Slashdot Mirror


German Court Rules Bosses Can't Use Keyboard-Tracking Software To Spy On Workers (thelocal.de)

An anonymous reader quotes a report from The Local: The Federal Labour Court ruled on Thursday that evidence collected by a company through keystroke-tracking software could not be used to fire an employee, explaining that such surveillance violates workers' personal rights. The complainant had been working as a web developer at a media agency in North Rhine-Westphalia since 2011 when the company sent an email out in April 2015 explaining that employees' complete "internet traffic" and use of the company computer systems would be logged and permanently saved. Company policy forbade private use of the computers. The firm then installed keylogger software on company PCs to monitor keyboard strokes and regularly take screenshots. Less than a month later, the complainant was called in to speak with his boss about what the company had discovered through the spying software. Based on their findings, they accused him of working for another company while at work, and of developing a computer game for them. [...] So the programmer took his case to court, arguing that the evidence used against him had been collected illegally. The Federal Labour Court agreed with this argument, stating in the ruling that the keylogger software was an unlawful way to control employees. The judges added that using such software could be legitimate if there was a concrete suspicion beforehand of a criminal offense or serious breach of work duties.

17 of 72 comments (clear)

  1. TL;DR version by war4peace · · Score: 4, Interesting

    1. Company A used blanket monitoring software on its employees' machines;
    2. Employee was caught by above-mentioned software working for another company while at work at company A;
    3. Employee argues proof gathered was gathered illegally.
    4. Court agrees with employee.

    Outcome might have been differently if company A would only have monitored suspected employees instead of all of them.

    --
    ...gis sdrawkcab (usually not responding to ACs; don't bother posting as AC)
    1. Re:TL;DR version by Anonymous Coward · · Score: 2, Insightful

      Your opinion is irrelevant. This is about law. Internal regulations are never above law. In Europe, you have a right to privacy even during working hours. In this context, employers are not allowed to forbid personal commodity hardware (personal computer, personal phone, ... Not talking about servers, generic mailbox, functional mailbox or anything not specifically assigned to you ) to be reasonably used for private matter. And consequently, they are not allowed to eavesdrop all your communications.

    2. Re:TL;DR version by Anonymous Coward · · Score: 2, Insightful

      Bullshit. If there was any fairness in industrial regulation it would be illegal for the business to demand such a thing. You certainly don't see that kind of nonsense in industries where there is low unemployment or workers have any kind of power. Workers are humans, not automations. It's simply not possible to avoid all personal use when you have been assigned a general purpose machine and you are forced to use all day. It's abusive.

      And aside from the moral dimension, it is simply stupid. The only outcome that ever arises from restricting what your employees can do and monitoring them round the clock is *reduced* productivity, not to mention ending up with employees who feel they don't owe you shit if not actively sabotaging the operation. They teach you this in business school for fucks sake.

      This company doesn't deserve employees.

    3. Re:TL;DR version by Tom · · Score: 4, Insightful

      That is not entirely true.

      Keeping human dignity intact at the workplace is great in Germany, but that doesn't mean that there are not ways to do it. In larger companies, where you have a workers council, getting their agreement is one way to do it. In all companies, having a suspicion and acting on it instead of doing some kind of Big Brother mass surveilance will most likely not get thrown out in court.

      What we in Germany don't like is treating workers as hamsters in a lab and recording every little thing they do just because you can.

      --
      Assorted stuff I do sometimes: Lemuria.org
    4. Re:TL;DR version by houghi · · Score: 3, Informative

      Same in Belgium. First you need to inform the employees what you intend to do and why. e.g. recording calls from customers MUST be recorded. It also means that you not only must inform the customer, but also the employee.
      You can do screenshots and even complete recordings of the screen, but only during the conversation with the customer. And again the employee must be informed with that and even needs to give his OK. Yes, I have had people who refused. Those people did not last long and that had nothing to do with the fact they refused. It was just not a the right job for both of them.

      There are also serious restrictions on filming employees.

      I believe that this all comes because Europe and the US see privacy in a different thing.
      In the US everything is public, unless it is private. In the EU everything is private, unless it is public.
      This is obviously not 100%. You could compare it a bit with opt-in vs. opt-out.

      That means that even in a public place you will have some sort of right on privacy. Your data belongs to you and can not just be sold to others.

      If a friend asks for my phone number at a third mutual friend, they will not just give it. They will ask me permission to give it.
      That means that my N+1 has my phone number, but not HR. There is no need for them to have it.

      So it is very different from what would be standard in the US.

      --
      Don't fight for your country, if your country does not fight for you.
    5. Re:TL;DR version by ScentCone · · Score: 2

      The problem is that this should never even have COME to a court. The employee is using the employer's time, bandwidth, and equipment and collecting a paycheck from them while actually doing work for another company, presumably also being paid for that. Court? There's no court needed to simply fire someone that's abusing their trusted position. You abused your job here, and we're not going to pay you any more, goodbye. Why does a court need to get involved in that private matter between two parties? The employee can quit when they want to, and so can the employer.

      --
      Don't disappoint your bird dog. Go to the range.
  2. Who here had too much time on their hands? by Arzaboa · · Score: 2, Insightful

    Sounds like the manager had way too much time on their hands.

