11.: Develop a Workplace/Employee-Specific Data Governance Strategy That Strengthens the Rights to Privacy and Data Protection in the Digital Workplace

In view of the particular privacy and data protection challenges raised by AI-powered workplace monitoring, this option proposes the development of a Data Governance Strategy that would be structured around a series of requirements. These requirements go beyond the compliance requirements with GDPR and other data protection regulations and put forward a series of recommendations that focus on the handling of incidental findings, the attention to the monitoring system’s life cycle and on ex-ante and extensive privacy and data protection audits.

The Strategy should contain the following requirements:

Such an approach could prevent: