Right to Disconnect and Workplace Monitoring: What Australian, EU and UK Rules Mean for Agency Time Tracking

Digital time tracking raises new questions for professional services agencies and consultancies working across countries. The spread of disconnection rights, combined with data protection rules, has made background employee monitoring a growing source of regulatory risk.

Historically, agency leaders used background activity monitoring, keystroke logging and automated screenshots to capture billable hours and check remote productivity. Laws in this area are changing. Australia now gives employees a right to refuse out-of-hours contact unless refusing is unreasonable. Several EU countries have their own disconnection or rest-period rules. In the UK, there is no statutory right to disconnect, but data protection law and ICO guidance shape how employers can monitor staff.

Software that records device activity in the background, logs idle status or sends automatic after-hours notifications can sit uneasily with these rules, and can raise data protection questions. Depending on the country, the consequences can include disputes before employment tribunals, orders from those tribunals, civil penalties for breaching such orders, and data protection enforcement.

What Australia, the EU and the UK Have Put in Place

Australia

The Fair Work Legislation Amendment (Closing Loopholes No. 2) Act 2024 received Royal Assent on 26 February 2024. It added a right to disconnect to Part 2-9 of the Fair Work Act 2009, giving national system employees a right to refuse to monitor, read or respond to contact, or attempted contact, from their employer or from a third party about their work, outside their working hours, unless the refusal is unreasonable. Section 333M(3) lists matters to consider when deciding whether a refusal is unreasonable. They include the reason for the contact, how it is made and how disruptive it is, any compensation for being available, the employee's role and level of responsibility, and their personal circumstances. The right is a workplace right under the general protections, so employers cannot take adverse action against staff for using it. The right applies to employers with 15 or more employees from 26 August 2024, and to small businesses from 26 August 2025.

European Union

There is no EU-wide right-to-disconnect law. The European Parliament called for a directive in January 2021, and social-partner negotiations on it failed in November 2023. The European Commission then consulted the social partners on telework and the right to disconnect in two stages, ending in October 2025. The topic is now part of the Commission's consultations on a proposed Quality Jobs Act, which the Commission plans to propose by the end of 2026. As of October 2026, no EU-wide law has been proposed. In the meantime, national rules apply:

• France requires employers in companies with representative union sections to negotiate how employees can exercise their right to disconnect, usually as part of periodic workplace negotiations. Where no agreement is reached, the employer must issue a charter after consulting the works council (Code du travail, Art. L.2242-17).
• Spain gives workers a right to digital disconnection and requires employers to set an internal policy on it, after hearing worker representatives (Organic Law 3/2018, Art. 88). The law's data protection sanctions regime does not extend to Art. 88.
• Luxembourg requires employers whose staff use digital tools for work to set up a disconnection scheme (law of 28 June 2023). The fine provision took effect three years after the law was published on 30 June 2023, so since mid-2026 the labour inspectorate (ITM) can fine employers that do not put one in place after being ordered to.
• Germany has no specific disconnection law, but the Working Hours Act (Arbeitszeitgesetz) requires an uninterrupted rest period of at least 11 hours. Whether a brief work email or call during that time interrupts the rest period is debated, and German courts have treated very minor activity differently from real work.

United Kingdom

The UK has no statutory right to disconnect. Monitoring of workers is governed by the UK GDPR, the Data Protection Act 2018 and the ICO's "Monitoring workers" guidance (October 2023). The ICO says consent is not usually appropriate for monitoring at work, because of the imbalance of power between employer and worker. Employers usually need another lawful basis, such as legitimate interests. That means being clear about the purpose, showing the monitoring is necessary, and checking it does not override workers' interests. The ICO also asks employers to choose the least intrusive option. The ICO has said this guidance is under review following the Data (Use and Access) Act.

Enforcement at a Glance

Summary for general information only, as at October 2026. Amounts change; check the official source for each country.

Where Background Tracking Can Create Exposure

Some monitoring tools run in the background to log window activity, take screenshots and calculate idle time. This approach can create exposure in four ways:

1. After-hours contact — in Australia, employees can refuse to monitor, read or respond to out-of-hours contact or attempted contact unless that is unreasonable. Tools that send automatic prompts or status checks after hours can create the kind of contact employees may refuse, and can lead to workplace disputes.
2. Data minimisation — automatic screenshots and activity logs can capture personal information, such as banking, health or private messages, if a work device is used outside hours. That can raise issues under the GDPR principle that personal data should be limited to what is necessary (Article 5(1)(c)).
3. Pay records — activity logged outside paid hours can become relevant in disputes about whether all hours worked were paid.
4. Trust — in a 2020 CIPD survey, 73% of employees said introducing workplace monitoring would damage trust between workers and employers.

