Annex
Legitimate Interest Assessment for Employment Monitoring Annex
This annex specializes the general Legitimate Interest Assessment (LIA) method for one context: the monitoring of personnel and their devices on organization systems and networks. It operationalizes, for that context, the three-part test defined in the Legitimate Interest Assessment (LIA) Template, and it is the privacy-analysis companion to the Workforce Network Monitoring Policy.
- Type
- Annex
- Version
- 0.1.4
- Date
- 2026-10-24
- Owner
- Data Protection Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Privacy
- Review frequency
- Annual and upon material privacy, employment-law, framework, or monitoring-technology change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Relationship to the parent policy and to the LIA template
- 5. Consent is presumptively not a valid lawful basis in employment
- 6. The three-part legitimate-interests test applied to monitoring
- 7. The right to object (GDPR Article 21)
- 8. Regime specifics: the EU and United Kingdom, and special-category data
- 9. Roles and responsibilities
- 10. Framework alignment
- 11. Limitations
Frameworks it maps to
- GDPR (EU)
- NIST Privacy Framework 1.0
- UK GDPR
- EDPB Guidelines 05/2020 (Version 1.1)
- EDPB Opinion 28/2024
- ISO/IEC 27001:2022
- NIST CSF 2.0
- CSA CCM v4.1
Related documents
- Legitimate Interest Assessment (LIA) Templateprivacy
- Workforce Network Monitoring Policysecurity
- Privacy and Data Governance Policyprivacy
- Consent Management Frameworkprivacy
- Presence Inference Limitations Standardprivacy
- Network Telemetry and DPI Controls Standardprivacy
- DPIA (Data Protection Impact Assessment) Templateprivacy
- Pseudonymization and Anonymization Standardprivacy
- Insider Risk Programme Frameworksecurity
Next
All Documents