What is This Reported Tool?
According to multiple reports, TCS has deployed a 'Digital User Experience Monitoring' tool on company-issued laptops. While the company has not formally communicated the rollout to all staff, sources suggest the software gives TCS greater visibility
into device activity. The stated purpose of such tools is often to enhance IT support, monitor application performance, and bolster cybersecurity. However, the lack of official details about the software's vendor, its full capabilities, or who has access to the data has fueled employee concerns about privacy. In a statement, TCS has said that reports of employee surveillance are baseless and that it uses tools to monitor macro-level network performance for security and user experience, not to track individual activity.
The Data That Could Be Collected
While the exact capabilities of the specific tool at TCS have not been publicly confirmed, workplace monitoring software, in general, can collect a vast amount of data from a company-owned device. The most basic function, which has been reported in this case, is tracking application usage and how much time is spent on each app. However, more advanced tools can go much further. Potential data collection points can include: keystroke logging (recording every key pressed), intermittent screenshots or continuous screen recording, website and search history, email and chat monitoring (including senders, recipients, and attachments), and tracking file access and transfers. The level of monitoring depends entirely on how the software is configured by the employer.
The Business Case: Security and Productivity
From a company's perspective, especially a tech giant like TCS handling sensitive client data, monitoring is often framed as a business necessity. These tools can help prevent data leaks by flagging unusual file transfers or access to unauthorized applications. They can also be used to ensure that company devices are being used for work-related purposes, track productivity metrics, and optimize software licenses by seeing which applications are actually being used. In a hybrid work model, employers may argue that such tools are essential to maintain security and operational efficiency when employees are not physically present in the office. The official line often centres on protecting business-sensitive information and maintaining the resilience of company systems.
Employee Privacy vs. Employer Oversight
For employees, the presence of monitoring software can feel like a breach of trust, leading to fears of micromanagement and constant surveillance. The line between monitoring a device and monitoring a person becomes blurry, especially when work laptops are occasionally used for minor personal tasks during a break. The lack of transparency is a major point of contention; employees are often unsure what is being tracked, why, and who is watching. This digital oversight can create a stressful work environment and undermine morale, with some feeling it’s a move towards greater control rather than just security. The situation is further complicated for staff working on client virtual desktops, where monitoring could intersect with client confidentiality agreements.
What Indian Law Says
The legal landscape for employee monitoring in India is complex and evolving. There is no single law that explicitly governs workplace surveillance. However, the issue is covered by a combination of the Information Technology Act, 2000, and principles from the Supreme Court's landmark 2017 ruling that established the Right to Privacy as a fundamental right. Generally, monitoring on company-owned devices is considered legal, provided there is a legitimate business purpose, such as security. The key legal tests are proportionality and transparency. This means the monitoring should be reasonable, necessary for the stated purpose, and employees should be clearly informed about it. Covert or excessive monitoring that is not related to job functions could be challenged as a violation of privacy. The recent Digital Personal Data Protection (DPDP) Act of 2023 further refines these obligations, though some provisions allow for processing employee data without explicit consent for employment-related purposes.
