Australia regulates employee monitoring mainly at the state level through Surveillance Devices Acts, backed by the federal Privacy Act. Monitoring is lawful with proper notice, but secret monitoring is tightly restricted and varies by state.

Employee monitoring in Australia is governed by a patchwork of state and federal law rather than a single national statute. Each state and territory has its own Surveillance Devices Act or equivalent, New South Wales has a dedicated Workplace Surveillance Act, and the federal Privacy Act 1988 governs how personal information is handled. The result is that an employer operating across states faces different notice rules and different limits on secret monitoring depending on where staff are located. This guide explains the framework, the notice obligations, and how to run a compliant program nationally.

A state-by-state framework

Australian monitoring law is primarily state law. Each jurisdiction has legislation governing the use of tracking, optical, and data surveillance devices, and New South Wales adds the Workplace Surveillance Act 2005, which specifically covers computer, camera, and location monitoring at work. There is no single federal monitoring statute that overrides these.

For an employer this means the rules depend on where each employee works, not where the company is headquartered. A national program has to meet the strictest applicable state requirement or be configured per state. Our legality by state and country guide gives the wider context for multi-jurisdiction employers.

The practical consequence of a state-based system is that the employee's work location, not the employer's registered office, decides the rules. A company headquartered in Victoria with staff in New South Wales must meet the New South Wales notice requirements for those workers, which is why many national employers simply standardize on the strictest state rule.

New South Wales and the notice model

New South Wales sets the clearest template through its Workplace Surveillance Act. Computer, camera, and tracking surveillance of employees is lawful only if the employer gives written notice at least 14 days before it begins, or the employee agrees to a shorter period. The notice must describe the kind of surveillance and how it will be carried out.

This 14-day written notice model is a useful national baseline even outside New South Wales, because clear advance notice satisfies the notice-based logic that runs through most Australian jurisdictions. Employers who adopt it everywhere reduce the risk of falling short in any one state.

The New South Wales notice must be specific, describing the kind of surveillance, whether computer, camera, or tracking, and how it will be conducted, not a vague statement that monitoring may occur. A precise, plain-language notice given before monitoring begins is both the legal requirement and the clearest way to keep the workforce informed.

Secret monitoring is tightly restricted

Secret monitoring, meaning surveillance without notice, is heavily restricted across Australia. In New South Wales it is generally prohibited unless authorized by a secret surveillance authority issued by a magistrate, and only for investigating a suspected unlawful activity. Other states impose comparable limits through their Surveillance Devices Acts.

The practical rule is that secret monitoring of employees is not a normal management tool in Australia and should never be assumed lawful. Transparent, notified monitoring is both the compliant path and the one that supports trust, as our stealth versus transparent monitoring guide explains.

The restriction on secret monitoring is not a technicality but a reflection of how seriously Australian law treats workplace privacy. An employer tempted to monitor quietly to catch a suspected problem should instead seek proper authorization or rely on transparent monitoring, because evidence gathered unlawfully can be excluded and expose the employer to further liability.

A further practical point is that notice works best when it is genuinely understood, not merely delivered. Employers who pair the required written notice with a short plain-language explanation of what the monitoring does and does not capture tend to see far less resistance, because staff can see the scope is bounded rather than open-ended.

eMonitor — Australia

Notice-First Monitoring

14-day

Notice

Work

Hours

Privacy

Act

No

Secret

Compliance signals

Written notice

Work purpose

Data security

Access rights

Secret

Activity mix

Notified monitoring88%

Retention limited9%

Excess3%

▲ Advance written notice and work-hours scope kept monitoring lawful across states.

Illustrative eMonitor dashboard.

The Privacy Act and personal information

The federal Privacy Act 1988 and its Australian Privacy Principles govern how organizations collect, use, store, and disclose personal information. While a small-business exemption applies to some employers under a certain annual turnover, most mid-sized and larger organizations are covered, and monitoring data about identifiable employees is personal information.

Under the Privacy Principles an employer should collect only information reasonably necessary for its functions, be transparent through a privacy policy, keep the data secure, and allow access and correction. These obligations sit alongside the state surveillance rules, so a compliant program has to satisfy both.

The Australian Privacy Principles also require that personal information be kept secure and only held as long as needed, which maps neatly onto good monitoring hygiene. An employer that limits retention, restricts access, and secures the data is meeting both the Privacy Act and the reasonable expectations of the staff being monitored.

Australian regulators have signaled that workplace privacy is an area of growing attention, and reform of the employee records exemption would tighten obligations rather than loosen them. Building a program now around notice, minimization, and security means an employer is prepared for that direction of travel instead of scrambling to retrofit compliance later.

The employee records exemption

The Privacy Act contains an employee records exemption that removes some acts directly related to a current or former employment relationship from certain obligations. This exemption is narrower than it first appears and does not remove the state Surveillance Devices Act requirements, which apply regardless.

Reform of the exemption has been under active discussion, and the direction of travel is toward more employee protection, not less. Prudent employers do not rely on the exemption as a reason to skip notice or minimize data, because the state surveillance laws still bind them and the exemption may narrow further.

Because the employee records exemption is under active review and does not touch the state surveillance laws, treating it as a shortcut is short-sighted. A program built on notice, minimization, and security will remain compliant whether or not the exemption narrows, whereas one that leans on the exemption may need rebuilding if reform lands.

Location and tracking devices

Tracking surveillance of vehicles and devices is specifically regulated. Fitting a tracking device to monitor an employee generally requires notice under the applicable state act, and tracking outside working hours raises additional risk. Location monitoring of field staff is lawful with proper notice but should be limited to work time and work purposes.

For field and mobile workforces this means geofencing and location features need clear notification and a defined work purpose. Our geofencing guide covers how to scope location monitoring to working duties, which is exactly what Australian notice rules expect.

For vehicle and device tracking, the safest design confines location data to working hours and legitimate operational needs, such as dispatching field staff or verifying job-site attendance. Tracking that continues after hours or reaches into private movements attracts the most risk, so switching location capture off outside work is both compliant and trust-preserving.

Running a compliant national program

A compliant Australian program gives clear written notice before monitoring starts, describes what is monitored and how, limits collection to work purposes and work hours, secures the data, and allows access and correction. Adopting the strictest state standard, typically the New South Wales notice model, across the whole workforce is the simplest way to stay compliant everywhere.

Documenting the notice, the purpose, and the retention period protects the employer if a practice is later questioned. Advance notice and transparency also make the program defensible and reduce disputes, the same pattern that works in every jurisdiction we cover.

Documentation is the quiet foundation of Australian compliance: recording when notice was given, what it covered, why the monitoring is needed, and how long data is kept turns a defensible intent into defensible evidence. If a practice is later questioned, that paper trail is what distinguishes a lawful program from an improvised one.

How eMonitor supports Australian compliance

eMonitor supports the notice-and-transparency model Australian law requires, with work-hours-only tracking, configurable data collection, employee self-views, geofencing that can be scoped to work sites, and role-based access. Those controls let an employer monitor openly, limit collection to work purposes, and honor access requests.

eMonitor is a data processor, and the employer remains responsible for giving the required written notice and meeting the state and Privacy Act obligations. At $3.90 to $13.90 per user with a 7-day free trial, it gives Australian employers the transparent, minimal-data tooling that fits the Surveillance Devices Acts and the Australian Privacy Principles.

eMonitor's role is to make the notice-first model easy to operate at scale, with work-hours scheduling, per-site geofencing, and access controls that reflect what the notice promised. Because the employer remains responsible for issuing that notice, the tool's job is to ensure the actual monitoring never exceeds what employees were told to expect.