Employee Monitoring Law Planner
Laws

Employee monitoring policy Ontario: Part XI.1

What Employee Monitoring Law Planner sets out for a monitoring practice at a site in Ontario: the notice, the written policy, the representative step, recording consent and what is not allowed, each cited to the law or the official guidance behind it. This is not every law that applies there.

Location
Ontario
Laws placed
Ontario Employment Standards Act, Part XI.1 (written policy on electronic monitoring) 2000
Guidance placed
ILO Code of Practice on the Protection of Workers' Personal Data 1997 official guidance, not law
Read on
30 Sep 2026
Conditions
Ontario Employment Standards Act, Part XI.1 (written policy on electronic monitoring) 2000 is placed when you say 25 or more employees in Ontario on 1 January; "not sure" places it as a question.

What each practice needs here

20 practice classes
PracticeRepresentative stepNotice and policyRecording consentNot allowedPaperwork
AI emotion or sentiment detectionnone heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
Keystroke loggingnone heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
Screenshots or screen recordingnone heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
Productivity or activity scoringnone heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
Idle-time trackingnone heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
Webcam or presence checksnone heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
Email and messaging reviewnone heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
DLP and email content filteringnone heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
Website or email blockingnone heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
Web and app usage loggingnone heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
Biometric time clocknone heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
Access control logsnone heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
CCTV (break, change or wash rooms)none heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
CCTV (work areas)none heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
GPS or vehicle telematicsnone heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
Mobile device locationnone heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
Call or speech analyticsnone heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held
Call recordingnone heldstatutory requirementpolicy copy in 30 days (when you say 25 or more employees in Ontario on 1 January)written policy (when you say 25 or more employees in Ontario on 1 January)none heldnone heldnone held

Every requirement held here

Findings a line here can raise

7 of 13

The provisions cited here

17 provisions
ILO code para 12.2(b)Inform and consult representatives before introducing electronic monitoring official guidance, not law

Where workers' representatives exist, and in line with national law and practice, inform and consult them before electronic surveillance of how workers act at work is brought in.

What a reviewer asks to see: Consultation record for each monitoring system, dated before introduction, with the representatives' views and the employer's response
Where monitoring plans usually fall short: Monitoring tool piloted without consulting the representatives
Source: ILO Code of Practice on the Protection of Workers' Personal Data 1997 (official guidance, not law), read 30 Sep 2026
Ontario ESA 41.1.1(3)Give every employee a copy within 30 days, and again within 30 days of any change

An employer required to have the policy must give a copy to each of its employees within 30 days of the day it was required to have the policy in place and, when an existing policy is changed, within 30 days of the change. Per the Ministry guide the copy may be a printed copy, an email attachment the employee can print, or a link where the employee has a reasonable opportunity to access the document and a printer; no fresh copy is needed each year unless the policy changes. This is one of the three subsections a complaint may be made about.

What a reviewer asks to see: Distribution record per employee (email log, acknowledgement or portal access record) dated within 30 days of the in-place date; Redistribution record within 30 days of each policy change; Note of how employees without email or printer access received a copy
Where monitoring plans usually fall short: Policy posted on an intranet that some employees cannot reach; Change made mid-year with no re-issue to staff
Source: Ontario Employment Standards Act, Part XI.1 (written policy on electronic monitoring) 2000, read 30 Sep 2026
Ontario ESA 41.1.1(4)Give each new employee a copy within 30 days

The employer must give a new employee a copy within 30 days of the later of the day the person becomes an employee and the day the employer was required to have the policy in place.

What a reviewer asks to see: Onboarding checklist item for the monitoring policy with the date delivered; Report of hires in the period matched to delivery dates within 30 days
Where monitoring plans usually fall short: Policy left out of the onboarding pack; Rehires and seasonal hires not given a copy
Source: Ontario Employment Standards Act, Part XI.1 (written policy on electronic monitoring) 2000, read 30 Sep 2026
ILO code para 6.14(1)Tell workers in advance about monitoring and minimize intrusion official guidance, not law

Before any monitoring starts, workers should learn why it is done, when it runs, how it works (methods and techniques) and which data it gathers, and the employer must keep the intrusion on workers' privacy as small as possible.

