Tuesday, September 10, 2024

Location tracking of employee raises interesting legal issues


In an effort to dial back its current work-from-home culture, PricewaterhouseCoopers will start tracking where some of its employees work. It will start requiring its UK employees to spend a minimum of 3 days per week in the office and will use location data to manage their in-person attendance.

While there is nothing per se illegal about tracking employees in this manner, but I question whether it's a good HR practice. Indeed, there's quite the creep factor. How much will your employees mind Big Brother tracking all of their movements, and how will it impact morale?

And there still are some legal risks.

Privacy: Provided employees consent to being tracked as a condition of their employment, there should not be any privacy concerns. Indeed, in Quon v. Arch Wireless, the Supreme Court suggested that employees may lack any reasonable expectation of privacy in employer-provided technological equipment at all. Yet, the law is not quite settled on these privacy implications. Moreover, state privacy laws may vary. Additionally, the more data you record, the more risk you take that such information will be compromised or targeted by hackers.

Medical Information: Tracking employee movements could reveal a host of medical information. Who visits the bathroom more could be pregnant or suffering from a bladder infection? Who smokes? Who visits the vending machine and eats unhealthy snacks? This information could be used, for example, by employers to discriminate, or by insurers to charge higher premiums.

So, what are some suggestions if you wish to track employees' locations?

1. Document your reason(s) for tracking to support your legitimate business interest.

2. Disseminate (and explain) an Employee Tracking Policy, which should describe the need for the program, the nature of the tracking device, the data you will be tracking, how you will use (and, more importantly, not use) the data, and how you plan to keep it secure.

3. Obtain employee consent before tracking.

4. Limit the data to those that need to know, to minimize the sphere of individuals who could learn or infer medical information. Or consider anonymizing the data so individuals aren't implicated.

5. Don't sell or otherwise disclose the information to insurers or other third parties.

6. Ensure that your data security is updated.

7. Finally, call your employment lawyer. Cutting edge practices are always risky and should be vetted by counsel before implementation.