Digital Disconnection: A Legal Obligation That Many Companies Are Ignoring
Advisory to companies on the right to digital disconnection: mandatory policies, Art. 18 Law 10/2021, GDPR Art. 88 and protection against employment claims.
Why the right to digital disconnection is a mandatory legal obligation that Labour Inspectors actively enforce
Our digital disconnection policy design and implementation process
Compliance diagnostic
We audit the current position: existence and content of the disconnection policy, working time register, technology tools in use and applicable collective agreement to determine the specific obligations.
Drafting the digital disconnection policy
We draft the policy in accordance with Art. 18 Law 10/2021 and Art. 88 GDPR: definition of working hours, authorised channels and timetables, response obligations and technical measures for blocking or notifying outside working hours.
Negotiation and validation with workers' representatives
Where the company has legal workers' representatives, we facilitate the negotiation of the protocol, ensuring that the final text complies with the law and has the backing of both parties.
Implementation and training
We implement the policy across corporate systems, train managers and employees on its practical application, and integrate it with the psychosocial risk prevention protocol.
The challenge
Law 10/2021 on remote work requires all companies with teleworking employees to have a digital disconnection policy, but more than 60% of companies with telework employees either lack one or have an outdated version. The absence of a policy exposes the company to employment claims for unregistered overtime, Labour Inspectorate sanctions and contingencies in relation to psychosocial risk prevention.
Our solution
We audit digital disconnection compliance, draft the mandatory policy in accordance with Art. 18 of Law 10/2021 and Art. 88 of the GDPR, negotiate it with the workers' representatives where required, and integrate it with the working time register and the psychosocial risk prevention protocols.
The right to digital disconnection in the workplace is recognised in Spain by Article 88 of Organic Law 3/2018 on Data Protection (LOPDGDD — Ley Orgánica de Protección de Datos y Garantía de Derechos Digitales), which establishes it as a right of workers not to attend to professional digital communications outside their working hours. This right is complemented by Article 18 of Law 10/2021 on remote work, which requires companies with teleworking employees to develop an internal digital disconnection policy — negotiated with workers' representatives where they exist — delimiting working hours, authorised channels and technical supporting measures. Article 88 of the GDPR supports this right within the European framework, recognising Member States' competence to regulate it through legislation and collective bargaining. The absence of a policy or non-compliance may give rise to employment claims for unpaid overtime, Labour Inspectorate sanctions and psychosocial risk prevention contingencies.
Digital disconnection has moved from a theoretical debate about workplace wellbeing to a legally enforceable obligation with real financial consequences for companies that disregard it.
Why digital disconnection is no longer optional for Spanish companies
The massive expansion of telework from 2020 onwards highlighted a reality that many companies preferred to ignore: when work enters the home, the working day loses its boundaries. Employees respond to emails at eleven at night, attend to WhatsApp messages on Sundays and join video calls at times that exceed their contractual working hours.
The Spanish legislature responded with Law 10/2021 on remote work, which established the obligation for companies with teleworking employees to develop a formal digital disconnection policy. But three years after its entry into force, more than 60% of companies with teleworking employees still lack an adequate policy, either through lack of awareness or on the assumption that compliance is not a priority until the inspection arrives.
When the inspection arrives, it does not come alone. It brings with it the possibility of TRLISOS serious infraction sanctions, employment claims from employees who have been permanently reachable without compensation, and psychosocial risk contingencies if the risk assessment for the telework role does not include preventive measures against information overload and hyperconnectivity.
How we implement the digital disconnection policy in your company
Our process begins with a diagnostic of the actual position: what communication tools the company uses, at what times effective out-of-hours exchanges take place, what the applicable collective agreement provides, and what has been formalised to date. This diagnostic is necessary because the disconnection policy is not a generic document: it must be adapted to the sector, the type of working arrangement and the specific organisation of each company.
From the diagnostic, we draft the policy in accordance with Art. 18 of Law 10/2021: definition of working hours, authorised communication channels and timetables, differentiated treatment for genuine emergencies, managers’ obligations regarding the reachability of their teams, and technical supporting measures where the company has them available (out-of-hours auto-replies, scheduled notification blocking).
Where the company has legal workers’ representatives, we facilitate the consultation or collective bargaining process required by law. Where there are no representatives, the policy can be adopted as a company-wide rule of general application, with appropriate communication to all employees.
Integration with data protection obligations is relevant where the company monitors the use of corporate devices: the processing of data about employees’ out-of-hours activity has GDPR implications that must be managed jointly.
Regulatory framework: Law 10/2021, LOPDGDD and GDPR
The right to digital disconnection has a triple statutory basis in Spain:
Article 88 LOPDGDD (Organic Law 3/2018): establishes the general right to digital disconnection for all workers and public employees, regardless of whether they work remotely. Collective agreements or, in their absence, company agreements, are to establish the modalities of exercise of this right.