What a reviewer asks to see: Monitoring notice per system stating reasons, schedule, methods and data collected, issued before monitoring starts; Proportionality assessment showing less intrusive options considered
Where monitoring plans usually fall short: Notice states only that monitoring may occur, without schedule or methods; Screenshots captured continuously when sampling would serve the purpose
Source: ILO Code of Practice on the Protection of Workers' Personal Data 1997 (official guidance, not law), read 30 Sep 2026
ILO code para 5.8Keep workers and representatives informed official guidance, not law

Workers and their representatives should be told about every data collection process, the rules governing it and their rights.

What a reviewer asks to see: Worker privacy notice covering each collection process, its rules and workers' rights; Record of the information given to worker representatives
Where monitoring plans usually fall short: Notice covers HR records but not monitoring systems
Source: ILO Code of Practice on the Protection of Workers' Personal Data 1997 (official guidance, not law), read 30 Sep 2026
Ontario ESA 41.1.1(1)Have a written electronic monitoring policy in place for all employees

An employer that employs 25 or more employees on 1 January of any year must, before 1 March of that year, ensure it has a written policy in place, covering all of its employees, on the electronic monitoring of employees. Per the Ministry guide the policy must cover every employee to whom the provision applies, including managers, executives and shareholders who are employees, and every assignment employee placed with the employer in Ontario; different groups may have different policies, in one document or several, or the policy may sit inside a wider HR manual. Once in place, a new policy is not needed each year.

What a reviewer asks to see: Headcount of Ontario employees on 1 January, by location, used to decide whether the policy is required; Current written electronic monitoring policy (or set of policies) with the employee groups each one covers; Coverage check listing every employee group and assignment-employee role against the policy that applies to it; Approval record showing the policy was in place before 1 March of the year
Where monitoring plans usually fall short: Headcount taken as full-time equivalents or per site instead of individuals across Ontario; Policy covers front-line staff but not managers or executives; Assignment employees placed in a role the policy does not address
Source: Ontario Employment Standards Act, Part XI.1 (written policy on electronic monitoring) 2000, read 30 Sep 2026
Ontario ESA 41.1.1(2) para 1State whether the employer electronically monitors employees

The written policy must say whether the employer electronically monitors employees. Per the Ministry guide, an employer that does not monitor must say so expressly in the policy.

What a reviewer asks to see: Policy clause stating that the employer does, or does not, electronically monitor employees; Inventory of monitoring tools in use (vehicle GPS, endpoint agents, email and chat review, CCTV, badge systems) reconciled to the statement
Where monitoring plans usually fall short: Policy silent on whether monitoring happens; Statement says no monitoring while a telematics or endpoint tool is running
Source: Ontario Employment Standards Act, Part XI.1 (written policy on electronic monitoring) 2000, read 30 Sep 2026
Ontario ESA 41.1.1(2) para 1 iDescribe how and in what circumstances employees may be monitored

Where the employer monitors, the policy must describe how it may electronically monitor employees and the circumstances in which it may do so. The Ministry guide's examples: GPS tracking of a delivery vehicle for the whole workday, every workday; software that monitors employee emails and online chats at any time.

What a reviewer asks to see: Policy section listing each monitoring method with the systems or devices it runs on; For each method, the circumstances stated in the policy (always on, working hours, on a trigger, on personal devices used for work); Change log linking new monitoring tools to an update of this section
Where monitoring plans usually fall short: Generic wording ('we may monitor systems') that names no method; Monitoring of personal devices or home working left out of the description
Source: Ontario Employment Standards Act, Part XI.1 (written policy on electronic monitoring) 2000, read 30 Sep 2026
Ontario ESA 41.1.1(2) para 1 iiState the purposes for which monitoring information may be used

Where the employer monitors, the policy must set out the purposes for which it may use information obtained through electronic monitoring. Section 41.1.1(7) confirms that the section does not limit how the employer may use that information, so the stated purposes describe the employer's intentions rather than cap its use; other law (privacy statutes, collective agreements) may still limit use.

What a reviewer asks to see: Policy section listing the purposes for each monitoring method (safety, route planning, performance, discipline, security); Legal review note on limits from privacy law or collective agreements that apply alongside the ESA
Where monitoring plans usually fall short: Purposes omitted because the Act does not restrict use; Discipline used as a purpose in practice but not mentioned in the policy
Source: Ontario Employment Standards Act, Part XI.1 (written policy on electronic monitoring) 2000, read 30 Sep 2026
Ontario ESA 15(8.2)Keep every required policy for three years after it ceases to have effect

The employer must retain, or arrange for another person to retain, a copy of every written electronic monitoring policy required under Part XI.1 for three years after that policy stops being in effect.

