| GDPR (the EU General Data Protection Regulation) | law | EU and EEA locations | 30 Sep 2026 | 8 |
| UK GDPR | law | UK locations | 30 Sep 2026 | 5 |
| EU AI Act | law | EU locations | 30 Sep 2026 | 2 |
| EDPB Guidelines on processing personal data through video devices 3/2019 | official guidance, not law | EU and EEA locations | 30 Sep 2026 | 6 |
| Article 29 Working Party Opinion on data processing at work (WP249) 2/2017 | official guidance, not law | EU and EEA locations | 30 Sep 2026 | 17 |
| ICO guidance: employment practices and data protection, monitoring workers 2023 | official guidance, not law | UK locations | 30 Sep 2026 | 27 |
| ICO guidance on video surveillance, including CCTV 2022 | official guidance, not law | UK locations | 30 Sep 2026 | 5 |
| Investigatory Powers (Interception by Businesses etc. for Monitoring and Record-keeping Purposes) Regulations 2018 | law | UK locations | 30 Sep 2026 | 3 |
| Federal Data Protection Act (BDSG), Germany | law | Germany | 30 Sep 2026 | 8 |
| Works Constitution Act (BetrVG), Germany | law | Germany | 30 Sep 2026 | 4 |
| Labour Code (Code du travail), France: monitoring and CSE consultation | law | France | 30 Sep 2026 | 7 |
| CNIL guidance on employee monitoring and workplace video surveillance4 provisions from pages the CNIL marks out of date | official guidance, not law | France | 30 Sep 2026 | 23 |
| Workers' Statute, Italy Law 300/1970 | law | Italy | 30 Sep 2026 | 4 |
| Personal Data Protection Code, Italy Legislative Decree 196/2003 | law | Italy | 30 Sep 2026 | 3 |
| Works Councils Act (WOR), Netherlands | law | the Netherlands | 30 Sep 2026 | 4 |
| GDPR Implementation Act (UAVG), Netherlands | law | the Netherlands | 30 Sep 2026 | 2 |
| Organic Law on Data Protection and Digital Rights (LOPDGDD), Spain Organic Law 3/2018 | law | Spain | 30 Sep 2026 | 3 |
| NSW Workplace Surveillance Act 2005 | law | New South Wales | 30 Sep 2026 | 9 |
| NSW Surveillance Devices Act 20073 provisions with text not verified against the current consolidation | law | New South Wales | 30 Sep 2026 | 8 |
| ACT Workplace Privacy Act 2011 | law | the Australian Capital Territory | 30 Sep 2026 | 9 |
| Victorian Surveillance Devices Act 1999 | law | Victoria | 30 Sep 2026 | 4 |
| Australian Privacy Principles (APPs) | law | Australian locations, when you say the Privacy Act applies | 30 Sep 2026 | 4 |
| Ontario Employment Standards Act, Part XI.1 (written policy on electronic monitoring) 2000 | law | Ontario, when you say 25 or more employees on 1 January | 30 Sep 2026 | 7 |
| New York Civil Rights Law section 52-c (electronic monitoring notice) | law | New York | 30 Sep 2026 | 3 |
| Connecticut General Statutes section 31-48d (electronic monitoring of employees) | law | Connecticut | 30 Sep 2026 | 5 |
| Delaware Code title 19 section 705 (monitoring of employee communications) | law | Delaware | 30 Sep 2026 | 3 |
| US Electronic Communications Privacy Act, Title I (Wiretap Act, 18 USC 2510 to 2523) | law | every US location | 30 Sep 2026 | 3 |
| US Stored Communications Act (18 USC 2701 to 2713) | law | every US location | 30 Sep 2026 | 3 |
| California Penal Code sections 632 and 632.7 (recording confidential communications) | law | California | 30 Sep 2026 | 2 |
| Illinois Eavesdropping Act (720 ILCS 5, Article 14) | law | Illinois | 30 Sep 2026 | 6 |
| Illinois Biometric Information Privacy Act (BIPA) | law | Illinois | 30 Sep 2026 | 5 |
| Texas Capture or Use of Biometric Identifier Act (Business and Commerce Code 503.001) | law | Texas | 30 Sep 2026 | 4 |
| California Consumer Privacy Act, as amended by the CPRA | law | California, when you say the business meets the CCPA thresholds | 30 Sep 2026 | 5 |
| Florida Security of Communications Act (Florida Statutes chapter 934) | law | Florida | 30 Sep 2026 | 5 |
| Washington RCW chapter 9.73 (recording private communications and conversations) | law | Washington | 30 Sep 2026 | 3 |
| Massachusetts Wiretap Act (M.G.L. c. 272 s. 99) | law | Massachusetts | 30 Sep 2026 | 4 |
| Pennsylvania Wiretapping and Electronic Surveillance Control Act (18 Pa.C.S. chapter 57) | law | Pennsylvania | 30 Sep 2026 | 5 |
| Maryland Wiretap Act (Courts and Judicial Proceedings 10-402) | law | Maryland | 30 Sep 2026 | 4 |
| Montana privacy in communications (Mont. Code Ann. 45-8-213) | law | Montana | 30 Sep 2026 | 2 |
| New Hampshire Wiretapping and Eavesdropping Act (RSA 570-A) | law | New Hampshire | 30 Sep 2026 | 4 |
| Oregon obtaining contents of communications (ORS 165.540) | law | Oregon | 30 Sep 2026 | 3 |
| Nevada interception of communications and private conversations (NRS 200.610 to 200.690) | law | Nevada | 30 Sep 2026 | 2 |
| Michigan Eavesdropping Act (MCL 750.539a to 750.539j) | law | Michigan | 30 Sep 2026 | 3 |
| Connecticut General Statutes section 31-48b (employer electronic surveillance limits) | law | Connecticut | 30 Sep 2026 | 1 |
| Connecticut General Statutes section 52-570d (recording private telephone conversations) | law | Connecticut | 30 Sep 2026 | 1 |
| California Penal Code section 631 (wiretapping) | law | California | 30 Sep 2026 | 4 |
| Delaware Wiretapping and Electronic Surveillance Act (11 Del. C. chapter 24, subchapter I) | law | Delaware | 30 Sep 2026 | 2 |
| Queensland Invasion of Privacy Act 1971 | law | Queensland | 30 Sep 2026 | 3 |
| California Labor Code section 435 and Part 5.8 (recording and surveillance tools in restrooms, locker rooms, changing rooms and bathrooms) | law | California | 30 Sep 2026 | 4 |
| New York Labor Law sections 203-c and 203-d (recording in restrooms, locker rooms and changing rooms; personal identifying information) | law | New York | 30 Sep 2026 | 2 |
| New York Penal Law article 250 (eavesdropping and surveillance offences) | law | New York | 30 Sep 2026 | 4 |
| Texas Penal Code section 16.02 (interception, use or disclosure of wire, oral or electronic communications) | law | Texas | 30 Sep 2026 | 3 |
| German Criminal Code (StGB) sections 201 and 201a (confidentiality of the spoken word; images of the intimate sphere) | law | Germany | 30 Sep 2026 | 3 |
| Penal Code (Code penal), France: article 226-1 (capturing words, images or location in private) | law | France | 30 Sep 2026 | 4 |
| ILO Code of Practice on the Protection of Workers' Personal Data 1997 | official guidance, not law | every location, as the international baseline | 30 Sep 2026 | 10 |
| ISO/IEC 27001 (information security management) | standard | every location, when you tick ISO/IEC 27001 | 30 Sep 2026 | 2 |