The Laundering · Vol. III · Case 02 · The watching that turns on after you are hired

Standard Practice

In June 2026 TD told staff in one division that it would switch on software to track how they spend the working day, and described the tool as a way to "regain transparency" and as "standard practice across the industry." The same month, the federal government's privacy-modernization bill went to the House of Commons, borrowing from Europe's data law and adding a new regulator, and, as one of the country's best-known privacy scholars pointed out, the word "surveillance" does not appear anywhere in its employment provisions. This case reads how a new exposure is filed as ordinary management while the reform that looks like its answer is silent on it. This is Volume III: the power that turns on once you are inside, and cannot cheaply leave.
On scope & care This case reads a structure, not a villain. What TD deployed is reported: Reuters reviewed a recording of a team call and an internal document; the specifics of the tool and its framing are carried as that reporting, attributed, not as our own audit of the software. The employees' fears, of layoffs, of being managed by a dashboard, of being replaced by the system, are real concerns voiced anonymously, and carried as concerns, never as established fact. Nothing here says any of this is unlawful; the point is the opposite, that it is lawful, and that the lawfulness is the story. The bank is not the subject; it says the practice is industry-standard, and that is precisely the case. The subject is the gap in the law and the words that fill it. The legal experts named, the bill's contents, and the parliamentary record are flagged verified; the reporting on TD and the employee reaction is flagged reported; the structural reading is flagged analysis.

A worker cannot read a contract the way a buyer can. The buyer of a camera network in the first case of this volume could, in principle, have walked away before signing; a person with a job and rent cannot cheaply walk away from the desk. That is the asymmetry Volume III is about, and the workplace is where it is sharpest. In June 2026 a Canadian bank told some of its staff it would begin watching how they spend their time at work, software logging the minutes on browsers, on chat, in meetings, and described the watching with two words that do a great deal of work: "transparency" and "standard." In the same weeks, the government tabled a bill to modernise privacy, the kind of law that, read from the headline, sounds like the answer to exactly this. It is not the answer to exactly this. The word for what the bank is doing does not appear in it. This case is about the distance between those two facts, and the words laid across it.

§01 · What the bank turned on

Begin with what was switched on, and where. In mid-June 2026, TD told employees in its financial-crimes and risk-management division that it would deploy WorkiQ, a workforce-analytics tool made by the firm ActiveOps, to track the time staff spend on web browsers, on internal chat and messaging, and in meeting applications. Reuters reported the deployment from a recording of a team call and an internal frequently-asked-questions document; the bank's own framing, in that document, was that the tool would help managers "regain transparency lost in a remote work environment," and, in a later statement, that monitoring was "standard practice across the industry" and let managers "more accurately manage workflows, team capacity and performance." A reported detail catches the texture of it: the software registers that an employee is working in a spreadsheet, but not what they are doing inside it. The surface of the day is logged; the work itself is not the point.reported

It did not land as neutral. Employees on the call and afterward raised privacy, asked what exactly would be captured, and asked whether the data could be turned to performance management; others, anonymously, named the fears that attach to any new instrument of measurement, of layoffs, of micromanagement, of being trained against by the system and then replaced by it. Those fears are reported here as fears, not findings. And TD is not alone, which is the first sign that the subject is larger than one bank: in the same month, by Reuters' account, Meta was dialing back a plan to harvest employees' mouse movements and keystrokes as training data for artificial intelligence after staff pushback, and JPMorgan had begun tracking the hours of its junior bankers, the bank said, for their own well-being.reported

§02 · The vocabulary

Read the words the bank chose, because the words are the first move. The tool is never named surveillance. It "regains transparency." It helps "manage workflows, team capacity and performance." It is "standard practice." At a rival, the same kind of monitoring is done "for their own well-being." Each phrase relocates the act out of the register of watching and into the register of management and care, where it is not only defensible but virtuous: a manager who fails to "manage team capacity" is negligent, not restrained.analysis

Look hardest at "transparency," because it inverts cleanly. Transparency is ordinarily a demand made of the powerful by the less powerful: show us the books, the data, the decision. Here it is turned around. The tool makes the worker transparent to the manager, and gives the manager nothing back; the worker cannot see the dashboard their minutes feed, cannot see the weighting, cannot see who reads it or to what end. What is called "regaining transparency" is the removal of the worker's opacity, which is to say the small privacy of a working day. The word names the opposite of what the instrument does, and that is the work the word is hired to do. This is the definitional move this series has filed before, the connected car sold as a possession that turns out to be a data platform in Case 30 · The Asset; here the possession is one's own working time.analysis

§03 · Consent without refusal

The first answer offered to all of this is consent: tell people, and it is fine. A lawyer quoted in the reporting put the doctrine more plainly than any statute does.

