Tata Consultancy Services (TCS) has reportedly deployed a Digital User Experience Monitoring tool on company-issued laptops. It has triggered a workplace dilemma: Where does cybersecurity end and employee surveillance begin? The reported deployment has raised concerns over the extent to which the technology can track employees’ activities and what happens to the information collected from their devices. According to various media reports, the tool can provide visibility into applications accessed on employee laptops and the amount of time spent on them.While the development is pivotal because TCS has a workforce running into hundreds of thousands of employees, making any technology deployed across its corporate devices a matter of considerable scale.
TCS laptop monitoring tool raises surveillance concerns
Digital monitoring tools are not new to corporate workplaces. Companies increasingly use software to monitor the health and performance of their IT infrastructure, detect security risks, identify unusual activity, and understand how devices are being used.However, the reported TCS deployment has raised a different question: whether a tool designed to monitor the digital experience of employees is also providing the company with a window into their day-to-day work patterns.Sources cited in the report said the software can show which applications are being accessed and how much time employees spend on them. That capability has naturally raised questions about whether the primary objective is cybersecurity, operational visibility, employee productivity tracking or a combination of these purposes.The distinction matters. Monitoring a device for malware, unauthorised access or suspicious activity is fundamentally different from tracking how long an individual employee spends on a particular application.
Data security versus employee tracking
TCS has a legitimate reason to maintain strong controls over devices used by its workforce. The company handles sensitive information belonging to clients across sectors and geographies.Its publicly available security policy states that protecting business-sensitive information, including personal information, is critical to the company’s and its clients’ interests. TCS also says its security framework includes controls covering information security, cybersecurity, and personnel security.From that perspective, monitoring company-owned laptops can be part of a broader cybersecurity strategy. Organisations need to know whether devices are being compromised, whether sensitive information is being exposed and whether unusual activity is taking place on corporate systems.The concern begins when the same technology collects information that goes beyond what is necessary to protect systems.For employees, the crucial questions are therefore not simply whether monitoring exists, but what exactly is being monitored, why it is being collected, how long it is retained, and who can access it.
What remains unclear
One of the biggest issues surrounding the reported deployment is the lack of publicly available details about the technology.TCS has reportedly not clarified the name of the software vendor, the precise capabilities of the tool, the categories of employee data being collected, or which individuals or departments within the company can access that information.Without those details, it is difficult to determine the actual extent of the monitoring.For instance, there is a significant difference between recording basic application usage statistics and monitoring detailed user behaviour. Similarly, knowing that an employee opened an application is different from having access to the content viewed or entered into that application.That distinction will be central to the debate around the reported deployment.
A wider workplace surveillance debate
The TCS development also comes at a time when employee monitoring is becoming increasingly common across digitally enabled workplaces.As remote and hybrid working expanded, companies began relying more heavily on software-based systems to understand how employees interact with corporate devices and networks. Monitoring technologies can track productivity indicators, application usage, communications, and other digital activity, depending on their configuration.The technology has created a difficult balancing act for employers.Companies argue that monitoring is necessary to protect confidential information, comply with security requirements, and ensure that corporate systems are not misused. Employees, on the other hand, can reasonably expect transparency about what information is being collected about them while they work.The issue becomes even more sensitive when monitoring systems are capable of generating detailed behavioural records.
Why transparency will matter
The immediate question for TCS employees is likely to be one of transparency.If the tool is primarily intended to strengthen cybersecurity, the company can explain what security risks it is designed to detect and what information is necessary for that purpose. If application usage data is being collected for operational reasons, employees would reasonably want to know how that information is used and whether it can influence performance assessments.Clear boundaries can make a significant difference. Employees also need clarity on whether the monitoring operates only during working hours, whether it remains active when a laptop is being used outside office hours, what information is retained and how access to that information is controlled.These are not merely technical questions. They go to the heart of trust between an employer and its workforce.
TCS has not publicly explained the reported deployment
As of the latest reports, TCS had not publicly provided detailed clarification on the reported monitoring system, including its vendor, scope, and data-access arrangements.The company’s existing security policy, however, makes clear that information protection and cybersecurity are central to its operations. TCS says its security framework applies globally to associates and others with access to its infrastructure, IT systems, and information resources.The reported laptop monitoring therefore sits at an important intersection of two corporate priorities: protecting valuable digital assets and maintaining employee confidence.For now, the technology itself is not necessarily proof of intrusive surveillance. The more consequential issue is how it is configured, what data it captures and how that data is ultimately used.As companies become increasingly dependent on digital workplaces, that distinction will only become more important. For TCS, the next step may be less about the existence of monitoring and more about explaining its boundaries to the nearly six lakh employees who could be affected by it.
