Workplace Surveillance and Monitoring in Luxembourg

1. Surveillance as data processing: the 2018 paradigm shift

Before 2018, any employee surveillance system required prior authorisation from the CNPD. Since the GDPR entered into force, that regime was abolished and replaced by a system based on employer accountability.

In practice, an employer may deploy a surveillance system without prior administrative authorisation, provided they:

• Identify a valid lawful basis under Article 6 GDPR.
• Comply with the mandatory prior information obligation under Article L.261-1 of the Labour Code.
• Apply the proportionality principle and data minimisation.
• Maintain a record of processing activities documenting the surveillance system.

2. The lawful basis: what actually justifies surveillance

Article L.261-1, §1 of the Labour Code refers to the lawfulness conditions of Article 6 GDPR. In practice, in an employment relationship, the relevant grounds are:

The bases normally relied upon

• Legitimate interests of the employer (Art. 6-1-f GDPR): protection of company assets, security of facilities, prevention of internal fraud, enforcement of IT usage policies. This is the most commonly invoked basis — provided the employer's interest is not overridden by the employee's fundamental rights.
• Legal obligation (Art. 6-1-c GDPR): where sectoral regulation itself mandates traceability (financial sector, healthcare, transport).
• Performance of a contract (Art. 6-1-b GDPR): in limited cases where monitoring is inherent to the contract terms (e.g. call centre operators whose calls are recorded for training purposes, as contractually provided).

3. The mandatory prior information obligation (Art. L.261-1, §2)

Before implementing any surveillance system, the employer must inform:

• The joint committee or, failing that, the staff delegation or, failing that, the ITM (for private-law contracts).
• The competent staff representative bodies for statutory employment regimes.

This information must be detailed and include at minimum:

• The purpose of the processing (the specific objective for which monitoring is implemented).
• The implementation modalities (type of system, scope, data access).
• The data retention period or the criteria used to determine it.
• A formal commitment not to repurpose the data for any purpose other than that declared.
• The employees' GDPR rights: right of access, rectification, restriction of processing, and right to lodge a complaint with the CNPD.

4. The proportionality principle: a sine qua non condition

Even where the lawful basis is valid and the information has been provided, surveillance is only lawful if the system is strictly necessary and proportionate to the objective pursued. This principle derives from Article 5-1-c GDPR (data minimisation) and directly conditions the evidentiary value of the information gathered.

Four criteria are used to assess proportionality:

1. The system must be necessary: the objective cannot be achieved by a less intrusive means.
2. It must be adequate: the data collected must be useful to the declared purpose.
3. It must be limited: no collection beyond what is strictly necessary (duration, scope, frequency).
4. It must not establish permanent or systematic monitoring without specific justification.

5. Employee rights and recourse

CNPD opinion on system compliance (Art. L.261-1, §4)

Within 15 days of the prior information, the staff delegation or employees concerned may request the CNPD's opinion on the compliance of the proposed system. This referral has a one-month suspensive effect: the employer may not deploy the system during that period.

This is not an administrative authorisation but a consultation mechanism allowing the CNPD to examine the system and, where appropriate, flag a non-compliance before implementation.

Individual right of complaint (Art. L.261-1, §5)

Any employee may at any time lodge an individual complaint with the CNPD if they consider that the processing of their personal data under a surveillance system violates the GDPR or Article L.261-1.

Individual GDPR rights

Independently of the specific L.261-1 procedure, each employee has the following GDPR rights against their employer:

• Right of access (Art. 15 GDPR): obtain confirmation that data concerning them is being processed and receive a copy.
• Right to rectification (Art. 16 GDPR): have inaccurate data corrected.
• Right to restriction (Art. 18 GDPR): have processing temporarily suspended where it is contested.
• Right to object (Art. 21 GDPR): object to processing based on legitimate interests, subject to the employer's compelling legitimate grounds.

6. Special cases

Surveillance for specific purposes (Art. L.261-1, §3)

Specific rules apply where monitoring is directly justified by one of the following objectives:

• Employee health and safety (Art. L.211-8): surveillance systems integrated into occupational risk prevention obligations.
• Control of production or services (Art. L.414-9): only where it is the sole means of determining the employee's exact wage.
• Organisation of work on flexible schedules (Art. L.423-1): badge readers and working-time recording systems.

Co-determination in companies with at least 150 employees (Art. L.414-9)

In companies employing at least 150 employees, the introduction of certain technical installations designed to monitor employee behaviour or performance falls under the co-determination regime with the staff delegation provided for by Article L.414-9. The decision must in that case be taken by mutual agreement between the employer and the delegation.

7. Evidentiary value of surveillance data

The legality of the surveillance system directly determines whether the data gathered can be used in disciplinary proceedings or employment litigation.

Luxembourg case law assesses the admissibility of such evidence on a case-by-case basis. The court examines in particular:

• Compliance with the prior information obligations under Art. L.261-1.
• The declared purpose: was the data used for the stated objective, or repurposed for other ends?
• The proportionate nature of the system in the specific circumstances of the case.