Introduction
The widespread use of smartphones, laptops, tablets and instant messaging platforms such as WhatsApp has blurred the line between employees’ personal privacy and an employer’s legitimate business interests. This raises an important question: Can an employer lawfully search an employee’s phone or computer?
The short answer is yes – but only in certain circumstances.
Employees Have a Right to Privacy
Section 14 of the Constitution guarantees everyone the right to privacy. This protection extends to the workplace, although it is not absolute. Employees cannot expect complete privacy while using employer-owned equipment, particularly where the employer has implemented clear policies regulating the use of company devices.
The expectation of privacy will generally be higher where an employee uses a personally owned cell phone or computer than where the device belongs to the employer.
Company-Owned Devices
Where an employer provides a laptop, desktop computer, cell phone or tablet for business purposes, the employer generally has a stronger legal basis to inspect the device, especially if:
- the employer owns the device;
- there is a workplace policy stating that company devices may be monitored or searched;
- the search is conducted for a legitimate business reason, such as investigating misconduct, protecting confidential information or ensuring compliance with company policies; and
- the search is reasonable and proportionate.
Employees should not assume that company-issued devices are private, particularly where they have acknowledged an IT or electronic communications policy.
Personal Devices
Searching an employee’s personal cell phone or laptop is significantly more complex.
An employer cannot simply demand access to a personal device without lawful justification. Doing so may infringe the employee’s constitutional right to privacy and could expose the employer to legal claims.
Access should generally be based on:
- the employee’s informed consent;
- a contractual right contained in a workplace policy or BYOD (Bring Your Own Device) agreement;
- a lawful court order where necessary; or
- another recognised legal justification.
The mere suspicion of misconduct does not automatically entitle an employer to search a personal device.
WhatsApp Messages and Emails
WhatsApp conversations frequently become evidence in disciplinary hearings.
Where messages are voluntarily provided by one of the participants in the conversation, they are often admissible as evidence. However, unlawfully accessing another person’s WhatsApp account or secretly obtaining messages without authority may constitute a breach of privacy and may even amount to a criminal offence.
Similarly, employers may monitor emails sent through company email systems where employees have been informed that monitoring may occur.
The Role of POPIA
The Protection of Personal Information Act (POPIA) requires employers to process personal information lawfully, reasonably and only for a legitimate purpose.
This means employers should collect only the information necessary for the investigation and avoid unnecessary intrusion into an employee’s private affairs. Any personal information obtained during a search must be handled securely and confidentially.
Best Practice for Employers
Before searching any device, employers should ask:
- Is there a legitimate business reason for the search?
- Does a company policy permit the search?
- Is the search reasonable and proportionate?
- Can the objective be achieved in a less intrusive manner?
- Will the search comply with POPIA and the employee’s constitutional rights?
Employers should also ensure that electronic communications, monitoring and device usage policies are regularly reviewed and acknowledged by employees.
Conclusion
Technology has transformed the workplace, but it has not eliminated employees’ privacy rights. While employers may, in appropriate circumstances, search company-owned devices and monitor business communications, personal devices enjoy a much higher level of legal protection.
The safest approach is to adopt clear workplace policies, obtain employees’ acknowledgement of those policies, and ensure that any searches are conducted fairly, lawfully and only where there is a legitimate business need. Respecting these principles helps employers protect both their business interests and the rights of their employees.
Sources
- Constitution of the Republic of South Africa, 1996
- Protection of Personal Information Act 4 of 2013 (POPIA)
- Regulation of Interception of Communications and Provision of Communication-Related Information Act 70 of 2002 (RICA)
- Labour Relations Act 66 of 1995 (LRA)
- Dagane v SSSBC and Others (2018)
- Sedick and Another v Krisray (Pty) Ltd (2011) 8 BALR 879 (CCMA)
- Protea Technology Ltd v Wainer 1997 (9) BCLR 1225 (W)
- Gaertner and Others v Minister of Finance and Others (2013)
