Employee monitoring law · Netherlands
Works council consent, and the regulator treats screenshots as disproportionate by default.
Obtain works council consent, and expect continuous screen capture to fail the proportionality test.
- Region
- Europe
- Instruments
- 3 governing
- Employer duties
- 3 listed
- Last reviewed
- August 22, 2026
Netherlands · what the law requires
Prior approval required
Two things stack here. The Works Councils Act gives the council a consent right, not a consultation right: over any system for monitoring attendance, behaviour or performance, in organisations of 50 or more with a council. Separately, the Autoriteit Persoonsgegevens has taken the position that keystroke logging, screenshot capture and activity tracking are disproportionate as a rule, absent a documented concrete risk. That makes the Netherlands one of the hardest places in Europe to run continuous capture, whatever the council agrees.
- Works council consentRequired before introducing, changing or withdrawing a monitoring arrangement. A decision taken without consent can be voided by the council.
- Justify capture against a concrete riskThe regulator's default is that screen capture is excessive. Deploying it means being able to point at a specific, documented risk rather than a general desire for visibility.
- Choose the least intrusive option that worksWhere aggregate or interval data would answer the question, capturing screens will not survive a proportionality challenge.
- Proof Ledger
- Outcomes
- Certificates
- Audit log
- Data access
- Disputes
- Data egress
- Export
- What We See
- Controls
- AKAria K. viewed screenshotsLena M. · 3 capturesScreen capturemacOS · London09:42a91f…4c023d7b…91ee
- JMJon M. exported time reportDesign team · CSVmacOS · Berlin09:313d7b…91ee77c5…0ba4
- SDSara D. opened capture reviewRavi P. · one flagged frameWindows · Manchester09:1877c5…0ba4e208…5f13
- wm_live_7f2… read /v1/deliverablesScoped key · read onlyPublic API · allowlisted IP08:57e208…5f13b64a…2d90
- LMLena M. viewed her own recordWhat We SeemacOS · London08:44b64a…2d901cf9…8e77
- AKAria K. changed capture policyBlur set to alwaysmacOS · London08:261cf9…8e7705d2…ae31
The instruments, and which control answers each duty
- GDPR: Regulation (EU) 2016/679. Sets the floor everywhere in the EEA: a lawful basis, purpose limitation, data minimisation, transparency and a DPIA where monitoring is high risk. National law below adds to this, never subtracts.
- Works Councils Act: WOR art. 27(1)(l). Consent right over any arrangement for monitoring attendance, behaviour or performance. A decision taken without it is voidable.
- Dutch DPA guidance: Autoriteit Persoonsgegevens. Treats keystroke logging, screenshot monitoring and activity trackers as disproportionate unless a concrete, documented risk justifies them.
No product does this part
What you must still do yourself
Compliance is a property of your deployment. These are the steps in Netherlands that no vendor can complete on your behalf, and skipping them is what turns a rollout into a finding.
- 1Obtain works council consent before deployment, and again before you change the configuration.
- 2Document the concrete risk if you intend to enable screen capture, and seriously consider not enabling it here.
- 3Run a DPIA; systematic employee monitoring meets the high-risk threshold.
- If you get it wrongGDPR fines up to €20m or 4% of turnover, plus nullification of the monitoring decision by the works council and orders from the AP to cease processing.
Verify the claim
Every control above, on the page that describes it
Sources and review date
Last reviewed August 22, 2026This is a summary of how employee-monitoring rules generally work in this jurisdiction, written to help you scope a rollout and brief your own advisers. It is not legal advice, it is not a substitute for it, and law changes. Verify against the primary sources listed and take local counsel before you deploy.
Nearby jurisdictions
Monitoring law elsewhere in Europe
- PortugalThe Labour Code prohibits remote means used to monitor employee performance.
- SwitzerlandSystems for monitoring worker behaviour are prohibited by the labour ordinance.
- FranceConsult the CSE first. Skipping it is the criminal offence of obstruction.
- BelgiumCBA 81 governs electronic monitoring and binds every private-sector employer.
- SpainDigital rights are written into the data protection act, and reps must be involved.
- FinlandA dedicated working-life privacy act, and a necessity test read very narrowly.
Point it at one team for a week.
Create the account, put the agent on a handful of desks, and leave it alone. On Friday you read the week instead of reconstructing it: hours against their projects, focus and idle per person, and the timesheets already filled in.
Free for two seats. No card, and no sales call to sit through.