{"site":{"name":"Koji","description":"AI-native customer research platform that helps teams conduct, analyze, and synthesize customer interviews at scale.","url":"https://www.koji.so","contentTypes":["blog","documentation"],"lastUpdated":"2026-08-03T18:56:42.904Z"},"content":[{"type":"documentation","id":"91ca94c6-8675-4b35-be0b-86234abb787f","slug":"works-council-employee-research","title":"Works Councils and Employee Research: How to Run Employee Studies in Germany and the EU","url":"https://www.koji.so/docs/works-council-employee-research","summary":"In Germany, employee research engages full works council co-determination under section 87(1) No. 6 BetrVG, which is triggered by a technical system being objectively suitable for monitoring rather than by employer intent; bypassing it can render the measure void and expose the employer to an injunction. Separately, employee consent is generally not a valid GDPR basis because the EDPB treats the employment power imbalance as preventing freely given consent, so legitimate interests plus safeguards written into a works agreement (Betriebsvereinbarung) is the workable route, with Article 88 GDPR national rules layered on top. The unlock is architectural anonymity: no individual-level output, a suppression threshold of 5 to 10 per reporting cell, restrictions on cross-tabulation stacking, agreed verbatim de-identification, no non-respondent tracking, defined retention and a named access list. A works agreement should cover twelve items including explicit AI disclosure and a written commitment that no output is attributed to an individual. Consulting the works council before tool selection, and piloting to show the real report format, compresses a six-week negotiation to roughly two.","content":"**Answer first: in Germany and much of continental Europe, launching an employee survey without involving the works council can make the measure legally void, and the consent form you would use for customer research is the wrong instrument entirely — because employee consent is generally not considered freely given.** Those are the two facts that surprise most product and people teams, usually a week before launch. The good news is that both problems have the same solution: design the study so it genuinely cannot identify individuals, then get that design blessed in a works agreement before you send a single invitation.\n\nThis guide covers the co-determination trigger, why consent fails, what a works agreement should contain, the technical design that satisfies both, and the sequence that turns a six-week negotiation into a two-week one.\n\n## Why an employee survey is a co-determination matter\n\nUnder the German Works Constitution Act (Betriebsverfassungsgesetz, BetrVG), a works council holds three tiers of rights: information and hearing rights on personnel actions, consultation on economic changes, and **full co-determination on the social matters listed in §87**. Employee research usually lands squarely in that third tier.\n\nThe critical provision is **§87(1) No. 6**, which gives the works council full co-determination over the introduction and use of technical devices designed to monitor the behaviour or performance of employees. German labour courts read this expansively: it is enough that the system is *objectively suitable* for monitoring, whether or not you intend to use it that way. A platform that records who responded, when, from where, and stores free-text answers is objectively suitable. **§87(1) No. 1**, on matters of order and conduct in the establishment, is frequently engaged too, and the 2021 Works Council Modernisation Act explicitly extended council involvement into artificial intelligence and mobile working.\n\nFull co-determination means what it says. The employer cannot act unilaterally: the council must actively agree. If agreement cannot be reached, the matter goes to a conciliation board (Einigungsstelle), whose ruling replaces agreement. **If you bypass the right, the measure can be legally void, and the council can seek an injunction** — which in practice means the study stops, sometimes after you have already collected data you now cannot use.\n\nComparable structures exist elsewhere. The Netherlands gives works councils consent rights over personnel-data systems, France requires consultation of the CSE on measures affecting working conditions and monitoring, and multinational rollouts can additionally engage a European Works Council under the EWC Directive. The German analysis is the strictest and the most useful to design against.\n\n## Why employee consent is the wrong legal basis\n\nSeparately from labour law, the GDPR governs the data. The instinct is to collect consent. That instinct is wrong.\n\nThe European Data Protection Board has been consistent that, because of the **inherent imbalance of power** in an employment relationship, employee consent is unlikely to be freely given. Consent is only valid where a person can refuse or withdraw without detriment, and an employee asked by their employer to participate in a study is rarely in that position. Building your compliance case on consent means building it on a basis a regulator is predisposed to reject.\n\n**Article 88 GDPR** allows member states to make more specific rules for employment-context processing, and several — Germany, France, the Netherlands — have done so. That is why employee research in Europe is a national-law question layered on top of an EU-law question, and why a single pan-European template rarely survives contact with local counsel.\n\nThe practical consequence: rely on a basis that fits the situation — typically **legitimate interests** for genuinely voluntary, aggregate-only research, or a legal obligation where a survey is required by other law — and put the safeguards in the works agreement instead of in a consent checkbox. Where consent does appear, it should be for genuinely optional extras (agreeing to a follow-up conversation, agreeing to be quoted), never for participation itself.