Monitoring employees — CCTV, email and device monitoring, call recording, location tracking, biometric attendance — involves processing employees' personal data, so it falls under the DPDP Act 2023. Employers generally need a clear notice, a lawful basis (consent or a recognised legitimate use such as employment purposes), proportionality, and security over the data collected. This checker rates how compliant your monitoring currently is.
Check whether your CCTV, email, call, location or biometric monitoring of staff meets DPDP Act 2023 requirements.
Whether it is a CCTV camera at reception, software that logs email and device activity, recorded support calls, GPS on field staff, or biometric attendance, monitoring collects employees' personal data. Under the DPDP Act 2023 that triggers the duties of notice, lawful basis, proportionality and security.
The most common failure is silent monitoring — collecting data without telling staff. A clear monitoring notice, a written policy, and proportionate, minimal collection are what move an employer from high-risk to defensible.
An employee monitoring notice, a monitoring policy template, and a proportionality checklist aligned to the DPDP Act.
One real DPDP development explained in plain English, one practical how-to, one number from our own assessment data. Nothing else — no daily noise, no sales pitch.
No spam. Unsubscribe with one click, anytime.
