Camera and Audio Recording in the Workplace

Workplace Camera and Audio Recording: When is it Legal, When is it a Crime?

Digital surveillance tools are now a part of daily life in many workplaces: cameras monitoring entrances and exits, recording systems monitoring cash registers, voice recording in call centers, and even security cameras with audio capabilities… However, the attitude of “it’s my workplace, I can do what I want” is not legally valid. Especially when it comes to an employee’s personal rights and the privacy of their private life , the employer’s surveillance authority is subject to serious limitations

1. Legal Framework

When it comes to camera and audio recording in the workplace, multiple regulations come into play simultaneously:

• According to the Law No. 6698 on the Protection of Personal Data (KVKK),
  images and sounds obtained through camera and audio recordings are considered "personal data," and often "special categories of personal data." Therefore, issues such as data processing conditions, obligation to inform, data minimization, and retention periods are subject to the KVKK.

• Turkish Penal Code No. 5237

  • Turkish Penal Code Article 132: Violation of the confidentiality of communication

  • Turkish Penal Code Article 133: Listening to and recording conversations between individuals

  • Turkish Penal Code Article 134: Violation of the right to privacy

  • Turkish Penal Code Articles 135-140: Recording, unlawfully disclosing, or obtaining personal data. These provisions form the basis for criminalizing acts such as hidden camera and secret audio recording
    

• Labor Law (Labor Law No. 4857, Turkish Code of Obligations No. 6098):
  The employer's right to manage and supervise is balanced with the employee's personal rights and duty of loyalty. Excessive supervision the employee's right to terminate employment for just cause, compensation for moral damages, and compensation for bad faith termination.

• Constitution and ECHR (European Convention on Human Rights)

  • Article 20 of the Constitution: Privacy of private life

  • Article 22 of the Constitution: Confidentiality of communication.
    Constitutional Court decisions deem it mandatory to respect the private life of an employee, even in the workplace, and base their determination of the limits of employer supervision on these articles.

2. Workplace Camera Recording: Basic Principles

2.1. The Necessity of a Legitimate Purpose

Employers must use cameras a legitimate purpose . The main legitimate purposes accepted in practice are:

• Ensuring the safety of the workplace and employees

• Taking precautions against risks such as theft, sabotage, and violence

• Monitoring risks within the scope of occupational health and safety

• Security in areas with high cash flow such as cash registers and warehouses

In contrast, abstract and unbounded purposes such as "constantly monitoring the employee" and "monitoring performance" are generally not considered legitimate interests by the Personal Data Protection Board and legal doctrine, or are interpreted very narrowly

Conclusion: Camera recordings cannot be legally admissible unless the purpose is clear, specific, and legitimate.

2.2. Legal Basis According to the KVKK (Personal Data Protection Law): Explicit Consent or Legitimate Interest?

The most common data processing conditions used in camera recording are:

• KVKK Article 5/2-f – Legitimate Interest of the Data Controller:
  Security-related, limited and proportionate camera surveillance can often without explicit consent, based on the legitimate interests of the employer. However, in such cases, the obligation to inform must be fulfilled and employees the right to object .

• Article 5/2-a of the Personal Data Protection Law (KVKK) – If explicitly stipulated in the laws, or
  if there are specific regulations in certain sectors such as banks and some public institutions that mandate cameras, then a legal obligation in these areas may also constitute a legal basis.

Key point: For private areas such as changing rooms, toilets, and breastfeeding rooms, legitimate interest or explicit consent is not considered sufficient; monitoring these areas constitutes a serious violation of rights. In the decisions of the Personal Data Protection Board and the Constitutional Court, monitoring activities in these areas where the individual feels completely under surveillance are explicitly considered a violation.

2.3. Obligation to Provide Lighting and Warning

In accordance with Article 10 of the Personal Data Protection Law, employers are required to inform employees and visitors to the workplace before installing a camera system .

• Which areas have cameras?

• What is the purpose of the recordings ?

• How long is it stored?

• Who will have access?

• On what legal grounds is this crime committed?

• What are the rights (application, deletion, correction, appeal, etc.)?

This lighting;

• Employment contract supplement, employee commitment form, internal regulations,

• Camera warning signs posted in visible locations at the workplace ,

• GDPR information text on the website

This can be done in ways such as these. It is known that even the Presidency of the Supreme Court of Appeals has published a statement regarding camera surveillance in its own buildings and facilities and has publicly announced that it has established a system compliant with the Personal Data Protection Law (KVKK).

