Employee notice and monitoring

This is a template prepared for review by qualified counsel. It is not legal advice. This is the single highest-risk legal question in the SMS Bridge product and should be reviewed by employment counsel in every jurisdiction before the product is marketed with "the Company Gate" as its lead feature.

Last reviewed: August 31, 2026

1. What the product actually does, stated precisely

Two distinct employer actions need separate legal analysis:

• (a) Holding an inbound complaint from the technician. A customer texts a complaint about the assigned technician. SMS Bridge detects this (by AI classification of message content) and does not deliver it to the technician's device. Instead it escalates to the office. The technician never sees the message and, per the product description, never learns it existed.
• (b) Gating an outbound message from a former assignee. After a job is closed, if the employee who was assigned to it still tries to text that customer, the message is not blocked outright, it queues at a company-controlled gate until an admin or the AI releases it. This means an employer or an automated system reads the content of an employee's outbound message before deciding whether to let it reach the customer.

Both of these are more than ordinary "employer owns the phone system" monitoring, because (a) involves affirmatively concealing a piece of information from an employee that concerns them personally (a complaint about their own performance), and (b) involves an employer or its automated agent reading and holding an employee's authored message content before delivery, which is closer to interception than after-the-fact review of stored messages. Both should be assessed as workplace surveillance and, in the case of (a), also as a records/personnel-file question (does an employee have a right to know that a complaint about them exists and was filed).

2. Canada

Federal and general principle

The Supreme Court of Canada in R v Cole, 2012 SCC 53, held that an employee can retain a residual expectation of privacy in information on a work-issued device, but that this expectation is reduced where the employer owns the device or system and has policies reserving rights of access and control (cited in kedgeanchorlaw.ca, "Workplace Chat Privacy: Are Your Messages Really Private?", dated 2026-05-28, accessed Aug 31 2026). Canadian federal, provincial, and territorial privacy commissioners jointly noted in an October 2023 resolution that the last several years have seen a large expansion in workplace digital monitoring, that some monitoring is reasonable and necessary for managing the employment relationship, but that "irresponsible adoption of privacy invasive technologies" carries real risk to employees (Office of the Privacy Commissioner of Canada, joint FPT resolution, priv.gc.ca, dated Québec, October 4-5, 2023).

Alberta PIPA (our home jurisdiction, and likely many customer jurisdictions)

Alberta's Personal Information Protection Act permits an employer to collect, use, and disclose employee personal information without consent where reasonable for establishing, managing, or terminating the employment relationship, provided the employee receives reasonable notice of the purpose (kedgeanchorlaw.ca, dated 2026-05-28). The statutory test is reasonableness: monitoring "cannot be arbitrary, excessive, or disconnected" from a legitimate purpose (same source). Applying this to SMS Bridge:

• Outbound gating of a former assignee's message (item b above) is likely defensible as reasonable if: the purpose (preventing an ex-employee from continuing an unauthorized customer relationship, protecting the business's customer relationships and brand) is legitimate, the practice is proportionate (only messages to customers on closed jobs are gated, not all messages), and the employee received advance notice this would happen. This is my analysis of how the reasonableness test likely applies, not a verified legal conclusion; needs counsel.
• Holding a complaint entirely from the technician without ever telling them (item a above) is the harder case. It is not simply "the employer read a message," it is the employer actively ensuring the employee never learns that a customer complaint exists. If the complaint becomes the basis for discipline, performance review, or termination, the employee may have a right to know the substance of the allegation against them under general employment law principles of procedural fairness (distinct from PIPA), even if PIPA itself does not require disclosure of the message. This is a meaningful legal risk, not a settled point, and I don't know whether any Alberta or Canadian court has ruled directly on a system holding a customer complaint from the subject employee in this way; needs counsel, and needs a business decision on whether "the technician never learns it existed" is the right permanent design versus "the technician doesn't see the raw complaint but is told a complaint exists and is under review."