What Lower-Risk Time Tracking Looks Like

Reducing that exposure without losing billable-hour accuracy starts with time that people record themselves. That is the model Wisertrack is built around: "Accountability without the anxiety."

In Wisertrack, time is entered voluntarily — by a timer the person starts, or by a calendar entry for past or future dates. Only one timer runs at a time, and it stops at midnight or on logout, so nobody bills an 18-hour day by mistake. There is no keystroke logging, screenshots or screen recording. The optional Wisertrack Companion browser extension is installed and controlled by the member, shows a visible indicator while it is on, and sends activity to Wisertrack only when the member submits it.

No tool makes an agency compliant on its own: that depends on your policies, your contracts and how you use the software. What the tool can do is avoid collecting what you don't need.

What to Check in Any Time Tracker

Steps Agencies Commonly Take

1. Review the tools in use — check for background processes, keystroke logging, screenshots or idle checks.
2. Favour user-started time recording over passive tracking.
3. Write down working hours and contact expectations in workplace policies.
4. Set up internal ways to resolve disputes before they reach a tribunal or regulator.
5. Assess data protection risk — consider a Data Protection Impact Assessment for any tracking tool. Under GDPR Article 35 one is required where processing is likely to be high risk, and the ICO recommends one for most worker monitoring.
6. Reflect working-hour boundaries in client agreements, such as retainers and SLAs.

FAQ

Does time tracking software break right-to-disconnect laws?

Not in itself. Questions can arise when software sends automatic after-hours prompts, records device activity outside working hours, or collects more personal data than needed. Software that records time only when a person starts a timer, and collects nothing when it is off, is far less likely to raise these questions.

What are the penalties under Australia's right to disconnect?

Disputes go first to the workplace and then to the Fair Work Commission, which can make orders. Breaching one of those orders (s.333Q) can attract a civil penalty of up to 60 penalty units (s.539, item 10E). From 1 July 2026 the Commonwealth penalty unit is $364, so that is up to $21,840 for an individual, and a court can impose up to five times that on a company (s.546(2)(b)). Taking adverse action against someone for using the right can also breach the general protections. The Fair Work Ombudsman publishes current amounts.

Is background employee monitoring legal under UK GDPR and ICO guidance?

It can be, but it is closely regulated. The ICO says consent is not usually appropriate at work. Employers need a lawful basis, a clear purpose, and monitoring that is necessary and as unintrusive as possible. For higher-risk monitoring, such as keystroke logging, the ICO says employers must carry out a data protection impact assessment first.

Is there an EU right to disconnect in 2026?

There is no EU-wide right-to-disconnect law yet. The Commission plans to propose a Quality Jobs Act by the end of 2026, which may address it. Meanwhile, France, Spain and Luxembourg have national disconnection rules, and countries such as Germany rely on working-time and rest-period limits. Each has its own enforcement regime.

Can an employee ignore work contact after hours?

In Australia, employees can refuse to monitor, read or respond to work contact outside their working hours unless the refusal is unreasonable (Fair Work Act s.333M). That right is about contact, not monitoring software. Under the GDPR and UK GDPR, people can object to some processing based on an employer's legitimate interests, but that right is not absolute.

The Takeaway

As disconnection and data protection rules develop, background monitoring brings more legal and trust questions than it used to. Many agencies are reviewing their tools and favouring transparent, user-started time tracking.

Sources

1. Fair Work Act 2009, compilation of 7 July 2026 — Federal Register of Legislation
2. Fair Work Ombudsman — Right to disconnect
3. DEWR — Right to disconnect fact sheet (PDF)
4. Commonwealth penalty unit increase from 1 July 2026
5. European Parliament legislative train — right to disconnect
6. European Commission — Quality jobs for companies and workers
7. Code du travail Art. L.2242-17 — code.travail.gouv.fr
8. Code du travail Art. L.2243-1 — code.travail.gouv.fr
9. Organic Law 3/2018 (Spain), consolidated text — BOE
10. Loi du 28 juin 2023 (right to disconnect), Mémorial A n° 344 — Legilux
11. Arbeitszeitgesetz §5 — gesetze-im-internet.de
12. Arbeitszeitgesetz §22 — gesetze-im-internet.de
13. ICO — Monitoring workers
14. ICO — Maximum fines under UK GDPR and DPA 2018
15. GDPR (Regulation (EU) 2016/679) — EUR-Lex
16. CIPD — Workplace technology: the employee experience (2020)