The employer could say outright that they're using it for performance evaluations, and as long as they're upfront about it, there's nothing the employees can do about it.Brent Arnold, partner, INQ Law · reported

Hold that sentence against the relationship it describes. Notice is the safeguard, and notice is given to someone who cannot meaningfully refuse it. To say no to the monitoring is to say no to the job, and the person with rent does not have that as a real option; the asymmetry of the workplace is exactly that one party can set the terms of presence and the other can only leave. So "being upfront" does not protect the worker, it legitimises the watching: the disclosure that the law treats as a consumer's shield becomes, in the employment relation, the employer's permission slip. Transparency about the surveillance is offered in place of any limit on it. This is the captive relation named in Case 28 · The Partner and Case 04 · The Captive Class, read at the desk: a "consent" given by someone who cannot say no is not consent doing the work the word implies.analysis

§04 · The word not in the bill

Here is the spine, and it is the most precise part of the case, because it can be checked against a text. In the same span of weeks that the bank switched on its tool, the government introduced its long-promised privacy reform: on the fifteenth of June 2026 the Minister of Artificial Intelligence and Digital Innovation tabled Bill C-36, the Protecting Privacy and Consumer Data Act, which borrows from Europe's General Data Protection Regulation, adds penalties, and creates a new federal regulator, the Digital Safety and Data Protection Commission, to replace the Office of the Privacy Commissioner. Read from the press release, it is the answer to a season of headlines about workplace tracking.verified

Read from the text, it is not. The law professor Michael Geist, reading the bill, found the silence and named it exactly:

It contains no rule addressing electronic monitoring of employees, no notice or consent requirement specific to tracking software, keystroke logging, or productivity monitoring, and the word "surveillance" does not appear anywhere in its employment provisions.Michael Geist, University of Ottawa · verified

A second scholar put the consequence in one line. "There is basically no specific safeguard that would help employees push back against these invasive practices," said Valerio De Stefano of Osgoode Hall, who added that employee monitoring "has not been on the government's radar."verified So the reform that looks, from its title, like the remedy is silent on the harm in the week's news; it modernises the parts of privacy that touch the consumer and leaves the part that touches the worker untouched, the word that would name it absent from its employment provisions. That is the laundering, and it needs no bad faith to work: a real new exposure is filed as ordinary management by the employer, and the law that would name it simply does not, so the gap is left looking like coverage. It is the same office, renamed and overloaded, that this series filed in Case 52 · The Merged Office and The Convergence; here the merger's blind spot has a name and a date.analysis

§05 · The asymmetry, once you are inside

Step back to the volume's through-line. The first case watched a contract harden after a city had installed the cameras and could no longer cheaply walk away. This one watches an instrument switch on after a person has taken the job and cannot cheaply walk away either. The shape is the same: the asymmetry does not announce itself at the threshold, when you might still decline. It activates afterward, once you are inside and dependent, when declining costs your rent. The buyer becomes a captive; the new hire becomes the watched. The protection a reasonable person would want at that moment, a contract that cannot be rewritten over your head, a law that names the watching and limits it, is the precise thing that is not there.analysis

And the words do the rest. "Transparency," "standard practice," "well-being," "regain": each tells the person inside that what is happening to them is normal, mutual, even kind, and that to object is to be the unreasonable one. The contract in the first case was altered by the party that controlled the document. The workday in this one is opened by the party that controls the room, and the law that might have closed it back simply has nothing to say. Volume III is the study of that moment, after the signature, after the hire, when the terms turn and the floor that should be under you turns out to have a hole in it exactly your size.analysis

The asymmetry never shows at the door. It turns on once you are inside, and cannot cheaply leave.

§06 · What this case is not

The series audits its own instinct here, because a surveillance story is easy to overstate.

It is not a claim that the monitoring is illegal. It is lawful, and that is the entire point; the case is about a gap in the law, not a breach of it, and the remedy it implies is a rule that does not yet exist, not a prosecution.

