Employee surveillance in Australia — what employers can and cannot do

You have decided to monitor how employees use their work devices, or you want to install cameras in the warehouse, or you need GPS data from a fleet vehicle — and you are not sure where the law stands. The short answer is that surveillance of employees is permitted in Australia, but each state and territory imposes its own rules about notice, consent, and the types of monitoring that are flatly prohibited. Getting this wrong does not just expose you to regulatory risk; it can undermine disciplinary action and complicate any unfair dismissal proceedings.

What counts as workplace surveillance

Workplace surveillance covers any monitoring an employer conducts on employees, whether or not that was the original purpose. A CCTV system installed primarily for shoplifting prevention still constitutes workplace surveillance once it captures employees. Monitoring takes many forms:

camera surveillance (CCTV footage inside or outside the workplace)
computer surveillance (reviewing emails, browsing history, files accessed, data downloaded, or keystrokes)
tracking surveillance (GPS devices on vehicles or equipment)
audio recording of inbound and outbound calls
access logs showing when employees badge in or out

If your business captures any of these, you are conducting workplace surveillance regardless of intent.

Why the legal framework matters to your business

The obvious reason to comply is to stay on the right side of state surveillance laws. The less obvious reason is that surveillance evidence collected unlawfully is far less useful when you need it most. If an employee raises an unfair dismissal claim and the conduct you uncovered was captured in breach of applicable notice or consent requirements, the value of that evidence — and your ability to rely on it — may be significantly reduced. Courts and tribunals take procedural compliance seriously. Building a surveillance programme that satisfies the relevant laws from the start means the data you collect is defensible when it matters.

The national privacy overlay

Before turning to state law, note that the Privacy Act 1988 (Cth) creates a separate layer of obligation. The Australian Privacy Principles (APPs) do not specifically regulate workplace surveillance, but if your business keeps records generated by monitoring — CCTV footage, email logs, computer activity records — those records may attract APP obligations once they contain personal information that is not directly related to your employment relationship with the individual. The employee records exemption under the Privacy Act 1988 (Cth) has a defined scope; it does not extend to every record an employer holds about an employee. If you are uncertain whether a surveillance record falls inside or outside that exemption, it is worth checking with the Office of the Australian Information Commissioner before you build your retention policy.

New South Wales — the most detailed framework

The Workplace Surveillance Act 2005 (NSW) is the most comprehensive state-specific workplace surveillance statute in Australia. Its core requirements:

Notice before surveillance starts. Under s 10, an employer must give each employee written notice at least 14 days before surveillance commences. The notice must state the kind of surveillance (camera, computer, or tracking), how it will be conducted, when it starts, whether it will be continuous or intermittent, and whether it is time-limited or ongoing. If surveillance is already underway when a new employee joins, that employee must be notified before their first day of work. An employee can agree in writing to a shorter notice period — which is where employment contracts become useful.

Camera surveillance requirements. Section 11 adds that cameras and their housings must be clearly visible, and signs must be posted notifying people they are under camera surveillance. Concealed cameras are not a default option.

Tracking surveillance. Section 13 requires a notice or visible warning informing the employee they are subject to tracking surveillance. A sign on the relevant vehicle or equipment can satisfy this requirement.

Covert surveillance is tightly controlled. Section 19 makes covert surveillance a criminal offence unless the employer holds a covert surveillance authority issued by a magistrate. Under s 20, such an authority can only be issued for the purpose of establishing whether an employee is engaged in unlawful activity at work. This is not a tool for general performance monitoring.

Surveillance must not extend beyond the workplace. The Act prohibits using a work surveillance device to monitor an employee while they are not at work — reinforcing that the legislation is about the employment context, not the employee's life outside it.

If your employees are in NSW, you need a written surveillance policy, written notices for each employee, and you need to ensure any camera or tracking deployment satisfies the additional physical requirements before you switch anything on.

Australian Capital Territory

The Workplace Privacy Act 2011 (ACT) mirrors the NSW framework in most respects. Section 13 requires at least 14 days' written notice covering the type of surveillance device, how it will be conducted, who will be subject to it, when it starts, whether it is continuous or periodic, whether it is time-limited or ongoing, and — importantly — the purpose for which the employer may use and disclose surveillance records. This last element is broader than the NSW requirement and effectively means your notice must double as a data-use statement.

The ACT Act also requires good-faith consultation during the notice period: if an employee raises concerns about the proposed surveillance, the employer must give them a genuine opportunity to influence how it is conducted. The covert surveillance provisions are similarly restrictive, with covert surveillance authority available only for investigating unlawful activity and limited to a period of no more than 30 days.

Victoria, Western Australia, and the Northern Territory

These jurisdictions have no dedicated workplace surveillance statute. Employer monitoring is instead regulated by general surveillance device legislation.

