Alessandro AleddaInsider Threat and Risk

INTRA/MD/MD016Measurement of pace and performance

The derivation of a rate of work from the traces the work itself produces.

Pillar
MD  |  Monitoring and detection
Sources cited
10
Added
30 AUGUST 2026
Updated
1 SEPTEMBER 2026
ControlJurisdictionSourceWhat it establishesPrerequisite or recommendation
MD016/EUMandatoryEuropean UnionRegulation (EU) 2016/679, articles 5(2), 6, 9, 12, 15, 22, 35, and 88European Parliament and Council · read 11 Aug 2026Opinion 2/2017 on data processing at work (WP249)Article 29 Data Protection Working Party · read 11 Aug 2026The grounds on which processing may rest, the burden of showing it, the categories whose processing is prohibited outright save on a named ground, what a person asking has to be told and by when, the limit on deciding about someone by machine alone, when an impact assessment is owed, and the leave each member state has to set its own employment rule.A ground under article 6 has to be identified before anything is collected through the measurement, and whatever more specific rule the member state has made under article 88 applies on top of it. Consent is rarely that ground in an employment relationship, since it has to be freely given and the imbalance there makes that doubtful.
MD016/CoEMandatoryCouncil of EuropeBărbulescu v. RomaniaEuropean Court of Human Rights, Grand Chamber · read 11 Aug 2026That private life and correspondence reach into the workplace, and the six criteria against which any monitoring measure is weighed.Private life and correspondence extend into the workplace, including where a worker’s private use of a work device breaks the employer’s rules, and a monitoring measure is to be assessed against six criteria, prior notification and the availability of a less intrusive method among them. The case concerned the reading of a worker’s messages, and whether the criteria reach a rate of work derived from the traces of the work is not decided in it.
MD016/ATMandatoryAustriaArbeitsverfassungsgesetz, sections 96 and 96aNationalrat · read 29 Aug 2026That a control measure touching human dignity has no legal effect without the works council’s consent, and that consent for automated processing and for assessment systems can be replaced by a conciliation board while consent under section 96 cannot.A rate of work derived from statistical, data capture, or micro timing methods is named in its own right among the measures the works council has to consent to, alongside the general requirement for systems that control employees.
MD016/FRMandatoryFranceDécision n° 492830, Amazon France LogistiqueConseil d’État, tenth and ninth chambers · read 16 Aug 2026That the fine for scanner-measured warehouse work stands, reduced to 15,000,000 euros, the original deliberation remaining what states the finding.Measuring warehouse work through handheld scanners has been found unlawful in its detail, and the fine for it stands at 15,000,000 euros after review.
MD016/DEMandatoryGermanyBetriebsverfassungsgesetz, section 87(1)(6)Bundestag · read 16 Aug 2026Co-determination by the works council over the introduction and the use of technical devices intended to monitor conduct or performance.The works council has to agree before introducing the measurement, and again on the manner in which it is used.
MD016/ITMandatoryItalyLegge 20 maggio 1970, n. 300, article 4Parliament of Italy · read 11 Aug 2026That an instrument from which remote monitoring may follow is permitted only for stated purposes, and only after a union agreement or an authorization.An agreement with the union representatives, or failing that an authorization from the labor inspectorate, is required before installing the measurement.
MD016/NLMandatoryNetherlandsWet op de ondernemingsraden, article 27(1)(l)Staten-Generaal · read 16 Aug 2026Consent of the works council for an arrangement directed at or merely suitable for observing presence, conduct, or performance.The works council has to consent before any arrangement governing the measurement is adopted, amended, or withdrawn.
MD016/ESMandatorySpainLey Orgánica 3/2018, articles 87, 89, and 90Cortes Generales · read 16 Aug 2026A right to privacy in employer-provided devices, and the express prior information owed before camera images or location data are processed.Criteria for use, drawn up with the participation of the workers’ representatives, and express prior information to the workers, are required before putting the measurement into operation.
RecommendedUnited Kingdomwhere writtenEmployment practices and data protection: monitoring workersInformation Commissioner's Office · read 30 Aug 2026What the British regulator expects of an employer that watches its workers, told apart as what an employer must do and what it should, and the conditions it sets on watching them without telling them.Monitoring that may result in financial loss, performance management given as the example, is named among the processing likely to cause high risk.