Luxembourg Law of 1 August 2018 on Data Protection (GDPR Implementation) L.261-1(1): Labour Code L.261-1(1): monitor employees only on a GDPR Article 6(1) ground and within this article

What does L.261-1(1) require?

An employer may implement processing of personal data for the surveillance of employees in the employment context only in the cases of Article 6(1)(a) to (f) GDPR and in accordance with the rest of Article L.261-1 (prior information, co-decision where it applies, the staff delegation's right to seek the CNPD's prior opinion and the employees' right to complain). Under the repealed Act of 2 August 2002, workplace surveillance needed the CNPD's prior authorisation (Article 14(1)(b) of the coordinated text); the 2018 version replaces authorisation with the GDPR lawful bases and the Labour Code procedure.