TL;DR:
- Many Ontario employees are unaware their employers may already be tracking their keystrokes, web activity, or personal messages sent on company devices.
- Ontario law grants employees specific rights to be informed of monitoring practices, challenge excessive surveillance, and access their personal data, but many employers fail to comply.
Most Ontario employees have no idea their employer might already be tracking every keystroke, logging their web activity, or reviewing personal messages sent on company devices. That reality is uncomfortable, and the legal rules around it are surprisingly complex. Many workers assume a level of privacy that simply does not exist in law, while others give up rights they could actually enforce. This guide cuts through the confusion, explains what Ontario law protects, and gives you a concrete plan if you believe your workplace privacy has been violated.
Table of Contents
- Understanding workplace privacy in Ontario: What it means for you
- How employers monitor staff: Surveillance, snooping, and risks
- What to do if your privacy is violated: Steps for Ontario employees
- Recent legal changes and ongoing reforms in Ontario
- The uncomfortable truth about privacy at work in Ontario
- Get legal support if your privacy is at risk
- Frequently asked questions
Key Takeaways
| Point | Details |
|---|---|
| Know your rights | Ontario employees should be informed about their workplace privacy protections and monitoring policies. |
| Watch for common risks | Surveillance and unauthorized snooping are real risks that can impact your privacy and well-being. |
| Act quickly if violated | If your rights are compromised, promptly seek monitoring policy information and consult a legal professional. |
| Laws are changing | Stay up to date on evolving Ontario privacy standards to protect yourself at work. |
Understanding workplace privacy in Ontario: What it means for you
Workplace privacy refers to your right to control personal information in an employment context. This includes details like your health records, personal communications, financial data, and any information your employer collects through monitoring tools. It does not mean your employer can never watch what you do at work, but it does mean there are limits on how, when, and why they can do it.
Ontarioโs approach to employee privacy draws from several sources, including the Freedom of Information and Protection of Privacy Act (FIPPA) for public sector workers and the Personal Health Information Protection Act (PHIPA) for health-related data. Private sector employees have fewer statutory protections, but common law and the Ontario Human Rights Code still impose meaningful limits. If you work for a federally regulated employer, the Personal Information Protection and Electronic Documents Act (PIPEDA) also applies.
Under employee privacy rights explained, workers are entitled to be informed of monitoring practices, receive a copy of any monitoring policy, challenge excessive monitoring, and request access to the personal information their employer holds about them. Those are real, enforceable rights, not just suggestions.
Common types of workplace activities that are monitored vs. what privacy law protects:
| Activity monitored by employers | What privacy law may protect |
|---|---|
| Email and messaging on company devices | Personal accounts accessed on company networks |
| CCTV in common work areas | Locker rooms, washrooms, private offices |
| Keystroke logging on company computers | Personal browsing unrelated to job duties |
| GPS tracking in company vehicles | Location tracking outside working hours |
| Access logs and system usage | Medical or financial personal records |
| Performance tracking algorithms | Disability status, family status, religion |
Many employees are surprised that even the activities in the left column come with notice requirements. Your employer cannot simply install surveillance tools and say nothing.
Common scenarios that qualify as workplace privacy violations:
- Reviewing an employeeโs personal medical records without consent
- Installing keyloggers without notifying staff in a written policy
- Accessing personal messages on a private phone or personal email account
- Sharing an employeeโs health or financial information with coworkers
- Using GPS tracking on personal vehicles, even for work trips
- Discriminatory monitoring that targets specific employees based on protected characteristics
Understanding Ontario workplace discrimination and how it intersects with privacy is critical. Surveillance used selectively against employees of a particular race, gender, or disability status can amount to both a privacy violation and illegal discrimination.
Know your rights: Employees in Ontario have the legal right to know when and how they are being monitored, to receive a written copy of monitoring policies, and to challenge practices they believe are excessive or discriminatory. Staying informed is your first and most powerful line of defense.
How employers monitor staff: Surveillance, snooping, and risks
The variety of tools employers now use to watch employees is broader than most workers realize. It goes well beyond security cameras in the lobby.
Employers in Ontario commonly use CCTV systems, email scanning software, keystroke loggers, network traffic analysis, productivity tracking platforms, and GPS systems installed in company vehicles. Some employers also use algorithmic performance management tools that score employees based on activity levels, response times, or even mouse movement patterns. These tools are increasingly common in remote work arrangements, which expanded dramatically after 2020.
