Summary
An employee can object to monitoring, and in some circumstances the law backs the objection, but an outright refusal to use a monitored work device is rarely a protected choice. In the United States, monitoring of employer-owned equipment is lawful almost everywhere and refusal is usually treated as refusing a reasonable instruction. In the UK and EU the picture is different: employers cannot rely on consent precisely because employees cannot freely refuse, so the lawful basis is legitimate interest, and that basis comes with a formal right to object that the employer must consider. This guide sets out what refusal means in each jurisdiction, the cases where an objection should succeed, what an employer may and may not do in response, and the policy design that makes most refusals unnecessary.
E-Monitor's work-hours-only defaults and employee self-view answer most objections before they are raised. Book a demo →
Refusal, Objection and Consent Are Different Things
The question hides three separate ones. Can an employee decline to consent? Can they formally object and expect the employer to stop? And can they simply refuse to work on a monitored device without consequences? The answers differ, and most confusion comes from treating them as one.
Consent is the weakest of the three for employers, not employees. Under GDPR and UK GDPR, consent must be freely given, and regulators have said repeatedly that an employee facing a manager cannot give it freely. The UK Information Commissioner's Office states that consent is rarely appropriate for monitoring workers, and the European Data Protection Board takes the same view. That means an employer who asked for consent and was refused has no basis to monitor, which is why well-run programs do not ask. They rely on legitimate interest or a legal obligation instead, and they document why.
Objection is a formal right that attaches to that legitimate-interest basis. Refusal is a workplace act, governed by employment law rather than privacy law. The rest of this guide takes them in turn by jurisdiction.
United States: Refusal Is Rarely Protected
Federal law permits employers to monitor company-owned devices and networks for business purposes, and most states follow. The Electronic Communications Privacy Act's business-use and consent exceptions cover ordinary monitoring; Connecticut, Delaware and New York require written notice; a handful of states restrict specific methods such as biometrics or personal social media access. None gives a general right to refuse.
In practice an employee who refuses to use a monitored laptop is refusing the tools of the job. In at-will states that can lawfully end the employment, and even where the employer chooses not to go that far, the refusal is treated as a conduct matter. The exceptions are narrow but real: monitoring that targets union organising, that discriminates against a protected class, that retaliates against a whistleblower, or that reaches into personal devices and accounts the policy never covered. Each of those is a claim under a different statute, not a right to refuse monitoring as such.
Employees in the US therefore have more leverage before monitoring starts, through disclosure and policy, than after. The state-by-state guide covers the notice rules; the unions guide covers the one setting where collective objection changes the picture.
UK and EU: A Right to Object That Employers Must Answer
Where an employer relies on legitimate interest, Article 21 of the GDPR gives every employee the right to object to processing on grounds relating to their particular situation. The employer must then stop unless it can show compelling legitimate grounds that override the employee's interests. "We want to" is not compelling; "we are required to keep audit logs under financial regulation" usually is.
The ICO's monitoring guidance adds the practical conditions: the monitoring must be necessary for a stated purpose, proportionate to it, disclosed in advance, and assessed through a data protection impact assessment where the risk is high. An objection is strongest where one of those conditions has slipped. Screenshots of a role that only needs time records, monitoring that runs outside working hours, or a policy nobody was shown are all grounds a regulator will take seriously.
What the right does not do is let an employee opt out of a proportionate, disclosed program while keeping the role. An objection that is considered and answered in writing, with the employer's grounds set out, discharges the duty. The GDPR compliance guide and the UK guide cover the assessment and disclosure steps in detail.
When an Objection Should Succeed
Across jurisdictions, five situations give an employee a strong position, and an employer who receives an objection should check for each before responding.
- Monitoring was never disclosed, or the policy does not cover what the software actually collects
- The scope exceeds the purpose: keystrokes or screenshots where hours would do, or collection outside work time
- Personal devices or accounts are captured without an explicit, separate agreement
- A protected characteristic or activity is affected: disability adjustments, religious observance, union activity, whistleblowing
- The data is used for a purpose it was not collected for, such as a productivity ranking built from a security log
None of these requires the employee to refuse monitoring altogether. Each is a reason to narrow it, and a program that narrows willingly keeps both the data it needs and the employee's cooperation. The neurodivergent employees guide and the whistleblower protections guide cover two of the protected cases.
What Employers May and May Not Do in Response
The response to a refusal decides whether it becomes a grievance, a claim or a non-event.
Employers may require the use of monitored equipment for work, provided the monitoring is lawful and disclosed. They may treat a flat refusal as a conduct matter after a conversation, and they may apply the same policy to everyone, which is the single best defence against a discrimination claim. In the UK and EU they must consider a formal objection and reply with reasons.