What a reviewer asks to see: Archive of every superseded version of the monitoring policy with the date it ceased to apply; Retention schedule entry setting three years from the date a version is superseded
Where monitoring plans usually fall short: Superseded versions overwritten in a document system; Retention measured from the date the policy was written rather than the date it ceased
Source: Ontario Employment Standards Act, Part XI.1 (written policy on electronic monitoring) 2000, read 30 Sep 2026
ILO code para 6.14(2)Secret monitoring only where national law allows it or on reasonable suspicion official guidance, not law

Covert monitoring should be allowed only where national law permits it or where there are reasonable grounds to suspect a crime or other grave misconduct.

What a reviewer asks to see: Authorization record for each covert monitoring exercise with the suspicion and grounds, or the legal provision relied on; End date and review of each exercise
Where monitoring plans usually fall short: Covert monitoring used for general performance concerns
Source: ILO Code of Practice on the Protection of Workers' Personal Data 1997 (official guidance, not law), read 30 Sep 2026
ILO code para 6.14(3)Continuous monitoring only for health and safety or protection of property official guidance, not law

Monitoring that never stops should be allowed only where it is needed for workplace health and safety or to protect property.

What a reviewer asks to see: Register of continuous monitoring (CCTV, telematics, always-on tracking) with the health, safety or property ground for each
Where monitoring plans usually fall short: Always-on webcam or activity tracking for remote staff justified by productivity
Source: ILO Code of Practice on the Protection of Workers' Personal Data 1997 (official guidance, not law), read 30 Sep 2026
ILO code para 5.6Monitoring data not the sole basis of performance evaluation official guidance, not law

Output from electronic surveillance should never be the sole input when a worker's performance is judged.

What a reviewer asks to see: Appraisal procedure listing the evidence sources considered besides monitoring data; Sample appraisals showing other inputs (manager review, outputs, feedback)
Where monitoring plans usually fall short: Productivity scores from activity tracking used as the whole appraisal
Source: ILO Code of Practice on the Protection of Workers' Personal Data 1997 (official guidance, not law), read 30 Sep 2026
ILO code para 8.5Retain only as long as the purpose justifies official guidance, not law

Keep personal data only as long as the specific purposes of collection justify, unless a worker asks to stay on a candidate list for a set period, national law requires retention, or the employer or worker needs the data for legal proceedings about an existing or former employment relationship.

What a reviewer asks to see: Retention schedule for worker data including monitoring records, citing purpose, legal requirement or proceedings; Deletion logs
Where monitoring plans usually fall short: Monitoring recordings kept indefinitely; Unsuccessful applicants' data kept without their agreement
Source: ILO Code of Practice on the Protection of Workers' Personal Data 1997 (official guidance, not law), read 30 Sep 2026
ILO code para 5.1Fair, employment-related processing within the law official guidance, not law

5.1 Lawful, fair and employment-related processing. Handle workers' data lawfully and fairly, and solely for reasons that bear directly on the person's job.

What a reviewer asks to see: Register of worker data processing activities, each with its employment-related reason and legal basis
Where monitoring plans usually fall short: Data collected for reasons unrelated to the job, such as off-duty social media activity
Source: ILO Code of Practice on the Protection of Workers' Personal Data 1997 (official guidance, not law), read 30 Sep 2026
ILO code para 6.5No data on sex life, beliefs or convictions, save exceptionally official guidance, not law

Employers should not collect data on a worker's sex life, political, religious or other beliefs, or criminal convictions, except in rare cases where national law permits it and the information bears directly on a decision about the job.

What a reviewer asks to see: Data inventory confirming these categories are not collected, or the documented exception and legal basis where they are
Where monitoring plans usually fall short: Criminal record checks for every role regardless of relevance
Source: ILO Code of Practice on the Protection of Workers' Personal Data 1997 (official guidance, not law), read 30 Sep 2026
ILO code para 6.6No data on union membership or activities unless required official guidance, not law

Employers should not collect data on a worker's membership of a workers' organization or trade union activities unless the law or a collective agreement requires or permits it.

What a reviewer asks to see: Review of HR and monitoring systems confirming union data are not collected except under a stated legal or agreement basis
Where monitoring plans usually fall short: Monitoring tools flag union-related email or chat
Source: ILO Code of Practice on the Protection of Workers' Personal Data 1997 (official guidance, not law), read 30 Sep 2026

See the specimen plan run Plan your own list