The IPC Ontario report on surveillance highlights serious concerns about surveillance technologies in the workplace, including impacts on mental health and professional trust. The Law Commission of Ontario (LCO) is currently reviewing workplace surveillance practices, and the health sector has faced multiple snooping incidents between 2023 and 2025. Lakeridge Health, for example, became the subject of a privacy investigation after staff accessed patient medical records without authorization.
Comparison of monitoring types and associated privacy risks:
| Type of monitoring | Privacy violation risk |
|---|---|
| Email scanning on company accounts | Moderate: must have clear written policy |
| Keylogger software on work computers | High: often deployed without notice |
| GPS tracking in company vehicles | Moderate: higher risk outside work hours |
| Algorithmic performance management | High: may embed discriminatory metrics |
| Camera surveillance in break rooms | High: rest areas carry stronger privacy expectations |
| Access to personal health records | Very high: almost always a serious violation |
When employers deploy these tools without proper notice or apply them selectively, they cross from reasonable management into unlawful invasion of privacy. Speaking with an Ontario employment lawyer can help you understand where the line is in your specific situation.
Signs your privacy might be at risk at work:
- You received no written monitoring policy when you were hired or when a new policy was introduced
- Your employer references information that could only have come from your personal communications
- You notice unusual software installed on your work device that you were not told about
- Colleagues who share your protected characteristic (e.g., disability, ethnicity) are monitored more closely than others
- Your employer makes decisions about your schedule or performance using data you never knew was collected
- You are questioned about activities that occurred during personal time or on personal devices
Pro Tip: You have the right to ask your employer directly what monitoring technology is in use and to receive a written policy. Put your request in writing and keep a copy. If the request is ignored or refused, that itself becomes important evidence.
What to do if your privacy is violated: Steps for Ontario employees
Finding out your employer has been monitoring you improperly or accessing personal data without your knowledge can feel overwhelming. But there is a clear path forward, and taking the right steps early makes a significant difference.
Step-by-step action plan for Ontario employees:
- Write everything down. Record dates, times, what happened, who was involved, and what was said. Note any witnesses. The sooner you document, the more reliable your account will be.
- Request the monitoring policy. You have a legal right to receive a copy of any workplace monitoring policy. Make this request in writing and keep a record. Under Canadian privacy law, employees can request access to the personal information an employer holds and challenge monitoring practices that appear excessive or discriminatory.
- Request access to your personal data. Ask your employer or HR department to confirm what personal information they have collected and how it has been used. Frame this as a formal written request.
- File an internal complaint. Report the concern to your HR department or a designated privacy officer if one exists. This creates a record and puts the employer on notice. Keep copies of all correspondence.
- Contact the Office of the Information and Privacy Commissioner of Ontario (IPC). If your employer is a public sector organization, the IPC has investigative powers. If you work in the private sector under federal jurisdiction, the Office of the Privacy Commissioner of Canada handles complaints.
- Consult a lawyer. Especially if your concern involves serious violations, sensitive data, or potential retaliation. The sooner you speak with a qualified professional, the more options you have.
- Protect yourself from retaliation. Document any negative change in treatment after you raise a privacy concern. Retaliation for asserting privacy rights may itself be a separate legal violation. Workplace retaliation lawyers can help you understand your options if your employer responds by targeting you.
And when it comes to workplace harassment laws in Ontario, remember that invasive surveillance used to intimidate or control specific employees can cross into harassment territory, which carries its own set of legal consequences for employers.
Pro Tip: Do not raise privacy concerns verbally and then follow up only verbally. Written records, whether email, formal letters, or written complaint forms, carry far more weight in any legal proceeding. Every interaction with HR or management about your privacy concern should be followed by a written summary from you, even just a quick email saying โI wanted to confirm our conversation today aboutโฆโ
Recent legal changes and ongoing reforms in Ontario
Ontarioโs privacy laws are not static. Legislators and regulators recognize that technology is outpacing existing protections, and meaningful change is already underway.
The Law Commission of Ontario launched a significant workplace surveillance review in 2026, examining whether current legal frameworks adequately address algorithmic management, wearable monitoring technology, and remote work surveillance. The IPC has published research calling for stronger rules around data minimization, meaning employers should only collect the personal data genuinely necessary for legitimate business purposes.