Article 18 of Law 10/2021 on remote work: for companies with remote workers (minimum 30% of working time), requires the development of an internal disconnection policy negotiated with workers’ representatives where they exist. This policy must be part of the telework agreement or a separate reference document.
Article 88 GDPR: supports the national regulation of the use of digital devices in the employment context, including the protection of privacy and the right to rest, recognising Member States’ competence to establish specific rules through legislation and collective bargaining.
The interaction between these three frameworks determines the specific obligations of each company, which vary according to the sector, the applicable collective agreement and the structure of working hours.
Digital disconnection and psychosocial risk prevention
Permanent hyperconnectivity is a recognised psychosocial risk factor that can give rise to occupational stress, burnout and anxiety disorders. The Occupational Risk Prevention Act requires companies to identify, assess and control all workplace risks, including psychosocial risks.
For telework roles, the risk assessment must specifically include the risks deriving from permanent connectivity: isolation, difficulty switching off, uncontrolled extension of working hours and difficulties in reconciling work and personal life. The digital disconnection policy is, in this context, not merely a formal compliance exercise but a preventive measure that reduces exposure to psychosocial risk.
Companies that integrate digital disconnection into their risk prevention system are in a considerably stronger position in the face of claims for work-related stress conditions, which are a growing source of litigation before the Social Courts.
Regulatory compliance obligations at a glance
| Obligation | Statutory basis | Consequence of non-compliance |
|---|---|---|
| Internal disconnection policy | Art. 88 LOPDGDD | Labour infraction LISOS (up to €7,500) |
| Negotiation with workers’ representatives | Art. 88.3 LOPDGDD | Policy nullity if negotiation omitted |
| Telework agreement with disconnection provision | Art. 18 Law 10/2021 | Serious LISOS infraction (€751–€7,500) |
| Working time register | Art. 34.9 Workers’ Statute | Serious LISOS infraction + liability for unpaid overtime |
| Training and awareness | Art. 88.3 LOPDGDD | Liability in the event of an employment claim |
This service is part of our employment law advisory practice.
The experience behind our work
We had been running telework since 2020 without a formal disconnection policy. BMC audited our position, drafted the policy within a week and negotiated it with our works council. We closed the Labour Inspectorate file without any sanction.
Experienced team with local insight and international reach
Concrete deliverables
Digital disconnection compliance audit
Diagnostic of the current position: existence and adequacy of the policy, applicable collective agreement, technology tools in use, working time register and overtime protocol.
Digital disconnection policy drafting
Preparation of the document in accordance with Art. 18 Law 10/2021 and Art. 88 GDPR/LOPDGDD, adapted to the company's specific sector, size and organisation.
Negotiation with workers' representatives
Legal support for the consultation or negotiation process with the works council, worker delegates or trade union representatives where required by law.
Training for managers and employees
Training sessions adapted to different levels within the organisation: executives, line managers and teleworking employees, with supporting materials and responsible device-use guidance.
Analysis and perspectives
Frequently asked questions
Does this apply to your business?
Answer in under 30 seconds to see whether this service fits your business before getting in touch.
Does your company have a written and approved digital disconnection policy in accordance with Law 10/2021?
Do your teleworking employees receive messages or emails outside their registered working hours?
Have you integrated the disconnection policy into your psychosocial risk prevention plan?
Do you know what digital disconnection provisions your applicable sectoral collective agreement may contain?
0 of 4 questions answered
Start with a free diagnostic
Our team of specialists, with deep knowledge of the Spanish and European market, will guide you from day one.
Right to Digital Disconnection
Employment
First step
Start with a free diagnostic
Our team of specialists, with deep knowledge of the Spanish and European market, will guide you from day one.
Request your diagnostic
You may also be interested in
Employment Law for Businesses
Comprehensive employment law advisory to protect your company and ensure regulatory compliance in all people matters.
Saber másEconomically Dependent Self-Employed (TRADE)
Registration, contract and protection of the TRADE status: compliance with LETA Law 20/2007, mandatory contracts with the principal client and defence before the Labour Inspectorate.
Saber másEmployment Law
Comprehensive employment law services that protect your business and ensure compliance with Spanish labour regulations.
Saber másData Protection & Privacy
GDPR and LOPDGDD compliance, outsourced DPO, and comprehensive privacy management for businesses.
Saber másData Protection & Privacy
GDPR and LOPDGDD compliance, outsourced DPO, and comprehensive privacy management for businesses.
Saber másEmployment Compliance
Comprehensive employment compliance programme: working-time registration, equality plans, pay transparency, harassment protocols, remote work agreements, and labour inspection defence.
Saber másTalk to the partner in charge
Response within 24 business hours. First meeting free.