Can an employer use AI to read its employees' Slack and Teams messages to diagnose their stress levels? Under the EU AI Act, that sounds like a clear violation of the ban on workplace emotion recognition. Yet, one AI company, Myndoor, just survived a regulatory investigation by the Italian Data Protection Authority (the Garante) for doing exactly that.

In this episode, Robert dives into this fascinating ruling to explore how Myndoor legally bypassed the AI Act's Article 5 prohibitions through a clever ”employee perk” structure. However, escaping the outright ban didn't get them off the hook entirely. We discuss why this tool is still classified as a ”High-Risk” AI system, the strict transparency and human oversight requirements it faces, and the critical flaw in its ”aggregate reporting” feature that ultimately earned the company a formal warning from the regulator.

If you are navigating the intersection of privacy, employment law, and the new EU AI Act, this is a must-listen case study on the dangers of indirect re-identification and algorithmic ”black boxes.”

Key Takeaways:

The Myndoor System: How the AI plug-in uses semantic and linguistic analysis (sentiment analysis) to infer employee psychological stress based on workplace chat messages.

The Article 5 Ban: Why the AI Act strictly prohibits the use of AI to infer the emotions of a natural person in the workplace, and how Myndoor structured its data flows to keep the employer locked out and avoid this prohibition.

High-Risk AI Obligations: Why dodging the ban doesn't mean dodging the AI Act. We break down Myndoor's obligations under Article 13 (Transparency) and Article 14 (Human Oversight) to protect users from opaque, biased algorithms.

The ”Aggregate Data” Trap: Why the Garante issued a formal warning regarding Myndoor's weekly stress reports, and how the risk of ”indirect re-identification” (or single-out) could cause the legal firewall to collapse.

Mentioned in this Episode:

The Garante Decision: Provision of 14 May 2026 [Web Doc No. 10255494] regarding Myndoor Srl.

The EU AI Act (Regulation (EU) 2024/1689): Specifically referencing Article 5 (Prohibited AI Practices), Article 13 (Transparency), and Article 14 (Human Oversight).

GDPR & Italian Labor Law: The intersection of data minimization, worker dignity, and the prohibition of employer-led health assessments.

Subscribe & Follow:

If you enjoyed this episode, please subscribe to The Privacy Partnership Podcast on Apple Podcasts, Spotify, or your favorite podcast app.

Connect with Robert Bateman on LinkedIn for more daily insights on privacy, data protection, and AI governance.