The core challenge is balance. Employers have real reasons to monitor some aspects of work. Productivity, safety, security, and legal compliance all create legitimate business interests. But those interests must be weighed against the employeesโ equally real interest in dignity, autonomy, and privacy. Ontario law increasingly reflects the principle of minimal intrusion: even where monitoring is permitted, it should be no more invasive than necessary.
What may change for Ontario workers in the near future:
- Mandatory written monitoring policies for all Ontario employers, not just those covered by PIPEDA
- Clearer rules on algorithmic management tools and how performance scoring data must be disclosed
- Stronger protections for remote workers, whose home environments can blur lines around personal privacy
- New employer obligations to conduct privacy impact assessments before deploying new surveillance tools
- Expanded IPC enforcement powers for private sector complaints
These reforms matter because they signal where the law is heading. Even if a specific tool is currently allowed, a pattern of invasive monitoring may be viewed more harshly as legal standards evolve.
Expert perspective: The IPC and legal researchers have consistently emphasized that surveillance at work is not simply a technology question but a human rights issue. The psychological weight of constant monitoring reduces trust, increases anxiety, and can cause real harm to workers, particularly those in already vulnerable positions. Legal reforms are slowly recognizing this reality.
Employees with disabilities navigating monitoring concerns have additional protections. Disability accommodation rights can be relevant when surveillance disproportionately burdens employees who require flexible arrangements or modified work conditions.
The uncomfortable truth about privacy at work in Ontario
Here is something most workplace privacy articles will not tell you directly: the official system is designed to inform and investigate, not to prevent harm before it happens. By the time a regulator steps in, the damage to your career, your sense of security, and your professional relationships may already be done.
Most employees overestimate their workplace privacy. They assume a policy exists, that someone is watching out for them, or that their employer would not risk a violation. The reality is that many employers have never reviewed whether their monitoring practices comply with current law. Small and mid-sized employers in particular often deploy technology because it is affordable and easy, without considering whether it requires a written policy or employee notice.
The IPC research on surveillance makes clear there are no reliable statistics on how often workplace privacy violations occur, but reports consistently highlight that risks are significant and growing. The gap between what employers are allowed to do and what employees believe is happening is wide. That gap is where violations hide.
Relying solely on your employerโs HR team is not a strategy. HR exists to protect the company, not you. That is not cynical, it is structural. When your interests and your employerโs interests align, HR can be helpful. When they conflict, you need your own support.
Active self-protection means understanding your rights before there is a problem, reviewing any monitoring policy you receive carefully, and asking questions when something feels off. And it means knowing where to turn if your instincts prove right. A detailed privacy rights guide is a strong starting point for building that knowledge.
Waiting for the law to catch up with technology or for your employer to do the right thing is not a plan. Knowing your rights, documenting your concerns, and getting legal advice early is.
Get legal support if your privacy is at risk
Awareness is an important first step, but if you genuinely believe your employer has violated your privacy, you deserve more than information. You need someone in your corner who knows the law, understands employer tactics, and is ready to fight for you. The right legal team can help you assess whether a violation occurred, what remedies are available, and how to move forward without making costly mistakes.
At Huprich Law, we take employee rights seriously and we are not here to just hand you a brochure. Whether your concern involves unauthorized surveillance, improper data collection, discriminatory monitoring, or retaliation for speaking up, we can help you understand your options. Visit our Ontario workplace discrimination lawyer page to learn more, or explore our broader workplace resources if you want to understand the full picture of your rights. Schedule a free consultation. You have nothing to lose by asking.
Frequently asked questions
Can my Ontario employer monitor my emails or internet use without telling me?
Employers generally must inform you about any workplace monitoring practices and provide you with a written copy of their monitoring policy before surveillance begins.
What should I do if I think my privacy rights were violated at work?
Start by requesting details about your employerโs monitoring policy in writing, then consult with a workplace privacy or employment lawyer to assess your options and protect against potential retaliation.
Are there any recent cases of workplace privacy violations in Ontario?
Yes. Investigations into health sector snooping incidents at facilities like Lakeridge Health have highlighted serious concerns about unauthorized access to personal records between 2023 and 2025.
Is Ontario law on workplace privacy changing?
Yes. The LCOโs 2026 review and IPC reform recommendations are pushing toward stronger, clearer standards around employer surveillance and data minimization obligations.
How can I find out what data my employer has collected about me?
You have the right to formally request access to any personal information your employer holds about you, and your employer must respond to that request under applicable privacy legislation.
