Workplace monitoring platforms are sharing your data
A Columbia Law School paper examines how workplace monitoring platforms collect and share employee data, raising concerns about privacy and the legal implications of such surveillance practices in modern work environments.
Background
- Workplace monitoring software (e.g., Time Doctor, Hubstaff, Teramind) tracks keystrokes, mouse movements, screenshots, webcam images, GPS location, and app usage in real time. Many workers don't realize these platforms routinely sell or share that behavioral data with data brokers, insurers, and marketing firms.
- The data isn't anonymized — it's linked to individuals and their employers. This creates a secondary market in "workplace behavior profiles" that can affect a person's access to credit, health insurance premiums, or future job offers.
- Columbia Law School researchers found that most monitoring platforms bury data-sharing permissions in opaque policies that employees never consent to. Since the employer (not the worker) is the customer, the platform claims it owes no duty to the monitored employee.
- This sits in a legal gray zone: U.S. workplace privacy law is weak, and GDPR protections can be sidestepped when data processing is framed as the employer's "legitimate interest."