Without lighting, camera recordings become illegal; the Board can issue administrative fines and order the deletion of recordings.

2.4. Proportionality, Data Minimization and Retention Period

The Personal Data Protection Law (KVKK) and Board decisions emphasize three fundamental principles in camera surveillance activities:

1. Data minimization:

   • Only the necessary fields should be monitored.

   • If possible, additional features such as zoom, facial recognition, and license plate recognition should be disabled.

   • Excessively detailed monitoring of an employee's computer screen activity, such as keyboard movements, should be avoided.

2. Limitation of purpose:

   • Records collected for security purposes should not be used in arbitrary disciplinary processes or to subject employees to psychological pressure.

   • It cannot be used for purposes other than those initially stated (e.g., marketing, advertising).

3. Storage time:

   • The idea that "the longer I keep it, the better" is wrong.

   • Typically, periods of 15–30 days are considered reasonable for security camera footage; it should not be stored for longer unless there is a justifiable reason.

   • Once the time limit expires, the records must be permanently deleted or anonymized so that they cannot be recovered.

3. Workplace Audio Recording: A Few Steps Beyond Camera Footage

Audio recordings a far more serious form of interference . This is because they contain a wide range of data that can reveal not only the physical presence of the employee, but also their thoughts, feelings, relationships, and even union activities.

3.1. Security Cameras with Audio Features

The Personal Data Protection Board has particularly negative assessments regarding security cameras with audio recording capabilities . In the case of a public institution using security cameras with audio features, the Board emphasized that processing the audio recording was unnecessary and disproportionate for the purpose , and constituted a violation of the principles of personal data protection.

Practical result:

• Systems that continuously record audio in an environment solely for security reasons are, as a rule, illegal.

• The employer's abstract justification of "having a record in case something happens in the future" does not remedy this excessiveness.

• Audio recordings can only be accepted in very exceptional and strong circumstances, with strict technical and administrative measures, and within the narrowest scope possible; in practice, however, the Board's decisions are largely negative.

3.2. Employer's Monitoring of Employees via Audio Recording

In most cases, an employer's systematic recording of employees' phone calls or office conversations poses the following risks:

• Article 133 of the Turkish Penal Code (listening to and recording conversations between individuals).

• Crime under Article 134 of the Turkish Penal Code (violation of the privacy of private life)

• Data processing in violation of the KVKK (lack of legitimate interest, proportionality, notification, and legal basis)

• Liability for moral damages due to violation of employee's personal rights

Especially in meeting rooms, offices, and休息 areas where employees expect their conversations not to be overheard by others, continuous audio recordingposes a serious risk under criminal law.

3.3. Employee Recording Their Own Voice: Recording for Evidential Purposes

A much-debated issue in practice is this:
Can an employee secretly record audio to prove a serious situation such as mobbing, insult, threat, or sexual harassment? Would such a recording constitute a crime under criminal law, and could it be used as evidence?

The following trend can be summarized in the precedents set by the Supreme Court of Appeals:

• As a rule, systematically recording private conversations , even if you are a party to them, may fall under Article 133 of the Turkish Penal Code.

• However, in cases of sudden, unjustified attacks against a person (threats, insults, sexual assault, etc.), and if there is no other way to prove it , instantaneous and incident-specific recordings made by the person for the purpose of self-protection and providing evidence to the authorities are considered by some courts as a justification for legality and are deemed not to constitute a crime.

• Similarly, such records legally admissible evidence .

The fine line here is this:

• Constantly recording every conversation to protect against potential mobbing → likely constitutes a crime and illegal evidence.

• Recording a serious attack that occurs unexpectedly, for limited purposes solely in self-defense when there is no other way to prove it, may be excused.

Therefore, each specific case must be evaluated individually; for employees, randomly recording audio carries a serious risk of penalties and compensation claims.

4. “When is it legally permissible?”

4.1. Conditions for Camera Recordings to be Deemed Lawful

In summary, workplace camera recording is generally considered lawful under the following conditions:

1. a legitimate purpose :

   • Workplace safety, property safety, and occupational health are tangible objectives.

   • Unbounded and abstract goals such as "monitoring employee productivity" have been avoided.

