Company allegedly used monitoring software to turn staff’s computers into listening devices | 7.30

Key Concepts

• Productivity Monitoring Software: Software designed to track and record employee activity, including keystrokes, screen activity, and audio.
• Terrormind: The specific productivity monitoring software used by Safeetrack, capable of recording video calls, conversations within a radius of the device, and screen activity.
• Privacy Act: Legislation governing the collection, use, and disclosure of personal information, with higher standards for sensitive information.
• Surveillance Devices Act (Victoria): State-specific legislation regulating the use of surveillance devices, requiring disclosure when employees are monitored.
• Consent: The legal requirement for employees to agree to the monitoring of their information.
• Disclosure: The obligation for employers to inform employees about the nature and extent of monitoring.
• Cognitive Privacy: The right to keep one's thoughts and private conversations private.
• Unfair Dismissal Claim: A legal claim brought by an employee who believes they were wrongfully terminated.
• Work Cover: A government agency responsible for workers' compensation and workplace safety.
• Fair Work: The national workplace relations tribunal in Australia.
• ASICH: Likely referring to the Australian Security Intelligence Organisation, though its relevance here is unclear from the transcript.

Case Study: Safeetrack and the Terrormind Software

This summary details a case involving Safeetrack, a remote-working compliance company, and its use of productivity monitoring software called "Terrormind," which led to significant employee anxiety and legal challenges.

Employee Concerns and Legal Action

• Initial Discovery: Employees working from home discovered that their late-night calls, even on company laptops, were being recorded. This led to significant anxiety and fear about the extent of their employer's knowledge.
• Client Case: In June, employment lawyer Adam Foster was contacted by a woman concerned that her work computer was being used to spy on her and colleagues. She described employees feeling fearful about the software's capabilities and its potential impact on personal relationships, with one employee even isolating themselves in a spare room with the door shut.
• Unfair Dismissal Claim: The employee lodged a claim with Work Cover in June and was subsequently terminated in July for performance issues. Adam Foster represented her in an unfair dismissal claim at Fair Work, which resulted in a confidential settlement with Safeetrack.
• Safeetrack's Operations: Safeetrack is a compliance company with approximately 75 remote employees. The irony of a compliance company using such surveillance was noted.

Implementation and Capabilities of Terrormind

• Town Hall Announcement: In February, Safeetrack informed employees of its intention to use productivity monitoring software, which could be activated between 9:00 a.m. and 5:00 p.m.
• Software Deployment: In April, the software, named "Terrormind," was installed on company computers for an 8-week trial period on a small number of staff.
• Surveillance Capabilities: Terrormind possessed a broad range of surveillance capabilities, including:
  • Recording of video calls (e.g., Teams, Zoom).
  • Recording of conversations within a certain radius of the device.
  • Remote screen recording of employee activity.
  • Capture of audio.
• Demonstration: Toya Chinquay, an associate professor of communications at Deakin University, demonstrated Terrormind's capabilities. She showed how the software could remotely screen record and capture audio, providing a "forensic" and "deep dive" into worker activity with incremental timestamps. In a live demonstration, Chinquay could clearly hear and even the breathing of the demonstrator in another room, highlighting the software's ability to meticulously record sounds and conversations. She confirmed it could be categorized as a "listening device."

Legal and Ethical Arguments

• Lack of Proper Consent and Disclosure: Adam Foster argued that Safeetrack failed to obtain proper consent from its workforce before deploying the software. The company did not provide sufficient detail about how employees would be monitored or the specific functions of the software.
• Privacy Act and Surveillance Laws: The case highlighted two core legal issues: transparency and consent, and the challenges of remote work surveillance. The collection of sensitive information by Terrormind subjected it to higher standards under the Privacy Act and the Surveillance Devices Act in Victoria.
• Disclosure Requirements: Under both the Privacy Act and the Surveillance Devices Act in Victoria, there is a requirement for disclosure when employees are being monitored.
• Safeetrack's Defense: Safeetrack stated that existing employment agreements already covered the monitoring of work computers, including video and audio. They denied the employee was terminated due to her complaint.
• Concerns about Private Conversations: A company spokesperson acknowledged that a staff member raised concerns about audio recording potentially capturing private conversations at home. While administrative staff tested this and found no such recordings, Safeetrack "out of an abundance of caution" limited and then turned off the audio capability.
• Employee Concerns Acknowledged: Safeetrack admitted that while the monitoring plans were communicated and accounted for in employment agreements, the software's use caused concerns among some staff. They stated these concerns were taken seriously and the software was discontinued.

Broader Implications and Expert Opinions

• Patchwork of Surveillance Laws: Dudley Nella, a privacy technology and cybersecurity lawyer, pointed out that surveillance laws are inconsistent and vary by state, making it difficult for employers to navigate compliance.
• Employer Obligations vs. Employee Privacy: Inis Willox from the Australian Industry Group noted that while employers have obligations regarding productivity, work health and safety, and industrial law, there's a need to respect employee privacy. He stated that sensible employers don't want to "snoop around" in employees' homes, viewing it as invasive.
• Right to Cognitive Privacy: The importance of the right to cognitive privacy, where thoughts and private conversations are considered one's own, was emphasized.
• Advice for Employers: The key takeaway for employers was to "do it right" by ensuring policies adequately describe the software used, and crucially, to disclose monitoring practices to employees.

Investigations and Current Status

• Multiple Complaints: At least three other Safeetrack employees had expressed concerns about the technology to Fair Work, Work Cover, and ASICH.
• Police Investigation: Following complaints from former employees, Victoria Police were investigating whether Safeetrack had breached state surveillance laws. No charges had been laid at the time of the transcript.

Conclusion

The Safeetrack case underscores the complex legal and ethical landscape of employee monitoring in the context of remote work. It highlights the critical importance of transparency, explicit consent, and adherence to privacy and surveillance laws. The use of sophisticated software like Terrormind, capable of extensive data collection, necessitates clear communication and robust legal compliance to avoid infringing on employee rights and fostering an environment of fear and distrust. The case serves as a cautionary tale for employers regarding the implementation of such technologies.