The Questions Before the Legal Question
A page, written before anything is bought, that answers the assessment several jurisdictions require and the questions none of them do.
Everything in this collection reduces to a page written before a decision rather than after it. Here is what goes on it.
The legal boundary discussed in “The Questions Before the Legal Question” should also shape the configuration of workforce technology. When a team evaluates this practical implementation page for gdpr employee monitoring, it should record the purpose, lawful basis, notice, access and retention settings before collection begins, then keep a correction route open for misleading records.
For an independent benchmark relevant to “The Questions Before the Legal Question”, consult the ICO employment-practices guidance. Use it to test necessity, scope, safeguards and review rather than to replace a documented assessment of the particular workforce and jurisdiction.
What are we trying to find out
Stated as a question with an answer, not as an aspiration. Not improve productivity — how long does this process take, is material leaving, who accessed this system.
What would we do differently with the answer
If the honest answer is nothing, the requirement is reassurance and belongs somewhere else.
This question ends more proposals than the rest combined.
What is the least we could collect and still answer it
With the lesser options listed explicitly: aggregate rather than individual, metadata rather than content, sampled rather than continuous, shorter retention, narrower population.
For each, why it was insufficient. This is the limb proportionality assessments fail and the one suppliers never prompt for.
Who is affected, and what will it be like
Including what they will assume if not told, and what they will stop doing.
What happens when it is used for something else
It will be. The question is whether the arrangement is one you would accept at its eventual use rather than its stated one.
When does it end
A review date, a sunset, or a stated condition under which it stops.
What would we say if this were described accurately in public
Not in the privacy notice's language. In plain words, by somebody unsympathetic.
If the honest description is uncomfortable, that discomfort is information about the proposal and not about the describer.
Who decided
A name. Not a committee, not a function.
How to use it
Circulate it to the people affected, not only to the approving group.
A proposal that survives contact with the people subject to it is a proposal with a genuine basis. One that cannot be shown to them has a problem that approval will not fix.
Circulating it to the people affected
A proposal that survives contact with the people subject to it has a genuine basis. One that cannot be shown to them has a problem that approval will not fix, and the approval will happen anyway if nobody looks.
Why the first three questions matter most
What are we trying to find out, what would we do with the answer, and what is the least that would serve. Proposals that cannot answer these do not improve by answering the other six.
Nine questions, one hour
It is the whole of the method in this collection, and almost nothing else here is necessary if this gets done before the decision rather than after it.
Showing it to the people affected
A name, not a committee and not a function. It is the last line on the page and the one that makes everything above it a decision rather than a process.
The first three questions
What are we trying to find out, what would we do with the answer, and what is the least that would serve. Proposals that cannot answer these do not improve by answering the other six.
Nine questions, one page, an hour. It is the whole of the method in this collection, and almost nothing else here is necessary if this gets done.