Google, Meta, and Microsoft are receiving employee data collected by workplace monitoring software known as "bossware" [1, 2].
This discovery highlights a growing privacy gap where data gathered for employer oversight is repurposed for commercial gain. The flow of information from the workplace to advertising giants suggests that employees have little control over their professional digital footprint.
Researchers at Northeastern University conducted the study, which focused on monitoring software used within the U.S. [1]. The findings indicate that these tools do more than track productivity for managers; they transmit work-hour and activity data to third-party platforms.
These platforms include advertising networks, and data brokers [1, 2]. By acquiring this information, big-tech firms can augment their existing user profiles with granular details about how individuals spend their working hours.
Bossware typically monitors keystrokes, screen activity, and time spent on specific applications. While employers implement these tools to ensure efficiency, the data often exits the corporate ecosystem to enter the broader data-brokerage market [1].
This pipeline allows companies like Meta and Google to link professional behaviors to personal identities. The study suggests that the integration of workplace surveillance and ad-tech creates a comprehensive map of user activity that spans both private and professional spheres [2].
Neither Google, Meta, nor Microsoft provided immediate comment on the specific mechanisms used to acquire this data. The researchers said that the transmission of this data often occurs in the background without explicit consent from the workers being monitored [1].
“Employers implement these tools to ensure efficiency, but the data often exits the corporate ecosystem.”
The findings suggest a convergence between corporate surveillance and the surveillance capitalism model. When productivity tools act as data conduits for advertising platforms, the traditional boundary between an employee's professional obligations and their personal privacy disappears. This creates a systemic risk where workplace performance data could potentially influence consumer profiling or future employability via third-party data brokers.
