who is told 'we monitor everything' has the right to ask: were you told about this monitoring before it began? Is the monitoring proportionate to a legitimate business purpose? And is the employer treating your personal communications — sent or received on the device for genuinely personal reasons — with the same protections the law applies to personal information?