We’ve all wondered about it at some point. You send a WhatsApp message during the workday, have a conversation over Teams or fire off an email from your work laptop and suddenly think: could my boss actually read that?
With work now happening across emails, WhatsApp chats, Teams calls and messages sent from home, the line between “work” and “private life” has become increasingly blurred. So, just how private are your workplace conversations?
The South African legal position
In South Africa, the answer is not a simple yes or no. It depends on the platform being used, whose device it is, what the employer’s policies say and whether the monitoring is lawful.
Firstly, employees have a right to privacy protected by the Constitution, while personal information is also regulated by the Protection of Personal Information Act (POPIA). The Constitutional Court in Bernstein v Bester made it clear that privacy in the workplace is not absolute and that an employee’s private sphere becomes narrower as they move from the personal realm into workplace activity.
If an employer provides the system, device or network, it will usually have a stronger legal basis to monitor what happens on it, provided this is done lawfully. The Labour Court in NUMSA v Rafee N.O. and Others recognised that employer and employee interests need to be balanced. Employees may want to preserve the confidentiality of personal information, while employers are entitled to protect confidential business information.
In practical terms, an employer may generally monitor communications on company email accounts, internal messaging systems such as Microsoft Teams and company-issued laptops or phones. Legitimate reasons include protecting confidential information, investigating alleged misconduct, maintaining cybersecurity, ensuring systems are used appropriately and managing legal or operational risk.
However, that doesn’t give employers free rein to read everything. Monitoring needs to be lawful, proportionate and transparent. Employees should be informed through workplace policies, IT rules, employment contracts or notices that communications on company systems may be monitored.
If monitoring is excessive or hidden, an employer may face legal difficulties. In Protea Technology Ltd and Another v Wainer and Others, the court made it clear that even in an employment setting, purely private communications may still attract a legitimate expectation of privacy. An employer cannot simply demand access to genuinely private communications because they happened during working hours or on business premises.
Another important law is the Regulation of Interception of Communications and Provision of Communication-Related Information Act (RICA). It places restrictions on the interception of communications, particularly where messages are accessed in real time. Interception is not automatically allowed because someone is at work. There are limited exceptions, including certain circumstances involving business systems, but employers still need to act carefully and within the law. Clear notice, an appropriate monitoring policy and clearly defined reasons for monitoring are important.
What about your personal phone?
Things become more complicated when employees use their own phones or laptops for work, or when work conversations happen on personal apps such as WhatsApp. Here, the expectation of privacy is generally much stronger.
An employer does not automatically gain access to a personal device simply because a work issue was discussed on it. A private WhatsApp conversation on your own phone is not the same as a message sent through a company email server.
This is particularly relevant with bring-your-own-device (BYOD) arrangements. Employers may allow staff to use personal devices for work, but this does not give the business unrestricted rights over the device. A BYOD policy may allow limited access to work-related information where necessary for security, data protection or an investigation. Even then, the scope needs to be carefully defined and communicated. An employer is not entitled to browse through private photos, personal emails or unrelated WhatsApp conversations simply because a work message exists on the device.
Personal devices are not completely beyond scrutiny, however. If an employee uses a private phone or account to leak confidential information, harass a colleague, share trade secrets or engage in work-related misconduct, those communications can become relevant in a disciplinary or legal process.
In these situations, the question is not whether an employer has a general “right to read everything,” but whether there is a lawful and justified reason to access specific material. Context matters and each situation needs to be considered on its own merits.
So, how private are your messages really?
For employees, the practical lesson is straightforward: if you are using a work platform, it is sensible to assume your employer may be able to access it. If you are using a personal device, your privacy is stronger, although it may not be absolute when serious workplace issues are involved. Protea Technology showed that once an employee’s communication moves out of the private sphere and into the sphere of the employer’s affairs, the benefit of privacy may fall away.
Always remember, hitting “delete” does not necessarily mean a message has disappeared forever either. Depending on the system, backups, servers or forensic recovery may mean a record still exists.
For companies, overly intrusive surveillance can undermine trust, affect morale and potentially create legal exposure. The best approach is to establish clear rules. A workplace policy should explain what systems are monitored, why monitoring happens, what information may be accessed, how long data is kept and what employees can realistically expect in terms of privacy.
Technology has made sending a message easier than ever, but it has also made the boundaries around privacy more blurry. In law, the distinction is often less about whether a message feels private and more about where it was sent, whose device was used and what workplace policies apply.
So, can your boss read your messages? Sometimes, yes. But there are limits, and it certainly doesn’t mean every message, on every device, is fair game.
Article written by Bronwyn Marques who is an attorney at Fluxmans, specialising in employment and labour law.
