In Ontario, businesses employing 25 or more workers must have a written Electronic Monitoring Policy. This policy must transparently disclose if, how, and why the company tracks employee activities, such as keystrokes, GPS locations, or screen time.
As technology integrates deeper into our daily operations, the ability to track employee productivity has never been easier. However, with this power comes significant legal responsibility. The Ontario government, through updates to the Employment Standards Act (ESA), has mandated strict transparency requirements for companies that monitor their workforce digitally. This initiative aims to protect workers’ privacy rights while allowing businesses to maintain operational security and efficiency.
Whether you run a logistics fleet in Hamilton relying on GPS tracking, or a tech startup in Toronto utilizing keystroke logging, hiding your monitoring practices is no longer an option. Failing to implement a compliant policy can result in Ministry of Labour investigations and substantial fines. This guide explains the step-by-step process of drafting and implementing a legal electronic monitoring policy in your Ontario workplace.
Step-by-Step Process for Implementing a Monitoring Policy
Compliance requires more than just downloading a generic template from the internet. Your policy must reflect the actual technological realities of your specific business. Most employers consult with an Ontario employment lawyer to draft a policy that meets the ESA requirements without overly restricting management rights.
Step 1: Determine Your Employee Headcount
The first critical step is assessing if the law applies to you. You must count your employees on January 1 of the current year. If you have 25 or more employees across all your Ontario locations (e.g., combining your London and Mississauga offices), the mandate applies to you. This count includes full-time, part-time, casual, and probationary employees. If you hit the 25-employee threshold, you must have your policy in place by March 1 of that same year.
Step 2: Conduct a Technology Audit
Before writing the policy, you need to know exactly what your company is tracking. Sit down with your IT department and review all software and hardware. Are company cell phones tracking GPS locations? Do corporate laptops monitor idle screen time? Are building access keycards logging entry and exit times? You must compile a comprehensive list of all electronic monitoring methods currently in use.
Step 3: Draft the Written Policy
The ESA dictates specific elements your policy must contain. It must state clearly whether you electronically monitor employees. If you do, you must detail exactly how the monitoring occurs (e.g., “We use GPS tracking on delivery vehicles”) and in what circumstances it occurs (e.g., “During scheduled working hours”). Most importantly, you must state the purposes for which the information obtained may be used, such as evaluating performance, ensuring safety, or disciplining employees.
Step 4: Distribute the Policy to All Staff
Drafting the policy is not enough; you must distribute it. Employers have 30 days from the day the policy is established or revised to provide a written copy to all current employees. For new hires, you must provide the policy within 30 days of their start date. Keep records of when and how the policy was distributed (e.g., via a company-wide email with read receipts) to prove compliance.
How Much Does it Cost in Ontario?
Ensuring compliance with the electronic monitoring laws generally involves administrative time and potential legal fees, which are far cheaper than facing government penalties.
- Drafting Costs: If you hire an employment lawyer or HR consultant to draft a customized, legally compliant policy, expect to pay between $1,000 and $3,500 CAD.
- Software Costs: While not a direct legal fee, upgrading your HR software to properly distribute policies and track employee acknowledgements might cost a few hundred dollars annually.
- Penalties for Non-Compliance: If a Ministry of Labour inspector finds you do not have a compliant policy, standard ESA fines apply. A first offence typically costs $250 CAD multiplied by the number of affected employees, which can escalate quickly into thousands of dollars for larger companies.
How Long Does the Process Take?
📅 The timeline for this process is strictly governed by the calendar year, making proactive planning essential.
- Assessment Date: The headcount assessment is always January 1.
- Implementation Deadline: The policy must be in place by March 1 of the same year.
- Distribution Window: You must provide the policy to existing employees within 30 days of drafting it, and to new employees within 30 days of their hiring.
- Retention Period: Employers must retain a copy of every electronic monitoring policy for three years after it ceases to be in effect.
Required Elements in the Policy
| Requirement | Description |
|---|---|
| Statement of Monitoring | A clear “Yes” or “No” declaration of whether the company monitors employees electronically. |
| Description of Methods | Specific details on the tools used (e.g., internet traffic logs, keystroke trackers, telematics). |
| Purpose of Data Use | How the company uses the data (e.g., client billing, theft prevention, performance reviews). |
Frequently Asked Questions (FAQ)
Does this law give employees the right not to be monitored?
No. The ESA update is strictly about transparency, not establishing a new right to privacy. Employers are still legally permitted to monitor their staff, provided they transparently disclose the practices in the written policy.
Does the policy apply to employees using personal devices for work?
Yes, if the employer has installed tracking software (like Mobile Device Management profiles) on an employee’s personal phone or laptop for work purposes, this must be disclosed in the policy.
What if we only monitor our staff occasionally to prevent theft?
Even occasional or random monitoring must be explicitly outlined in the policy. You must state the circumstances under which the monitoring may occur, such as during internal investigations for suspected misconduct.
Can an employee sue us if they do not agree with the policy?
An employee cannot file a standard ESA complaint simply because they dislike the monitoring. However, if the monitoring violates other laws, such as the common law tort of intrusion upon seclusion, they may have grounds for civil litigation. It is always best to consult a lawyer to balance business needs with privacy.
Leave a Reply