DPDP & Employee Monitoring Software: Why Surveillance Clauses Are Void
Updated: 06 Jul 2026 · For: SaaS founders, DPOs and growth leads selling to enterprises
What changed
The legal understanding around employment surveillance clauses under India's Data Protection regime has shifted. These clauses are now treated as void, not merely risky. That matters for any team deploying employee monitoring software — whether off-the-shelf platforms such as Workfolio, Hubstaff, We360.ai, Keka, Time Doctor, ActivTrak, or in-house HR tools that capture screenshots, keystrokes, location, or screen activity.
What the law is (plain English)
Under India's Data Protection law, broad surveillance language in employment contracts or HR policies may be unenforceable — void, as if it never existed. That is stricter than calling a clause 'risky.' For employee monitoring platforms, the gap is often between what the software can technically do and what your workplace notice, consent, and purpose limitation actually permit under DPDP. A vendor's terms of service or a one-line consent in an offer letter rarely substitutes for a standalone workforce privacy notice.
What it means in practice
Founders, DPOs, and HR leads must map every monitoring tool in the stack — Workfolio-style activity trackers, attendance modules in Keka or Darwinbox, global tools like Hubstaff or Time Doctor, and any custom logging — to the lawful basis and notices you give employees. If the underlying surveillance clause is void, enterprise buyers and regulators may question whether screen capture, idle-time scoring, or always-on tracking was ever properly authorised. SaaS vendors selling monitoring features should expect sharper DPA and security questionnaire scrutiny from Indian enterprise clients.
What founders should do this week
- Inventory every employee monitoring platform in use (e.g. Workfolio, Hubstaff, We360.ai, Keka, Time Doctor, ActivTrak, Darwinbox attendance) and list what each collects.
- Review employment contracts and HR policies for surveillance or monitoring clauses — flag language that may be void under DPDP.
- Check whether each vendor's DPA, sub-processor list, and data residency terms match how Indian employee data is processed.
- Issue or update a standalone workforce privacy notice before expanding screenshot, keystroke, or location monitoring.
- Brief sales and customer success if you sell HR tech — enterprise buyers will ask how monitoring features survive DPDP review.
What can wait
- A full rewrite of unrelated data governance policies not tied to workforce monitoring.
- Benchmarking every global monitoring vendor — start with tools you already deploy.
When to call counsel
- You rely on Workfolio or similar software for screen/activity monitoring and are unsure notices match DPDP.
- You are redesigning HR tech products with employee monitoring features for Indian enterprise buyers.
- An employee or regulator questions whether monitoring was ever lawfully authorised.
Founder FAQ
We use Workfolio or similar employee monitoring software — what should we check?
Confirm what data the platform collects (screenshots, keystrokes, URLs, location, idle time), whether employees received a clear standalone notice before monitoring started, and whether your employment contract language actually authorises it under DPDP — void surveillance clauses may undermine the legal basis for deployment.
What does "void" mean for my employment contracts?
"Void" means the clause is legally invalid and unenforceable, as if it never existed — stronger than merely being risky or ambiguous.
Does this ban all employee monitoring in India?
Not necessarily. It tightens the legal foundation. Monitoring may still be possible with proper notice, purpose limitation, and compliance — but blanket surveillance clauses and implied consent in vendor ToS are poor substitutes.
Will this affect how we sell HR or monitoring SaaS to enterprises?
Yes. Enterprise legal and DPO teams will scrutinise whether your product's monitoring features can be lawfully deployed in India. Expect more DPA, notice-template, and feature-gating questions in security reviews.
SB Tech Associates: General information only — not legal advice. Verify the official notification and obtain counsel for your facts before acting.
Source: Official source →
Topics: employee monitoring software India, employee monitoring platform DPDP, Workfolio DPDP compliance, workplace surveillance tools India, HR monitoring software India law, void employment clauses DPDP, employee screen monitoring India, DPDP employment surveillance
This publication is for general information only and does not constitute legal advice. Regulatory positions evolve; verify current notifications and obtain counsel before acting. © 2026 SB Tech Associates.