2. Limited and proportionate to the purpose:

   • Cameras are only installed in necessary areas;

   • Private areas such as toilets, changing rooms, and breastfeeding rooms are absolutely not monitored;

   • The number of cameras, their angles, and resolution are at a reasonable level.

3. Data processing in accordance with KVKK (Turkish Personal Data Protection Law):

   • The basis is often Article 5/2-f of the Personal Data Protection Law (legitimate interest) or a specific regulation;

   • Even if explicit consent is deemed necessary, it must be given freely; consent obtained under duress may be considered invalid.

4. Lighting and transparency:

   • Employees and visitors have been clearly informed about the use of cameras, their purpose, duration, and rights;

   • Warning signs have been posted at the entrance of the workplace and in relevant areas;

   • A detailed camera lighting manual and recording policy have been prepared.

5. Storage and security measures:

   • Records are limited to a reasonable period of time;

   • Only authorized personnel have access;

   • The recordings are not arbitrarily shared with third parties or on social media;

   • Deletion, anonymization, and log record keeping are done properly.

In this context, for example;

• Overlooking the warehouse entrance and cashier area,

• Employees were notified in advance,

• Deleted after being stored for 30 days,

• Camera system accessible only by security personnel and the employer

In most cases, it may be considered legally permissible.

4.2. Conditions for a Sound Recording to be Deemed Lawful

A more rigorous evaluation should be conducted regarding the audio recording:

1. Continuous ambient sound recording

   • Systems that constantly record everyone's conversations in the workplace are considered largely illegal under both the Personal Data Protection Law (KVKK) and the Turkish Penal Code (TCK)

2. Specialized areas such as call centers

   • In some sectors, recording incoming and outgoing calls for customer service, call centers, etc., may be acceptable provided that prior notification is given ("Our conversation is being recorded for quality and training purposes," etc.) and that relevant legal regulations are complied with.

   • However, even here, the records must be limited to the purpose, proportionate, stored for a specific period, and accessible only to authorized persons.

3. Employee's self-protective recordings

   • As mentioned earlier, the Supreme Court may, in some cases, accept as evidence, even if the recordings were made suddenly and in a limited manner to prove a serious assault, rather than considering them a crime.

   • This isn't a rule that automatically applies in every case; it's a " last resort " principle, applicable only if there's no other means of proof and the recording was made solely to document the attack

5. “When is it a crime?” – Critical Situations from a Criminal Law Perspective

5.1. Installation of Hidden Cameras

An employer or another employee may install hidden cameras in the workplace:

• If someone is secretly recording employees' images,

• Especially if they are monitoring private areas such as changing rooms, toilets, and treatment rooms,

• If they are sharing the recordings on social media or with third parties,

They may face the following charges:

• Turkish Penal Code Article 134 – Violation of the right to privacy

• Turkish Penal Code Articles 135-136 – Recording and unlawful acquisition of personal data

• Disclosure of the records carries harsher penalties under Article 134/2 of the Turkish Penal Code

In these cases, the victim's complainttriggers criminal proceedings; they also have the right to file a complaint with the Personal Data Protection Board.

5.2. Covert Audio Recording and Conversation Recording

At the workplace;

• The secret recording of a private conversation between two or more people by a person who is not a party to the conversation, without the consent of those individuals

• Or systematically recording a conversation you are a part of without the other party's knowledge,

In most cases, it constitutes a crime under Article 133 of the Turkish Penal Code

• Unauthorized listening to or sharing of recordings,

• Being exposed on social media,

This may lead to additional offenses under Articles 134 and 136 of the Turkish Penal Code

5.3. Sharing Workplace Records on Social Media

Whether it's camera footage or audio recordings, all recordings made at the workplace;

• Sharing the employee's content on social media, WhatsApp groups, Telegram channels, etc., without their permission,

• Publishing with statements that could lead to the employee's humiliation or disclosure,

This can lead to the following consequences:

• Turkish Penal Code Article 134/2 – Unlawful disclosure of images or sounds relating to private life,

• Administrative fines were imposed by the Board due to the transfer of personal data in violation of the KVKK (Personal Data Protection Law) .

• High compensation for moral damages due to serious violation of the worker's personal rights .

6. Consequences from a Labor Law Perspective: Termination, Compensation, and Reinstatement

6.1. Risks from the Employer's Perspective

Illegal camera or audio recording practices can lead to the following consequences for employers:

• Employee's right to terminate employment for just cause:
  Surveillance practices that severely infringe upon an employee's personal rights may grant the employee the right to terminate employment for just cause, as defined by the Turkish Code of Obligations and the Labor Law. In this case, the employee may be entitled to severance pay.

