May an employer look in an employee's email?
Only in two cases: where it is necessary to maintain daily operations or other legitimate interests of the undertaking, or where there is reasonable suspicion of a serious breach of duty or a criminal offence. The employee must as far as possible be notified and given the opportunity to comment and to be present, and the access must be documented. The rule sits in regulation of 2 July 2018 no. 1108, made under section 9-5 of the Working Environment Act, and the processing must also satisfy the Personal Data Act and the GDPR.
Source
- Reference
- Regulation on employer access to email sections 2 and 3, cf. Working Environment Act section 9-5
- Acts
- Personal Data Act
- Area
- Data protection and trust services
- Read date
- 2026-09-09
Other acts in the same area
- Act on electronic trust services · LOV-2018-06-15-44
Questions and answers
Ready-made pack
GDPR incident pack
€79, one-time purchase
What you need once a personal data breach has happened: the notification articles, the risk profile and a ready evidence chain.
Next step
Three ways to put the register to work in your own practice.
Start with your task
Litigation
Find support in a judgment
Search guiding decisions, see what became final and follow changes in the law.
In-house, deals
Map the rules in a transaction
Move from theme to act and on to the article that carries the duty.
Compliance
Assess the risk in a process
Risk scoring per legal area, with the sources behind every score.