Employee monitoring law · Brazil
The ANPD is sceptical of legitimate interest in employment. Transparency carries the weight.
Lead with transparency rather than legitimate interest. The ANPD is sceptical of it in employment.
- Region
- Latin America
- Instruments
- 3 governing
- Employer duties
- 3 listed
- Last reviewed
- August 22, 2026
Brazil · what the law requires
Notice and proportionality
The LGPD applies fully to employee data, and legitimate interest under art. 7(IX) is the basis most employers reach for. But the ANPD has signalled that employees are in a vulnerable position without effective means of objecting, which weakens legitimate interest as a justification and makes documented transparency and proportionality the load-bearing parts. Under the CLT, monitoring of employer-provided equipment is broadly accepted by the labour courts where employees were told in advance.
- Tell employees before, not afterThe fact of monitoring, its purpose and the justification must be communicated. Labour courts distinguish sharply between disclosed and undisclosed monitoring.
- Do not lean on legitimate interest aloneThe ANPD's position on employee vulnerability means a legitimate interest assessment needs to be genuinely reasoned, and narrow.
- Employer equipment onlyMonitoring personal devices or private communications is a materially different and much weaker position.
- Proof Ledger
- Outcomes
- Certificates
- Audit log
- Data access
- Disputes
- Data egress
- Export
- What We See
- Controls
- AKAria K. viewed screenshotsLena M. · 3 capturesScreen capturemacOS · London09:42a91f…4c023d7b…91ee
- JMJon M. exported time reportDesign team · CSVmacOS · Berlin09:313d7b…91ee77c5…0ba4
- SDSara D. opened capture reviewRavi P. · one flagged frameWindows · Manchester09:1877c5…0ba4e208…5f13
- wm_live_7f2… read /v1/deliverablesScoped key · read onlyPublic API · allowlisted IP08:57e208…5f13b64a…2d90
- LMLena M. viewed her own recordWhat We SeemacOS · London08:44b64a…2d901cf9…8e77
- AKAria K. changed capture policyBlur set to alwaysmacOS · London08:261cf9…8e7705d2…ae31
The instruments, and which control answers each duty
- Lei Geral de Proteção de Dados: Lei 13.709/2018. Legal bases including legitimate interest, transparency, purpose limitation, and data subject rights. Enforced by the ANPD.
- Consolidação das Leis do Trabalho: Decreto-Lei No. 5.452/1943 (CLT). The employer's directive power over employer-provided equipment, as developed by the labour courts.
- Federal Constitution: art. 5, X and XII. Inviolability of privacy and of the secrecy of communications, the constitutional backdrop.
No product does this part
What you must still do yourself
Compliance is a property of your deployment. These are the steps in Brazil that no vendor can complete on your behalf, and skipping them is what turns a rollout into a finding.
- 1Write the legitimate interest assessment, and make it specific rather than boilerplate.
- 2Communicate purpose and justification to employees before deployment.
- 3Appoint the encarregado (DPO) and publish the contact.
- If you get it wrongANPD fines up to 2% of Brazilian group turnover per infraction, capped at BRL 50 million, plus publicising the infraction and blocking or deleting the data.
Verify the claim
Every control above, on the page that describes it
Sources and review date
Last reviewed August 22, 2026This is a summary of how employee-monitoring rules generally work in this jurisdiction, written to help you scope a rollout and brief your own advisers. It is not legal advice, it is not a substitute for it, and law changes. Verify against the primary sources listed and take local counsel before you deploy.
Nearby jurisdictions
Monitoring law elsewhere in Latin America
- MexicoThe privacy notice is the central legal instrument, and it must be specific.
- PolandThe Labour Code lists the permitted purposes, and productivity is not one of them.
- United KingdomThe ICO's 2023 monitoring guidance is the operative document, and it expects a DPIA.
- IrelandThe DPC accepts a legitimate business interest, and then tests proportionality hard.
- DenmarkSix weeks' notice under the collective agreement framework, and a strict purpose test.
- United States (federal)Federal law is permissive; the real constraints are state law and the NLRA.
Point it at one team for a week.
Create the account, put the agent on a handful of desks, and leave it alone. On Friday you read the week instead of reconstructing it: hours against their projects, focus and idle per person, and the timesheets already filled in.
Free for two seats. No card, and no sales call to sit through.