It is not a claim that TD is a uniquely bad actor. The bank says the practice is standard across the industry, and the reporting on Meta and JPMorgan suggests it is right; treating one named employer as the villain would miss the structure, which is exactly that this is becoming ordinary. The bank is the instance, the law is the subject.

It is not a claim that any worker will be laid off, downgraded, or replaced because of the tool. Those are the employees' stated fears, carried as fears; the case rests on what the instrument is and what the law omits, not on a predicted harm.

It is not a claim that all measurement is surveillance, or that an employer may know nothing about its operations. The argument is narrower and turns on three things that are documented: the renaming of watching as transparency, a notice that legitimises rather than limits because it is given to someone who cannot refuse, and a privacy reform whose own text, by a named scholar's reading, never says the word.

Stated plainly: a bank switched on software to watch how its staff spend the working day and called it regaining "transparency" and "standard practice"; the privacy bill that arrived the same month, modelled on Europe's, says nothing about electronic monitoring and never uses the word "surveillance" in its employment provisions; and the only safeguard on offer, notice, is given to people who cannot refuse it. A new exposure is filed as management while the reform that looks like its answer stays silent. What is laundered is the absence of a right, in the one place you cannot cheaply leave.
Companion reading. The contract altered after the customer is locked in is Case 01 · The Ratchet, this volume's anchor. The possession that turns out to be a data platform is Case 30 · The Asset. The privacy office merged and overloaded is Case 52 · The Merged Office. The captive relation a "choice" is offered inside is Case 04 · The Captive Class.

§ Circulate · Eight ways to file this

The watching turns on once you are inside, and cannot cheaply leave.

Pick a hook below. Each one is a different door into the same case.

▸ Field record · The Laundering · Vol. III · Case 02 · Standard Practice ▸ The watching turns on after you are hired. Keep the file open. A single structural claim, held: a new exposure, the routine electronic monitoring of how employees spend the working day, is filed as ordinary management by the employer and left unnamed by the privacy reform that arrives the same season, so the gap is made to look like coverage, in the one relationship the watched party cannot cheaply leave. Reported: in mid-June 2026 TD told employees in its financial-crimes and risk-management division it would deploy WorkiQ (by ActiveOps) to track time on browsers, internal chat and meeting apps, framing it as helping managers "regain transparency lost in a remote work environment" and, later, as "standard practice across the industry" that lets managers "manage workflows, team capacity and performance" (Reuters, from a team-call recording and an internal FAQ; the tool registers that a worker is in a spreadsheet but not what they do in it); employees raised privacy, performance-management and replacement concerns; in the same month Meta was dialing back collection of employee mouse movements and keystrokes as AI training data after pushback, and JPMorgan had begun tracking junior bankers' hours "for their own well-being." Verified: on 15 June 2026 the Minister of AI and Digital Innovation introduced Bill C-36, the Protecting Privacy and Consumer Data Act, modelled in part on the EU GDPR, creating a new Digital Safety and Data Protection Commission to replace the Office of the Privacy Commissioner; Michael Geist (University of Ottawa) found the bill "contains no rule addressing electronic monitoring of employees, no notice or consent requirement specific to tracking software, keystroke logging, or productivity monitoring, and the word 'surveillance' does not appear anywhere in its employment provisions"; Valerio De Stefano (Osgoode Hall) said there is "basically no specific safeguard that would help employees push back" and that monitoring "has not been on the government's radar"; Brent Arnold (INQ Law) said an employer "could say outright that they're using it for performance evaluations, and as long as they're upfront about it, there's nothing the employees can do about it." The move: the vocabulary (watching renamed transparency, management, standard practice, well-being), the hollow consent (notice as the only safeguard, given to someone who cannot refuse and keep the job, so it legitimises rather than limits), and the silent reform (a privacy modernisation that omits the harm in the week's news). What is laundered is the absence of a right. Gate: not a claim of illegality, the lawfulness is the point; not a claim TD is uniquely culpable, it calls the practice industry-standard and the case agrees that is the structure; employee fears of layoffs or AI replacement carried as fears, not findings; not a claim that all measurement is surveillance; mechanism, not motive. Kin: Case 01 (the contract that hardens after you depend), Case 30 (the possession that studies you), Case 52 / The Convergence (the merged, overloaded privacy office), Case 28 and Case 04 (the captive relation).