AI Staff Monitoring in Australia: The Rules for Employers

AI that watches your staff is now cheap, easy, and one click from a legal problem. Keystroke loggers, screen-recorders, GPS trackers that score a technician's day, tools that read a worker's tone on a call — all of it is sold to small businesses as a productivity upgrade. In Australia, switching any of it on without notice and consultation doesn't just cost you morale. One rollout can breach work health and safety duties, state surveillance law, and your consultation obligations at the same time.

The regulators made the position explicit this year. Safe Work Australia's 2026 guidance on AI and digital technologies confirms these tools are a work health and safety matter — a person conducting a business or undertaking must manage the risks they create so far as is reasonably practicable, the same as any other hazard. And a tripartite forum of government, employers and unions has named workplace AI safety a national priority, with worker surveillance squarely in frame.

Start with the health-and-safety duty, because it's the one owners miss. Since 2024, the model Managing Psychosocial Hazards at Work Code of Practice has named "intrusive surveillance" as a recognised psychosocial hazard — and it lists exactly the features most AI monitoring tools ship with: keyboard and activity tracking, monitoring emails and files, tracking calls and movements, and GPS monitoring for performance purposes. If your tool does any of these, you have a reasonably foreseeable hazard you're legally required to identify, assess and control.

Then there's surveillance law, which is state-based and older than the AI. Under the NSW Workplace Surveillance Act, you must give employees at least 14 days' written notice before overt computer, camera or tracking surveillance begins — spelling out what's monitored, how, and when it starts. Covert monitoring is tightly restricted and generally needs a magistrate's authority. Other states and territories differ in the detail but land on the same principle: monitoring must be lawful, notified, and transparent. And introducing a system that materially changes how people work triggers a genuine consultation obligation — before it goes live, not after the complaints.

Want to know what this means for your business? We'll map it in one call.

This isn't a big-corporate problem you can wave off. The tools are aimed at you. A plumbing firm fits GPS to the vans and switches on "performance" scoring. An accounting practice rolls out software that logs active hours and flags "idle" time. A field-services business turns on an AI that transcribes and sentiment-scores every customer call. Each of these is lawful — done properly. Each is a liability done quietly.

The exposure compounds because a single rollout can trip three rules at once. Skip the 14 days' notice and you've breached surveillance law. Skip the psychosocial risk assessment and you've breached a WHS duty — the same duty that already makes your scheduling software a safety issue in NSW. Skip consultation and you've handed a worker a Fair Work claim, on top of the Fair Work exposure that already comes with letting AI make management decisions. If you can't say how many of your existing tools already cross into "intrusive surveillance", map where AI already touches your people before you add another.

There's a commercial reason to get this right beyond the fines. The evidence on heavy-handed monitoring is unflattering: research summarised by workplace-safety specialists finds electronic monitoring tends to lift stress and dent job satisfaction while showing no measurable gain in performance. In a labour market where a good tradesperson or a senior accountant can leave on a fortnight's notice, monitoring that reads as distrust is a retention problem you're paying to create.

Treat the rollout as a project, not a settings toggle. Inventory what you already run and what each tool actually captures — most owners are surprised how much their job-management and comms software already logs. For anything that reads as intrusive surveillance, do the psychosocial risk assessment the WHS law requires, give the written notice your state demands, and consult your team before go-live rather than after. Then apply the test the regulators keep returning to — necessity, proportionality, transparency: monitor only what a real business need justifies, only as much as that need requires, and never in secret. Safe Work Australia's guidance is free and tells you the duties exist; it won't audit your specific tools, write your notice, or design a rollout your team will accept. That last stretch — from knowing the rule to being compliant and keeping your people — is the work.

Key takeaways

Common questions

Related notes

Not sure which of your tools already monitor your team?

Most owners underestimate how much their job-management, comms and scheduling software already logs — and where that tips into regulated surveillance. A short call maps what you're running, what the law requires, and how to roll out monitoring your team will actually accept. Book a call.