| GDPR (the EU General Data Protection Regulation) | law | EU and EEA locations | 30 Sep 2026 | 8 |
| UK GDPR | law | UK locations | 30 Sep 2026 | 5 |
| EU AI Act | law | EU locations | 30 Sep 2026 | 2 |
| EDPB Guidelines on processing personal data through video devices 3/2019 | official guidance, not law | EU and EEA locations | 30 Sep 2026 | 6 |
| Article 29 Working Party Opinion on data processing at work (WP249) 2/2017 | official guidance, not law | EU and EEA locations | 30 Sep 2026 | 17 |
| ICO guidance: employment practices and data protection, monitoring workers 2023 | official guidance, not law | UK locations | 30 Sep 2026 | 27 |
| ICO guidance on video surveillance, including CCTV 2022 | official guidance, not law | UK locations | 30 Sep 2026 | 5 |
| Investigatory Powers (Interception by Businesses etc. for Monitoring and Record-keeping Purposes) Regulations 2018 | law | UK locations | 30 Sep 2026 | 3 |
| Federal Data Protection Act (BDSG), Germany | law | Germany | 30 Sep 2026 | 8 |
| Works Constitution Act (BetrVG), Germany | law | Germany | 30 Sep 2026 | 4 |
| Labour Code (Code du travail), France: monitoring and CSE consultation | law | France | 30 Sep 2026 | 7 |
| CNIL guidance on employee monitoring and workplace video surveillance4 provisions from pages the CNIL marks out of date | official guidance, not law | France | 30 Sep 2026 | 23 |
| Workers' Statute, Italy Law 300/1970 | law | Italy | 30 Sep 2026 | 4 |
| Personal Data Protection Code, Italy Legislative Decree 196/2003 | law | Italy | 30 Sep 2026 | 3 |
| Works Councils Act (WOR), Netherlands | law | the Netherlands | 30 Sep 2026 | 4 |
| GDPR Implementation Act (UAVG), Netherlands | law | the Netherlands | 30 Sep 2026 | 2 |
| NSW Workplace Surveillance Act 2005 | law | New South Wales | 30 Sep 2026 | 9 |
| NSW Surveillance Devices Act 20073 provisions with text not verified against the current consolidation | law | New South Wales | 30 Sep 2026 | 8 |
| ACT Workplace Privacy Act 2011 | law | the Australian Capital Territory | 30 Sep 2026 | 9 |
| Victorian Surveillance Devices Act 1999 | law | Victoria | 30 Sep 2026 | 4 |
| Australian Privacy Principles (APPs) | law | Australian locations, when you say the Privacy Act applies | 30 Sep 2026 | 4 |
| Ontario Employment Standards Act, Part XI.1 (written policy on electronic monitoring) 2000 | law | Ontario, when you say 25 or more employees on 1 January | 30 Sep 2026 | 7 |
| New York Civil Rights Law section 52-c (electronic monitoring notice) | law | New York | 30 Sep 2026 | 3 |
| Connecticut General Statutes section 31-48d (electronic monitoring of employees) | law | Connecticut | 30 Sep 2026 | 5 |
| Delaware Code title 19 section 705 (monitoring of employee communications) | law | Delaware | 30 Sep 2026 | 3 |
| US Electronic Communications Privacy Act, Title I (Wiretap Act, 18 USC 2510 to 2523) | law | every US location | 30 Sep 2026 | 3 |
| US Stored Communications Act (18 USC 2701 to 2713) | law | every US location | 30 Sep 2026 | 3 |
| California Penal Code sections 632 and 632.7 (recording confidential communications) | law | California | 30 Sep 2026 | 2 |
| Illinois Eavesdropping Act (720 ILCS 5, Article 14)6 provisions with text not verified against the current consolidation | law | Illinois | 30 Sep 2026 | 6 |
| Illinois Biometric Information Privacy Act (BIPA) | law | Illinois | 30 Sep 2026 | 5 |
| Texas Capture or Use of Biometric Identifier Act (Business and Commerce Code 503.001) | law | Texas | 30 Sep 2026 | 4 |
| California Consumer Privacy Act, as amended by the CPRA | law | California, when you say the business meets the CCPA thresholds | 30 Sep 2026 | 5 |
| ILO Code of Practice on the Protection of Workers' Personal Data 1997 | official guidance, not law | every location, as the international baseline | 30 Sep 2026 | 10 |
| ISO/IEC 27001 (information security management) | standard | every location, when you tick ISO/IEC 27001 | 30 Sep 2026 | 2 |