Quebec

Quebec is the most protective province for both privacy and labour relations. Law 25, in force since September 22, 2023, requires businesses using technology that can "identify, locate, or profile" a person to disclose that use and the means available to the person to opt out, deactivate, or object, and treats analysis of "work performance" as a form of profiling explicitly (mccarthy.ca, "Quebec's Law 25 and Cookies," accessed Aug 31 2026, citing s.8.1 of Law 25). AI classification of an employee's outbound messages to decide whether to gate them plausibly constitutes exactly this kind of profiling of work performance. Quebec's labour law culture, including a strong tradition of employee representation and the Charter of Human Rights and Freedoms' privacy protections, adds further exposure. Verdict: needs work, specifically a Quebec-specific written notice satisfying s.8.1 before this feature can be deployed to a Quebec customer's staff, and needs counsel review of whether item (a), holding the complaint from the employee entirely, is defensible in Quebec at all.

Federal-sector employees (PIPEDA)

For federally regulated employers (a minority of trades businesses, but relevant if any customer is federally regulated, e.g., certain transport or telecom-adjacent trades), PIPEDA's meaningful consent standard applies to employee personal information differently than to customer data; I don't know the exact current PIPEDA employee-data consent standard well enough to state a firm position here, needs counsel.

3. European Union: GDPR Article 88 and works councils

GDPR Article 88 allows member states to adopt more specific rules to ensure the protection of employees' rights in the employment context, including monitoring systems. Germany implements this through Section 26 of the Federal Data Protection Act (BDSG). A German labour court (Hesse Regional Labour Court, decision dated 05/12/2024, case 5 TaBV 4/24) held that works councils do not have a mandatory co-determination right specifically over data protection provisions in a new IT system under Section 87(1) no. 6 of the Works Council Constitution Act, because GDPR Art. 88 and BDSG s.26(4) already govern the data protection content; a Conciliation Committee cannot insist on adding its own data protection terms (goerg.de, "No mandatory co-determination in relation to data protection," accessed Aug 31 2026). However, the same source notes the CJEU (Case C-65/23, judgment 19 December 2024) confirmed that any employer/works-council agreement under Art. 88 must not reduce the level of protection the GDPR itself guarantees. Practically, this means:

• Works council co-determination over the introduction of a new monitoring IT system generally still applies under Section 87(1) no. 6 for the system's introduction and operation (this is a broader right than the data-protection-content-specific point the 2024 ruling addressed); a German works council will very likely have a say before SMS Bridge's gating and classification features can be rolled out to German staff. This is my reading of the sourced material, not a verified full legal conclusion on the scope of co-determination for this specific product; needs German employment counsel.
• France has its own works council (CSE) consultation requirements before introducing employee monitoring technology, under the French Labour Code, and CNIL guidance on workplace monitoring generally requires proportionality, purpose limitation, and prior information to employees. I don't have current, dated 2024-2026 sourcing on French CSE requirements specific to a system like this, needs counsel.
• Both Germany and France require prior information to employees before monitoring begins, in addition to any works council process; the "employee never learns the complaint existed" design is likely to be viewed skeptically by a works council and by data protection authorities in both countries, because it looks like the introduction of a system to make an evaluative judgment about the employee that the employee cannot see, contest, or correct. This is a real risk to the European go-to-market for this feature specifically, distinct from ordinary GDPR consent questions. Verdict: needs work, likely requiring a materially different design for EU staff (for example, notifying the employee that a complaint was received and is under review, without necessarily forwarding the raw text) before this feature can be sold as-is into Germany or France.