Employers may not punish the act of objecting. Marking someone down, moving them off interesting work or singling them out for closer monitoring because they asked questions is retaliation in most legal systems and reads that way to a tribunal. They may not quietly expand monitoring on the objector, and they may not collect from personal devices to work around a refusal. Doing any of those converts a strong employer position into a weak one.
The sequence that works: listen, check the five situations above, narrow the monitoring if any applies, explain in writing if none does, and offer the employee their own view of the data. The privacy concerns guide has wording for that conversation.
Designing a Program Few People Want to Refuse
Refusals cluster around three features: hidden collection, personal-time collection, and data employees cannot see. Remove those and objections drop to the cases that deserve a hearing.
Collect during work hours on work devices only, and say so. List what is excluded as prominently as what is included; the exclusions do the persuading. Give every employee a dashboard showing their own data, so the program is something done with them rather than to them. Put a named person and a two-week notice period on the announcement. Run a data protection impact assessment and keep it, because it is the document that answers an objection.
The staff monitoring program guide walks through those decisions in order, and the consent form covers the narrow cases, such as biometrics, where consent genuinely is the right basis.
A Worked Example: Two Objections
Two employees at a UK professional services firm objected to the same monitoring program in the same month. The outcomes differed because the objections did.
The first was a consultant who objected in general terms: monitoring was intrusive and she did not consent to it. HR replied in writing, as the ICO guidance expects, setting out the lawful basis (legitimate interest in accurate client billing and working-time records), the data protection impact assessment, the scope (hours and application categories on the work laptop, 8am to 7pm, no screenshots), and her own dashboard access. The objection was considered and declined with reasons, and the program continued. She had no further recourse short of a complaint to the regulator, which would have found a disclosed, proportionate program.
The second was an associate who objected to one specific element: the agent was recording application use on her laptop during a weekly 6pm counselling appointment that she took from the office, because the 7pm cut-off was later than her contracted hours. Her objection cited the right to object and a particular situation, exactly as Article 21 requires. HR checked, found the schedule window had been set company-wide rather than per contract, narrowed collection to each employee's contracted hours, and confirmed the change in writing. The associate's objection succeeded, the program improved, and the firm avoided a complaint it would have lost.
The lesson for employees is that specificity wins. The lesson for employers is that an objection is usually a free audit of the program's scope, and the ones that succeed are the ones that find a real flaw.
What Employees Can Do
If you are being asked to accept monitoring and are uneasy, the effective moves are specific rather than total. Ask for the policy and the data protection impact assessment. Ask what is collected, when it stops, who sees it and how long it is kept. If any answer is missing or does not match the software, raise it in writing. In the UK and EU, cite the right to object and give your particular reasons; a general dislike of monitoring will not carry, but a concrete disproportion will.
If the program is disclosed, proportionate and limited to work, a refusal to use the device is unlikely to be protected anywhere, and the realistic choices are to work within it or to leave. The guide to what monitoring does for employees is worth reading before deciding; a transparent program is often less intrusive than the assumptions people bring to it.
Frequently Asked Questions
1. Can an employee legally refuse to be monitored at work?
In the US, generally no: employers may monitor company devices for business purposes, and refusing to use them is treated as refusing the tools of the job. In the UK and EU employees have a formal right to object when monitoring rests on legitimate interest, and the employer must consider it, but a proportionate, disclosed program can usually continue.
2. Does an employer need my consent to monitor me?
Usually not, and in the UK and EU regulators say consent is rarely the right basis because employees cannot freely refuse. Employers rely on legitimate interest or a legal obligation instead. Consent is used only for narrow cases such as biometrics.
3. What is the right to object to monitoring?
Under GDPR Article 21, an employee can object to processing based on legitimate interest, giving reasons specific to their situation. The employer must stop unless it demonstrates compelling grounds that override the employee's interests, and must reply with its reasoning.
4. Can I be fired for refusing monitoring software?
In at-will US states, refusing to use monitored work equipment can lawfully end employment. In the UK and EU a dismissal must still follow a fair process, and it is unsafe where the monitoring itself was undisclosed or disproportionate. Retaliation for raising an objection is unlawful almost everywhere.
5. Can my employer monitor my personal phone or laptop?
Only with an explicit, separate agreement, typically a bring-your-own-device policy you accepted. Without one, monitoring a personal device is outside any lawful basis, and refusing it is a strong position.
6. What should an employer do when an employee objects?
Listen, check whether the monitoring is disclosed, proportionate, limited to work and used for its stated purpose, narrow it if not, reply in writing with reasons if so, and never single out the objector for closer monitoring or worse treatment.
Monitoring most people are willing to accept E-Monitor collects during work hours on work devices only and shows every employee their own data, which answers most objections before they reach HR. Sign up →