Employee monitoring laws in Italy
Yes, but Italy has the strictest procedural gate in Europe: software capable of remote monitoring generally cannot be installed until either a union agreement is signed or the National Labour Inspectorate authorises it, and installing without one carries criminal as well as administrative exposure.
Who has to agree before you start
The fact that decides the timeline, and the one that differs most between countries.
The workforce can say no
Under Art. 4(1) the system may be installed only after a collective agreement with the company union representatives (RSU/RSA), or — failing agreement — after authorisation from the territorial office of the Ispettorato Nazionale del Lavoro. The union route takes precedence; the Inspectorate route is the alternative when negotiation fails.
A works council or union must agree before monitoring starts. Plan these first and plan them long: the agreement is a negotiation, not a form, and in Austria and the Netherlands a rollout without it is void or voidable rather than merely irregular.
GDPR and the Codice Privacy, layered on Article 4 of the Statuto dei Lavoratori (L. 300/1970) as amended by the 2015 Jobs Act, with Garante guidance on workplace monitoring.
The law that applies in Italy
Named so you can check us, and so your own counsel has somewhere to start.
| Instrument | What it requires |
|---|---|
| Statuto dei Lavoratori art. 4(1) | Permits audiovisual systems and other instruments from which remote monitoring of workers may derive only for organisational and production needs, workplace safety, or protection of company assets — and only after a union agreement or Labour Inspectorate authorisation. |
| Statuto dei Lavoratori art. 4(2) | Exempts instruments used by the worker to perform the job, and attendance and access recording tools, from the agreement requirement. The exemption is read narrowly: a tool adapted or configured to monitor the worker stops being an instrument that serves the worker and becomes one that serves the employer, and falls back under art. 4(1). |
| Statuto dei Lavoratori art. 4(3) | Makes the collected information usable for all purposes connected with the employment relationship only if workers were given adequate information on how the tools are used and how checks are carried out, and the privacy rules are respected. Without that information, the data cannot be used — including in disciplinary proceedings. |
| Statuto dei Lavoratori art. 38 | Attaches criminal sanctions to breaches of art. 4, which is why Italy is treated differently from other member states in a multi-country rollout plan. |
How a rollout is done here
- Assume art. 4(1) applies. Time-tracking software that records activity is not a 'strumento di lavoro' in the sense of art. 4(2) — the employee does not use it to do the job; it observes them doing it.
- Identify which of the three permitted purposes you are relying on: organisational and production needs, workplace safety, or protection of company assets. Art. 4 requires one, and the agreement or authorisation will be assessed against it.
- Negotiate with the RSU or RSA first. For sites across several provinces in one region, or across regions, the agreement can be made with the comparatively most representative national unions.
- If negotiation fails, apply to the territorial office of the Ispettorato Nazionale del Lavoro — or the central body where sites span several territorial offices.
- Give workers adequate information on how the tool is used and how checks are carried out, before use. Art. 4(3) makes this a condition of the data being usable at all.
- Complete a DPIA and document the lawful basis; the Garante expects both for systematic workplace monitoring.
What gets a rollout refused
- Relying on the art. 4(2) 'work tools' exemption for monitoring software. That is the most common Italian mistake, and the narrow construction of the exemption is well established.
- Installing during the union negotiation. The agreement or authorisation is a precondition of installation, not a parallel workstream.
- Skipping the art. 4(3) information step after securing the agreement. Without it, the data is unusable for employment purposes even though the system was lawfully installed.
- Continuous recording of browsing history. The Garante has drawn a line between blocking access to prohibited sites, which is admissible, and recording and storing every trace of navigation, which is not.
Monitoring staff in Italy — questions
Is time-tracking software a 'work tool' exempt from the union agreement?
Almost never. Art. 4(2) exempts instruments the worker uses to perform the job and tools that record access and attendance. Software whose function is to observe how the worker spends time serves the employer rather than the worker, and the case law treats tools adapted for monitoring as falling back under art. 4(1). Treating a monitoring product as exempt is the standard route to an art. 4 breach.
How long does the Labour Inspectorate route take?
It is an administrative authorisation with a reasoned decision, and timelines vary by territorial office; it is materially slower than reaching agreement with the RSU. This is why the union route is attempted first, and why Italian rollouts should be started earlier than the rest of a European programme.
Does an attendance clock need an agreement?
Tools for recording access and attendance are covered by the art. 4(2) exemption, so a pure clock-in system generally does not need one. The question is whether the tool stops at attendance. Once it records what was done during the day rather than only that the day happened, art. 4(1) is engaged.
Are there criminal consequences for getting this wrong?
Art. 38 of the Statuto attaches criminal sanctions to art. 4 breaches, alongside administrative fines under the GDPR. That combination is the reason Italy deserves separate treatment rather than being grouped with other EU countries in a rollout plan.
Sources and scope
Primary source: Italy regulator and statute references, last read 2026-09-17.
This page is a plain-English summary of published law and regulator guidance, not legal advice, and it is not a substitute for advice on your own facts. Employment and data protection law changes; each page states the date its sources were last read. Before monitoring staff anywhere, take advice from qualified counsel in that country.
See where the hours actually went
Free for up to three people. Windows and macOS. No keystroke content on any plan, and screenshots off unless an administrator turns them on.