Employee monitoring laws in Austria
Yes, but Austria is stricter than Germany on paper: where a monitoring measure touches human dignity, the works council's agreement is a condition of validity, and without it the measure is legally ineffective rather than merely contestable.
Who has to agree before you start
The fact that decides the timeline, and the one that differs most between countries.
The workforce can say no
Control measures affecting human dignity require the works council's consent through a Betriebsvereinbarung under ArbVG § 96(1)(3). This is the strongest form of co-determination in Austrian labour law: consent cannot be substituted by arbitration, and a measure introduced without it is void.
A works council or union must agree before monitoring starts. Plan these first and plan them long: the agreement is a negotiation, not a form, and in Austria and the Netherlands a rollout without it is void or voidable rather than merely irregular.
GDPR, the Datenschutzgesetz (DSG), and the Arbeitsverfassungsgesetz (ArbVG), which subjects control measures and technical control systems to a mandatory works agreement.
The law that applies in Austria
Named so you can check us, and so your own counsel has somewhere to start.
| Instrument | What it requires |
|---|---|
| ArbVG § 96(1)(3) | Makes the introduction of control measures and technical systems for monitoring employees conditional on the works council's agreement, where those measures affect human dignity. Consent is mandatory and cannot be replaced by a decision of a conciliation body. |
| ArbVG § 96a(1)(1) | Covers systems that automatically collect employee personal data beyond basic role and qualification information; these require a works agreement, though here a conciliation body can substitute for the council's consent. |
| DSG § 11 and GDPR Art. 6(1)(f) | Austrian data protection law supplements the GDPR; the practical lawful basis for workplace monitoring is legitimate interests, documented in a balancing test, with consent generally unavailable because of the employment power imbalance. |
How a rollout is done here
- Determine which limb applies. If the system can observe how individuals work, plan for § 96(1)(3) and mandatory consent rather than the softer § 96a route.
- Draft the Betriebsvereinbarung before deployment, covering purpose, data categories, retention, access and the uses expressly excluded.
- Run a DPIA for systematic monitoring and record the legitimate-interests balancing test.
- Inform employees individually under GDPR Arts. 13–14 in addition to the collective agreement.
- Revisit the agreement whenever the capture configuration changes — the consent attached to a described system.
What gets a rollout refused
- Assuming German practice transfers. Austria's § 96 consent is a validity condition, so there is no equivalent of pressing on while negotiations continue.
- Deploying to an Austrian entity under a group-wide policy without a local works agreement.
- Relying on individual employee consent in a company that has a works council; the collective route is the one the statute prescribes.
- Treating 'human dignity' as a high bar. Austrian case law reads it broadly, and systems that record individual working behaviour over time will usually engage it.
Monitoring staff in Austria — questions
What happens if we deploy without the works agreement?
Under ArbVG § 96 the measure is legally ineffective. In practice that means the works council can require it to be stopped, and evidence derived from it is vulnerable in any dispute where it is relied on.
Is there a route if the works council simply refuses?
For § 96(1)(3) measures, no — consent is mandatory and cannot be replaced by a conciliation body, which is what makes Austria stricter than Germany here. For § 96a systems, a conciliation body can substitute for consent. Which limb applies depends on what the system actually does.
Does a company without a works council need any agreement?
There is no council to consent, so ArbVG § 96 does not bite, but the GDPR obligations are unchanged: a documented lawful basis, a DPIA for systematic monitoring, transparency under Arts. 13–14, and proportionality throughout.
Sources and scope
Primary source: Austria regulator and statute references, last read 2026-09-17.
This page is a plain-English summary of published law and regulator guidance, not legal advice, and it is not a substitute for advice on your own facts. Employment and data protection law changes; each page states the date its sources were last read. Before monitoring staff anywhere, take advice from qualified counsel in that country.
See where the hours actually went
Free for up to three people. Windows and macOS. No keystroke content on any plan, and screenshots off unless an administrator turns them on.