GermanyCan my employer monitor my work email?
Yes, but only under strict conditions: for legitimate employment purposes, with proportionality, transparency, and usually only while you're employed — not after termination.
What the Law Says
German law permits employers to process employee personal data—including work email—for employment-related purposes, but only if strictly necessary, proportional, transparent, and lawful. The key provision is BDSG §26, which sets narrow boundaries for such monitoring.
Under BDSG §26(1), your employer may process your personal data (e.g., emails) only if it’s necessary for establishing, performing, or terminating your employment—or to fulfill rights/duties arising from law, collective agreements, or works agreements.
Monitoring for criminal investigations is allowed only if there are documented, concrete facts giving rise to suspicion—and only if less intrusive measures aren’t available. Even then, your privacy interest must not outweigh the employer’s need.
Consent (§26(2)) is rarely valid in employment due to power imbalance—so even if you ‘agree,’ courts scrutinize whether it was truly voluntary. If used, consent must be in writing or electronic form, and you must be informed about the purpose and your right to withdraw.
The law applies broadly: it covers employees, interns, trainees, civil servants, volunteers, and even job applicants and former employees.
Statutory TextPersonenbezogene Daten von Beschäftigten dürfen für Zwecke des Beschäftigungsverhältnisses verarbeitet werden, wenn dies für die Entscheidung über die Begründung eines Beschäftigungsverhältnisses oder nach Begründung des Beschäftigungsverhältnisses für dessen Durchführung oder Beendigung oder zur Ausübung oder Erfüllung der sich aus einem Gesetz oder einem Tarifvertrag, einer Betriebs- oder Dienstvereinbarung (Kollektivvereinbarung) ergebenden Rechte und Pflichten der Interessenvertretung der Beschäftigten erforderlich ist.
— BDSG § 26(1) — Data processing in the employment context
Statutory TextDie Einwilligung hat schriftlich oder elektronisch zu erfolgen, soweit nicht wegen besonderer Umstände eine andere Form angemessen ist. Der Arbeitgeber hat die beschäftigte Person über den Zweck der Datenverarbeitung und über ihr Widerrufsrecht nach Artikel 7 Absatz 3 der Verordnung (EU) 2016/679 in Textform aufzuklären.
— BDSG § 26(2) — Consent requirements
What Courts Have Said
German courts have reinforced strict limits on employer email monitoring—especially after employment ends or without clear justification.
Covert video surveillance is generally unlawful unless there’s a concrete suspicion of crime and no milder alternative exists—this principle extends to digital monitoring like email checks.
After employment ends, an employer may not access the former employee’s work email account—even if technically possible—unless the contract explicitly permitted it. Such access violates personality rights and telecommunications secrecy.
What to Do
Review your employment contract and any works agreement for explicit email monitoring rules.
Ask your employer in writing for the legal basis, purpose, and scope of any monitoring.
Object if monitoring lacks necessity, proportionality, or transparency—or if it continues after your employment ends.
File a complaint with your company’s Data Protection Officer (DPO) or the local data protection authority (e.g., LfDI Baden-Württemberg).
Sources
Related Questions
Same Question, Other Jurisdictions
Canada
Australia
Ireland
Singapore
European Union
India
South Korea
UK
US Federal
US-California
US-New York
JapanNot legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: June 2026.