Law 25, fully in effect since September 22, 2024, has redefined the framework within which a Quebec employer can interact with an employee’s personal phone. Even before discussing usage policies or productivity, it is this regulatory layer that conditions any decisions related to BYOD and workplace surveillance.
Law 25 and BYOD: Employer Obligations Regarding Personal Phones
Any company that asks an employee to install a work-related application on their personal device triggers a heavy compliance regime. The collection of personal information via a BYOD phone requires designating a person responsible for the protection of personal information, whose title and contact details must be published and easily accessible.
You may also like : Cloud computing in business: benefits, uses, and best practices to adopt
The employer must also keep a record of privacy incidents and notify the Commission d’accès à l’information (CAI) in case of a breach. We recommend not underestimating this aspect: an incident on a personal device, outside the company’s network perimeter, significantly complicates traceability and response.
When the project involves sharing personal information with third parties (application provider, cloud service), a privacy impact assessment (PIA) becomes mandatory. In practice, this means that an employer cannot simply ask their teams to download a messaging or scheduling tool on their cell phone without documenting the entire lifecycle of the collected data.
Related reading : Understanding Electric Shocks in the Head: Causes, Symptoms, and Effective Solutions
The issue of the employee’s right to refuse also arises directly. Many employers still confuse providing a tool with the obligation to use it. An employee who refuses to install an application on their personal phone is exercising a legitimate right.
The employer must then provide a dedicated device or find another process. To learn more about Décideur, the line between encouragement and coercion remains one of the most misunderstood points by managers.
Employee Privacy Rights and Surveillance Limits in Quebec
An employer cannot search an employee’s personal phone without their consent, even if the device is used on company premises. This principle stems from both the Civil Code of Quebec (respect for privacy) and the Charter of Human Rights and Freedoms.
Monitoring personal communications on a private device requires proportional justification. In practice, even in cases of doubt about abusive cell phone use during work hours, the employer can only resort to electronic surveillance (tracking software, geolocation) by demonstrating that less intrusive means have been attempted and proven insufficient.
- Collecting location data via an application installed on a personal phone requires explicit, free, and informed consent, not just a clause buried in an employment contract.
- Secretly recording conversations in the workplace, even by the employee themselves, raises issues of admissibility of evidence and may constitute an invasion of colleagues’ privacy.
- Any surveillance policy must be communicated in writing to employees before its implementation, or else the evidence collected may be deemed inadmissible in an administrative tribunal.
We observe that several Quebec organizations use mobile device management (MDM) tools without realizing that their deployment on a personal phone requires the same level of compliance as a formal surveillance system.
Cell Phone Usage Policy at Work: What the Law Actually Allows to Prohibit
The employer holds a management right that allows them to regulate the use of personal phones during work hours. A total ban on personal cell phones remains legal in Quebec, provided it is justified by security, confidentiality, or proper functioning of the business.
On the other hand, a policy that would prohibit all access to phones, including during breaks, would encounter a proportionality issue. Quebec arbitration courts have historically required that restrictions be reasonable and applied uniformly.
Minimal Content of a Compliant Policy
A company policy on cell phones must specify the times and areas where usage is restricted, exceptions (family emergencies, medical calls), and applicable sanctions in case of violations. The absence of a written policy significantly weakens the employer’s position in case of a grievance or dispute before the Administrative Labour Tribunal.
The disciplinary aspect deserves special attention. An employer who penalizes an employee for excessive cell phone use without having previously communicated clear rules risks having the measure overturned. The progressive nature of sanctions (verbal warning, written warning, suspension, dismissal) remains the expected norm by arbitrators.
Workplace Safety and Personal Phones: Shared Responsibility
In sectors where physical safety is at stake (construction, manufacturing, transportation), banning cell phones during high-risk tasks falls not only under management rights but also under the employer’s legal obligation to ensure a safe work environment under the Occupational Health and Safety Act.
The employee also has obligations. Using a personal phone in a danger zone constitutes a breach of their duty of care. Health and safety committees are increasingly incorporating cell phone use into their risk analyses, on par with personal protective equipment.
- The employer must identify positions and areas where the phone poses a real risk (proximity to machinery, vehicle operation, handling of substances).
- The safety policy must be distinct from the general cell phone usage policy to avoid any confusion about the nature of the prohibition.
- An accident occurring while the employee was using their personal phone may have consequences on compensation by the CNESST if negligence is established.
Personal phones at work in Quebec sit at the intersection of management rights, personal information protection, and health and safety. Since the full implementation of Law 25, any organization that touches, directly or indirectly, on its employees’ personal devices carries a compliance burden that far exceeds merely drafting an internal policy posted in the break room.