---
title: "Employee Monitoring Policy Template"
description: "A monitoring policy in one Word document. Adapt the bracketed parts, tell the team before monitoring starts, and keep the signed acknowledgments."
---

# Employee Monitoring Policy Template

Workfolio team

October 9, 2026

A monitoring policy tells employees what is recorded about their work, why, who sees it, how long it is kept, and how to ask about it. This post gives you one as a Word document. Download it with the button under the policy below, replace each bracketed part with your company’s answer, and delete any part that does not apply.

Output is the final test of the work. Monitoring is one input to judging it. The policy should say what that input is for, and no more.

## What the policy holds

The policy covers who it applies to, what is monitored, why, when, who sees the data, how long it is kept, how an employee asks about it, and how changes reach employees. It ends with an acknowledgment the employee signs. The text below is the whole policy.

*Monitoring policy: type in the bracketed parts, and delete any that do not apply.*

**Employee Monitoring Policy**

<mark>\[Company name]</mark>. Effective <mark>\[date]</mark>.

**Purpose**

This policy says what <mark>\[Company name]</mark> monitors, why, when, who sees the data, how long it is kept, and how you can ask about it.

**Who it covers**

This policy covers <mark>\[who it covers, for example: every employee who works on a company device or account]</mark>.

**What we monitor**

We monitor <mark>\[each activity, for example: time in each application and website]</mark> on <mark>\[devices and accounts, for example: company laptops and the company email account]</mark>. <mark>\[If screenshots are taken, say how often and of what.]</mark>

We do not monitor <mark>\[what is excluded, for example: personal accounts and personal devices]</mark>.

**Why we monitor**

We monitor to <mark>\[purposes, for example: record hours for payroll and check that work is delivered]</mark>. We use the data for those purposes only.

**When we monitor**

Monitoring runs <mark>\[when, for example: during working hours on company devices]</mark>.

**Who sees the data**

Only <mark>\[roles, for example: your manager, the HR lead, and the payroll administrator]</mark> can see monitoring data.

**How long we keep it**

We keep monitoring data for <mark>\[period, for example: 90 days]</mark> from the day it was recorded, then delete it. Where a legal requirement sets a longer period for this data, we keep it for that period: <mark>\[the legal requirement and its period, or delete this sentence]</mark>.

**How to ask**

Ask what monitoring data we hold about you, or ask us to correct it, by writing to <mark>\[name or role]</mark> at <mark>\[email address]</mark>. We answer within <mark>\[number]</mark> working days.

**Changes**

We tell you in writing before a change to what we monitor takes effect, and we ask you to acknowledge the changed policy.

**Acknowledgment**

<mark>\[Any words a law where you operate requires this notice to contain.]</mark>

I have read this policy. I know what is monitored, why, when, who sees the data, how long it is kept, and how to ask about it.

Employee name: <mark>\[name]</mark>

Signature: <mark>\[signature]</mark> Date: <mark>\[date]</mark>

[Download the template](/templates/employee-monitoring-policy-template.docx)

## Name what the software records

Name each activity, each device or account, and how often any screenshots are taken, as the software records them. A line that says “all computer activity” tells an employee nothing.

[Workfolio’s employee monitoring page](/employee-monitoring-software) says “Track app and website usage, and overall productivity.” Its app view labels apps productive or neutral.

![Apps in use labelled productive or neutral, beside a donut chart of time by app](/_astro/app-usage.CJtxtGsr_Z1eqqXh.webp)

*Apps in use, labelled productive or neutral, beside a donut chart of time by app.*

Its screenshots recur: “Screenshot your employees active window recurringly, for up to every 1 minute interval.” It can blur images for privacy. Write the interval you set in What we monitor, and say whether captures are blurred.

![Blurred captures of Facebook, MS Word and Google Docs windows, each with the employee name, team and capture time](/_astro/blur-captures.8ec0uOsa_W0XQ5.svg)

*Blurred captures. The window contents are blurred; the app name, the employee's name, team and capture time stay readable.*

## Name each use the data serves

The policy says the data is used for the purposes it names, and for no others. Name each use below under Why we monitor.

Its page says “Get verified working hours for payroll.” The totals card splits worked hours into productive, unproductive and neutral time, and shows idle time and break time beside them, with the count of worked days.

![Totals card: worked hours, productive, unproductive, neutral, idle time and break time, with worked days](/_astro/totals-card.BSImm5Id_1We8tx.webp)

*The totals card. Idle time and break time are shown beside the worked time.*

Its page says “Appraise your team members using their work analytics.” The view for one person shows hours worked, productive hours and percentage, idle time, daily hour bars, and the apps and websites used.

![One person’s totals: worked and productive hours, productive percentage, idle time, daily hour bars, and the apps and websites used](/_astro/employee-totals.D_q6pk0j_ZUI3EN.webp)

*One person's totals and daily hour bars, with the apps and websites used.*

Its page says “Customize rules to filter employees who are working less, being idle or engaging in unproductive activities.” The rules violated panel lists the employees each rule flags.