In Victoria, the Surveillance Devices Act 1999 (Vic) prohibits installing, using, or maintaining an optical surveillance device to record or observe a private activity without the express or implied consent of each party (s 7). The same consent principle applies to listening devices (s 6) and tracking devices (s 8). Section 9B goes further with an absolute prohibition: an employer must not use an optical surveillance device or a listening device to observe, listen to, record, or monitor workers in a toilet, washroom, change room, or lactation room. There is no consent exception for those areas.

In practical terms this means Victorian employers who want to use CCTV, conduct call recording, or track vehicles need to obtain employee consent — typically by incorporating it into employment agreements. Verbal or implied consent carries risk; written consent in the contract is the cleaner approach.

Western Australia operates under the Surveillance Devices Act 1998 (WA), which takes a comparable general consent-based approach for listening, optical, and tracking devices.

Queensland and Tasmania

Queensland has no dedicated workplace surveillance legislation. The relevant restrictions come from two statutes. The Invasion of Privacy Act 1971 (Qld) s 43 makes it an offence to use a listening device to overhear, record, monitor, or listen to a private conversation. The Criminal Code 1899 (Qld) s 227A creates a separate offence of visually recording a person in circumstances where a reasonable adult would expect privacy, without consent, in a private place or while engaged in a private act.

Both offences carry criminal penalties. An employer recording calls or using cameras in areas where employees have a reasonable expectation of privacy — locker rooms, break rooms — faces real criminal exposure if consent has not been obtained.

Tasmania has no dedicated workplace surveillance legislation and, like Queensland, relies on general privacy and criminal law principles to regulate employer monitoring. The safest approach in both states is to document employee consent before any monitoring commences.

South Australia and the Northern Territory

South Australia and the Northern Territory similarly lack specific workplace surveillance legislation and rely on general surveillance device laws. The consent-based approach is the standard expectation: obtain written employee consent for any optical, listening, or tracking surveillance before it begins.

What to put in place before you start monitoring

Regardless of state, the practical minimum an employer should have in place before starting any form of workplace surveillance:

Employment contract clause. Include a clear surveillance consent clause in all new employment agreements. For existing employees, document consent separately. This is especially critical in VIC, WA, QLD, TAS, SA, and NT.
Surveillance policy. A written policy explaining what types of surveillance are used, how records are stored, who can access them, and how they may be used. NSW and ACT require a policy; best practice everywhere.
Written notice in NSW and ACT. Use the employment agreement or a standalone written notice that satisfies the statutory content requirements. Issue it at least 14 days before surveillance begins.
Physical signage. For any camera or tracking surveillance, post visible signs and ensure cameras are in plain sight. This is a hard requirement in NSW; it is also the practical standard elsewhere.
No surveillance in prohibited areas. Never install optical or listening devices in toilets, change rooms, washrooms, or lactation rooms. This prohibition is explicit in Victoria and reflects general privacy and criminal law principles in all other jurisdictions.
Covert surveillance requires legal authority. In NSW and the ACT, covert surveillance without a magistrate-issued authority is a criminal offence. Do not attempt covert monitoring without first obtaining specific legal advice.

How Artificer Legal can help

Getting workplace surveillance right requires matching your specific monitoring intentions against the laws of each state in which your employees are based — and those laws are not uniform. An Artificer Legal employment lawyer can review your existing employment agreements to check whether your surveillance consent clauses are adequate for each jurisdiction, draft a compliant surveillance policy, advise on whether a proposed monitoring arrangement requires a covert surveillance authority, and assess whether your current practices expose you to liability in an unfair dismissal or privacy dispute. If you are rolling out a new monitoring system or reviewing an existing one, that is the point to get advice — before you collect data, not after.

The compliance baseline that protects you

The single most important thing to understand about workplace surveillance in Australia is this: collecting evidence unlawfully does not just create regulatory risk — it can rob you of the very protection the surveillance was meant to provide. An employer who follows the notice, consent, and policy requirements creates a surveillance programme that holds up in proceedings. One who skips those steps may find themselves in an employment dispute without the evidence they thought they had.

Australian workplace surveillance laws vary significantly across jurisdictions. New South Wales and the ACT impose the most detailed requirements, including mandatory written notice at least 14 days before surveillance starts, a written surveillance policy, physical visibility requirements for cameras, and strict controls on covert surveillance. Victoria, Western Australia, Queensland, Tasmania, South Australia, and the Northern Territory rely on general surveillance device and privacy laws that centre on employee consent. Across all jurisdictions, surveillance in toilets, change rooms, washrooms, and lactation rooms is either prohibited outright or deeply problematic under general criminal law. The clearest path to a defensible surveillance programme is a consent clause in your employment agreements, a written policy, and physical notices before any device is switched on.