4. United States: two-party consent states as an analogy, not a direct rule

US state wiretapping/eavesdropping statutes (commonly called "two-party" or "all-party" consent laws, for example Illinois' eavesdropping statute, 720 ILCS 5/14-2) generally govern the interception or recording of a communication by someone who is not a party to it, or without the consent of all parties, and are aimed principally at surreptitious recording, not at the ordinary business practice of an employer routing or storing messages sent through its own company-owned system. Because SMS Bridge routes messages through the company's own number and app, and the company is arguably itself a party to (or the platform for) the communication rather than a silent third party listening in, most two-party consent statutes probably do not apply directly to an employer reading its own company's business texts. This is an analogy, not a direct rule, and I have not verified this conclusion against case law applying two-party consent statutes to employer messaging systems specifically; needs counsel, particularly for California, Illinois, Florida, and other strict two-party states, since the analysis could differ if a court treats the employee as a "party" to the conversation who has not been told their outbound message is being read and held before delivery. Separately from wiretap law, most US states also apply general employee privacy and, in some states (California, Connecticut, Delaware, New York among others), specific electronic monitoring notice statutes that require an employer to give notice before monitoring employee electronic communications. I do not have a complete, current, state by state list of which US states have such notice statutes and their exact current requirements; needs counsel, this should be built out as a full 50-state matrix before launch if the product markets this feature aggressively in the US.

5. What we should require our customers to do

Because Customer, not Ino Tek Plus, is the employer of the technicians whose messages are gated, Customer bears the primary legal exposure for workplace monitoring compliance. We should:

1. Require, contractually, that Customer gives its own staff written notice before activating the Company Gate features, using something like the template in Section 6 below, adapted to local law.
2. Recommend, and where feasible require, that Customer obtain a signed acknowledgment from each employee before that employee's messages are gated, particularly in Quebec, Germany, and France where the "never learns it existed" design is highest risk.
3. Flag to Customer, explicitly, in onboarding, that this feature may require works council consultation in Germany and France, and that Customer should seek its own local employment counsel before enabling it for EU staff.
4. Consider, as a product decision (not a legal one I can make here), whether "the technician never learns it existed" should be a per-market configurable setting, defaulting to a lower risk mode (technician told a complaint was received and is under office review, without the raw text) in Quebec, Germany, and France, while allowing the fully silent mode where Customer's own counsel confirms it is defensible. This is a recommendation, not a legal conclusion, and the business should treat it as a build decision informed by the above research, not as legal advice that fully silent gating is unlawful everywhere; needs counsel and product decision.

6. Employee Notice and Consent template (ready to use, needs localization)

Customer should adapt and issue the following to every employee before their SMS Bridge account is activated. This is intentionally plain-language, not a fully drafted employment law instrument, and needs local law review, especially for Quebec, Germany, and France as flagged above.

Employee Notice: Company Texting System and the Company Gate

[Company name] uses SMS Bridge to manage all customer text messaging through our company phone number, [insert number]. This notice explains how it works and what it means for you.

1. You will send and receive customer texts through the SMS Bridge app, not your personal SMS app. Customer conversations belong to the company, not to your personal phone.
2. Inbound complaints may be held from you and sent straight to management. If a customer sends a message that our system identifies as a complaint about you or your work, that message will not be delivered to your device. It will go directly to [office/manager role] for review. [Choose one, based on Customer's configured mode and local law:] - (Silent mode) You will not automatically be told that this happened. - (Notice mode) You will be told that a complaint was received and is under review, though you may not see the customer's exact wording unless it becomes part of a formal review of your work.
3. Messages you send to a customer after a job is marked closed may be held for review before they are delivered. If you are no longer the assigned technician for a customer's job and you try to text that customer, your message will be queued and will not be sent until a manager (or our automated system, under manager-set rules) reviews and releases it.
4. This is a condition of using the company phone number and the SMS Bridge system. By using your SMS Bridge account, you acknowledge you have read and understood this notice.
5. Questions: direct any questions about this policy to [insert HR/manager contact], not to Ino Tek Plus Holding, since Ino Tek Plus provides the software but [Company name] is your employer and controls how it is configured.

Employee acknowledgment:

Name: ___ Signature: ___ Date: ___

Reminder: this notice template is a starting point, not a finished compliant instrument for any specific jurisdiction. It must be adapted with local employment counsel, particularly before use in Quebec, Germany, or France, and it should be adapted to reflect whichever gating mode (silent or notice) Customer's own counsel confirms is defensible in its jurisdiction.