![Rules violated panel: 3 violations, with the employees under Less working hours and Less productive hours](/_astro/rules-violated.CC6SKtZE_ZglRq2.webp)

*The rules violated panel. It lists the employees each rule flagged.*

A flag is a reason to look, not a finding. Check the work before you act on one.

## Name who can open the data

The overview dashboard shows team counts, risky users, top apps and websites, and top performing teams. Its menu lists Screenshots and Timelapse Videos.

![Overview dashboard: team counts, risky users, top apps and websites donut, apps in use and top performing teams](/_astro/overview-dashboard.B0wadTpj_Z1hEwz6.webp)

*The overview dashboard. Its menu lists Screenshots and Timelapse Videos.*

Name the roles that open each view, and no others. No screen shows which roles those are, so check your account before you name them.

## Write the parts no screen shows

No screen shows where the interval is set, which devices and accounts are included, how long data is kept, or how an employee asks about it. Write each one as you will run it, and check it before the policy goes out. Workfolio tracks only while the employee is clocked in.

Give the period in days, months, or years. “As long as needed” is not a period anyone can check. Name a person and an address that someone reads for questions.

## Check the rules where your employees work

The table gives the rule for each of the five places this post covers.

What each place's rule asks for

| Where | What the rule asks for |
| --- | --- |
| New York | Written notice upon hiring that telephone calls, email, and internet access or usage may be monitored. The employee acknowledges it in writing or electronically, and the notice is posted where employees can see it. The employee must be advised that these communications "may be subject to monitoring at any and all times and by any lawful means." ([Civil Rights Law § 52-c](https://www.nysenate.gov/legislation/laws/CVR/52-C*2)) |
| Connecticut | Prior written notice of the types of electronic monitoring that may occur, to each employee who may be affected. A conspicuous posting counts. The statute covers collection of information "on an employer's premises"; check whether that reaches a home worker's device. ([General Statutes § 31-48d](https://www.cga.ct.gov/current/pub/chap_557.htm)) |
| Delaware | An electronic notice on each day the employee uses employer email or internet, or a one-time notice that the employee acknowledges in writing or electronically. ([19 Del. C. § 705](https://delcode.delaware.gov/title19/c007/sc01/index.html)) |
| United States, federal | Interception is lawful where a party has given prior consent, unless it is for a criminal or tortious purpose. ([18 U.S.C. § 2511(2)(d)](https://www.govinfo.gov/content/pkg/USCODE-2024-title18/html/USCODE-2024-title18-partI-chap119-sec2511.htm)) |
| India | Until 13 May 2027, section 43A of the [Information Technology Act, 2000](https://www.indiacode.nic.in/bitstream/123456789/13116/1/it_act_2000_updated.pdf) and the [SPDI Rules 2011](https://prsindia.org/files/bills_acts/bills_parliament/2011/IT_Rules_2011.pdf) govern personal data. Under rule 5(1), a body corporate, or anyone acting for it, must get consent to the purpose in writing before collecting sensitive personal data, such as passwords, bank details, health conditions, or biometric data. Under rule 5(3), it must also take reasonable steps so that the person knows the information is being collected, why, who will receive it, and the name and address of the agencies that collect it and keep it. From 13 May 2027, the duties in the [Digital Personal Data Protection Act, 2023](https://www.trai.gov.in/sites/default/files/2024-09/DPDT_11082024.pdf) begin, under the [commencement notification](https://egazette.gov.in/WriteReadData/2025/267647.pdf). Its section 7 permits a Data Fiduciary to process personal data for the uses it lists, including "the purposes of employment or those related to safeguarding the employer from loss or liability". Its section 8(7) requires the data to be erased once "the specified purpose is no longer being served". |

Where New York applies, put its sentence in the acknowledgment part in place of the bracket. Check the rule where your employees work before you use the policy. This post cites no law for any other place.

## Tell the team first

Tell the team before monitoring starts, in writing, and give them the policy. Say what starts, on which devices and accounts, from what date, and why. Answer each question before the first day, in the policy or in a reply.

Have each employee sign the acknowledgment part, and keep the signed copy. Where New York applies, also post the notice where staff can see it. Do not fill in an employee’s signature or date for them.

## Keep it current

Review the policy when the software changes, when a monitored activity changes, and when a rule that applies to you changes. Tell employees in writing before a change takes effect, and have each person acknowledge the new version. A signed page does not cover a later version. Keep each signed acknowledgment with the version it covers, and answer each request about monitoring data within the time the policy gives.

Previous Blog :-

[Can you use monitoring data to discipline or dismiss an employee? Workfolio team October 9, 2026](/blog/can-you-use-monitoring-data-to-discipline-or-dismiss-an-employee)

Next Blog :-

[How to pay remote hourly staff and contractors from tracked time Workfolio team October 9, 2026](/blog/how-to-pay-remote-hourly-staff-and-contractors-from-tracked-time)

## Get Started with Workfolio Today!

Unlimited Features. No Commitment. Free to Try.

[Start your 14 day free trial](https://app.getworkfolio.com/signup/pro)

## What Our Users Says

> Workfolio has transformed our team’s productivity! The ease of tracking and reporting has streamlined our workflow and saved us significant time and money.

Raha West

Operations Manager at TechCorp