• Claims for moral damages: Particularly in cases of serious violations such as monitoring of private areas, audio recordings, and the disclosure of recordings, the Supreme Court may accept the employee's claims for moral damages
  

• Personal Data Protection Law (KVKK) Administrative Fines:
  The Board can impose significant administrative fines due to issues such as insufficient lighting, excessive surveillance, cameras with audio capabilities, and excessive retention periods.

• Loss of corporate reputation:
  The perception among employees and customers that the workplace is a place that is "monitored" and "recording everything" leads to long-term reputational damage for the employer.

6.2. Employee Rights

Employees have the following options available to them:

1. Application and written warning to the employer

   • Asking the employer for information about camera and audio recording applications,

   • Making requests for information and data deletion under the KVKK (Turkish Personal Data Protection Law).

2. Complaint to the Personal Data Protection Board

   • First, apply to the employer; if no response is received within 30 days, or if the response is deemed insufficient, file a complaint with the Board.

3. Criminal investigation (filing a criminal complaint with the prosecutor's office)

   • Applications to the prosecutor's office regarding acts such as hidden camera footage, secret audio recording, violation of privacy, and unlawful processing of personal data.

4. Compensation lawsuit and termination in labor court

   • Moral damages due to violation of personal rights,

   • If the conditions are met, a claim for justified termination and severance pay,

   • In reinstatement lawsuits concerning wrongful dismissals, the legality of camera recordings may also be a subject of debate.

7. Camera and Audio Recordings as Evidence: From the Perspective of the Code of Civil Procedure and the Code of Criminal Procedure

7.1. Prohibition of Illegally Obtained Evidence

• Article 189/2 of the Code of Civil Procedure , evidence obtained illegally cannot, as a rule, be taken into account.

• In criminal proceedings, the Code of Criminal Procedure also stipulates that evidence obtained illegally cannot be used as the basis for a judgment.

Therefore;

• In most cases, camera or audio recordings obtained in violation of the Personal Data Protection Law (KVKK) and the Turkish Penal Code (TCK) will not be considered as evidence by the courts

7.2. Exceptions: Recording for Self-Protection Purposes

As stated above;

• by a person who is subjected to a sudden and severe attack (threat, insult, sexual harassment, etc.) for the purpose of self-defense, when there is no other way to prove it, lawful .

Here, the court typically looks at the following criteria:

• the event suddenly , or did the person act according to a plan?

• Is the attack a serious and real threat?

• Is there really no other way to obtain evidence?

• Does the recording only cover the attack, or was every conversation systematically recorded?

• the recording used solely presenting it to the judicial authorities , or was it disclosed?

If these criteria are met, the court may be more flexible regarding both criminal responsibility and the legality of the evidence; otherwise, illegality and crime come into play.

8. Practical Compliance Checklist for Employers

A practical checklist for employers who want to use cameras or audio recording in the workplace:

1. Objective identification:

   • Why do I need a camera/audio recording?

   • Could this objective be achieved through other, less burdensome methods (additional security guards, card entry system, physical locks, etc.)?

2. Legal basis analysis:

   • According to Articles 5 and 6 of the KVKK (Turkish Personal Data Protection Law), which data processing conditions am I relying on?

   • Has a legitimate interest test been conducted? Has a balance been struck between the employee's fundamental rights and freedoms and my interests?

3. Preparing policy and information texts:

   • Is the camera/recording policy in writing?

   • Were the employees informed in writing?

   • Have enough warning signs been posted at the workplace?

4. Technical and administrative measures:

   • Who has access to the records?

   • Is access permission being logged?

   • What is the retention period? Is there an automatic deletion system at the end of the period?

5. Avoiding audio recording:

   • If there's a voice feature, is it really essential?

   • Otherwise, the voice recording feature must be technically disabled.

6. Education and awareness:

   • Has the Human Resources and IT department received training regarding the Turkish Personal Data Protection Law (KVKK) and the Turkish Penal Code (TCK)?

   • Have employees been informed about the penalties associated with the misuse of the records (e.g., sharing them on WhatsApp)?

These steps will significantly reduce the employer's risks under GDPR, labor law, and criminal law.