    Sounds like the employee had way too much time on their hands.

    Looks like "upper-management" needs to focus on real worries, like getting more business or making the job more fulfilling. Clearly the employee was bored and wasn't one that was going to sit on their hands and do nothing while they still had a brain to use.

    It appears this could have been handled very differently by all parties involved.

    When office life turns into cops and robbers, no one is winning and it speaks to bigger issues.

  3. Re:Welp by Anonymous Coward · · Score: 2, Interesting

    I used to be the manager of 84 people. I mostly knew what my people were doing. I even knew some were working on side jobs during their official working hours. They did not even hide this to me. We talked about. But these people were also the best one I got. They were the only one able to deliver, even off hours when it mattered.

      If do not create a trustworthy relationship, breaking news, people are very imaginative to hide from you. And like most thing, people gets addict to hiding, and soon you are a manager having not a clue what is going on in your team. Well done, now you are learning everything when it is too late: projects failures...

  4. Re:Make all workers sign a Contract... by Anonymous Coward · · Score: 4, Insightful

    Europe abolished slavery long time ago: no contract can override the laws. What you propose is totally illegal. You have a right to a reasonable privacy even at work. You have the right to call your wife on the work phone to say you will be late or to call to cancel a prostate testing, and doing that without your boss or anybody eavesdropping.

    Only a terminally ill society allow this kind of shit.

  5. Re:if only we had an Federal Labour Court or union by Anonymous Coward · · Score: 2, Interesting

    Europe is far from a paradise. But on this account you are right: employment and slavery are very distinct matters in EU.

  6. Keyboard tracking by wonkey_monkey · · Score: 4, Funny

    German Court Rules Bosses Can't Use Keyboard-Tracking

    Keyboard tracking?

    09:00 Keyboard is on desk
    09:01 Keyboard is on desk
    09:02 ...

    Well, you get the idea with that.

    --
    systemd is Roko's Basilisk.
  7. Re:Welp by slew · · Score: 2

    I remember that there where one game on either C64 or Spectrum where you could press a "the boss is coming" key which would present a fake spreadsheet page :). Don't remember which game it was though.

    I remember the game GATO had a fake spreadsheet when you hit the DELETE key...

    Then of course, there was the reverse. Office 97, had a couple easter-egg games. Excel had a flight-simulator and Word had a pinball game...

  8. Re:Make all workers sign a Contract... by Anonymous Coward · · Score: 2, Insightful

    The Germans are a bit more sensitive to surveillance by power (state or corporations). They have a few people still alive who remember what happens when it all turns to shit.

    The law there is very specific. it is functionally equivalent to the US restrictions on government. sure they can monitor, but they need cause first. no blanket drag nets.

  9. my cisco story by Anonymous Coward · · Score: 5, Interesting

    I worked for cisco a long time ago and have a friend who's been there almost from the very beginning. he moved to europe and stayed with cisco. he told me a story. it goes like this:

    in the US, cisco installs spyware on EVERY pc laptop (along with fake certs that allow them a MitM access to their pseudo encrypted network i/o). in the US, cisco does not tell their employees this, exactly; they just say 'they have the right to monitor employees' but they don't say anything more than that and most cisco employees (the younger ones, at least) are kept ignorant. I saw them reading personal email on work systems, etc etc. really stupid!

    in europe, cisco is FORCED to tell employees much more detail about their spying and keylogging. it was via this route (lol) that I found how what cisco is really up to. the guys in holland, germany (etc) know they are being monitored (to the extent that its legal) but in the US, employees are kept in the dark.

    note, this is not about cisco; its probably EVERY large corp in the US. the point is: the US is too business-friendly and consumer/employee hostile. overseas, its much more balanced. they have more rights over there, in general, and companies don't OWN their fucking asses like they do here.

    folks, be careful if you work for a large corp in the US. you have been spied on, data logged and MitM'd. and likely, you had no idea, either, since no one told you (for certain).

  10. Re:Make all workers sign a Contract... by hey! · · Score: 2

    It'd be interesting to know whether such a contract would be legal under EU law, which (unlike US law) explicitly recognizes a fundamental right to individual privacy.

    If you look into privacy cases, you'll see that expectation of privacy is an important factor. If you are going to monitor your employees' keystrokes, the only way it could possibly be reasonable is if you're up front about it. That way they know that the pissed-off email they draft but never send (a bad idea in any case) will still be read by the boss.

    --
    Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
  11. Re:if only we had an Federal Labour Court or union by jandersen · · Score: 2

    Dam the EU is so nice. Over time cap / better workers rights and healthcare not tied to jobs.

    Somewhat startlingly, these are among the very reasons that some wanted UK to leave EU. They call it "taking back control", but things like this are what has irked a lot of the anti-Europeans in the Conservative party.

  12. Depends by nospam007 · · Score: 2

    I was a railway dispatcher before retirement and all my keystrokes were logged by law, (ESTW) because otherwise nobody would have known which actions were triggered when by whom, in case of an accident. Also all my communications, phone, radio etc were recorded as well.

    For air traffic controllers it's the same thing.