\n\n## Anonymity is a technical requirement, not a promise\n\nHere is the leverage point. Almost every objection a works council raises — monitoring, performance inference, retaliation risk, manager-level scrutiny — dissolves if the study is *architecturally* incapable of identifying individuals. Councils are not opposed to hearing from employees. They are opposed to a system that could be turned against them.\n\nA design that survives scrutiny does all of the following:\n\n| Safeguard | What it means concretely |\n|---|---|\n| No individual-level output | The employer never receives a per-person record, only aggregates |\n| Minimum reporting threshold | No breakdown is displayed below a floor — commonly 5 to 10 respondents per cell |\n| No cross-tabulation stacking | Filters cannot be combined until a group becomes identifiable by elimination |\n| Restricted demographics | Collect only the segments you will actually act on; drop the ones that triangulate |\n| Verbatim handling agreed in advance | Either free text is suppressed, or it is reviewed and de-identified before anyone in management sees it |\n| No response tracking to individuals | Reminders go to everyone, not to named non-respondents |\n| Defined retention | A deletion date for raw data, written into the agreement |\n| Named access list | Who can see what, agreed with the council — see [research data access controls](/docs/research-data-access-controls-audit-trail) |\n\nThe threshold rule is the one people underestimate. In a 900-person company, \"Engineering, Munich, women, senior\" is a group of four, and everyone in the room can name them. Suppression thresholds are what make an anonymity promise structurally true rather than merely sincere.\n\n## What belongs in the works agreement\n\nA Betriebsvereinbarung covering employee research should be specific enough that the council does not have to trust you and general enough that you do not renegotiate every quarter. Cover:\n\n1. **Purpose** — what you are trying to learn, and the explicit exclusion of performance assessment.\n2. **Scope and cadence** — which populations, how often, and a cap on frequency so employees are not surveyed weekly.\n3. **Voluntariness** — participation is voluntary and non-participation carries no consequence, stated in the invitation.\n4. **The tool** — named platform, where data is hosted, the processor agreement, and sub-processors.\n5. **Data categories** — exactly which fields are collected, including metadata such as timestamps and device information.\n6. **Anonymity architecture** — the suppression threshold, the cross-tab restrictions, and the ban on individual-level export.\n7. **Access** — who sees raw data, who sees aggregates, and how that is enforced and logged.\n8. **Verbatims** — the de-identification process, and who performs it.\n9. **AI processing** — if an AI conducts or analyses the interviews, say so plainly: what the model does, what it is not permitted to do, whether outputs feed any decision about an individual (they should not), and that a human reviews findings.\n10. **Retention and deletion** — dates, not intentions.\n11. **Council access to results** — councils routinely, and reasonably, want to see the same aggregate findings management sees.\n12. **Review and termination** — how the agreement is revisited.\n\nItem 9 is now the one that stalls negotiations. Councils have become alert to AI in the workplace, and the fastest way through is total specificity about what the AI does and a hard, written commitment that no output is ever attributed to or used against an individual.\n\n## Where Koji fits\n\nKoji's design happens to line up well with what a works council needs, because the platform was built for research rather than for management reporting.\n\nThe AI interviewer conducts a genuine conversation and probes follow-up questions, which is what makes an aggregate-only study worth running at all — the depth that normally requires a named facilitator arrives without one. Nobody in HR sits in the room, and nobody needs to listen back to identify a voice, because the analysis is automated. In practice this is easier to defend than a traditional focus group or a manager-led round of one-to-ones, where the person hearing the answer is the person writing the review.\n\nThe **six structured question types** — `open_ended`, `scale`, `single_choice`, `multiple_choice`, `ranking` and `yes_no` — matter here for a specific reason: the five non-open types produce aggregate values by construction. A study whose backbone is scales, choices and rankings, with open-ended probing on the questions that genuinely need reasoning, gives you a report that is largely composed of distributions rather than quotable text. That is a materially easier artefact to agree an anonymity architecture around than a pile of free-text responses.\n\nTeam access uses **owner, admin and member** roles with workspace scoping, so \"only these three named people can reach the study\" is an enforceable statement rather than a policy aspiration. Combine that with an agreed suppression threshold applied at reporting time and you have most of the technical safeguards the agreement will ask for.\n\nBe straightforward about the limits, too. Any system that collects responses holds metadata; the honest position with a works council is not \"nothing is recorded,\" it is \"here is exactly what is recorded, here is who can see it, here is when it is deleted, and here is why none of it can be resolved to a person in any output you or we receive.\"\n\n## The sequence that saves six weeks\n\nTeams lose time by building the study first and consulting the council last. Reverse it.\n\n| Week | Step |\n|---|---|\n| 0 | Brief the works council on the *intent* before choosing a tool. Councils object far less to being consulted early than to being presented with a finished plan |\n| 1 | Agree the anonymity architecture in principle — threshold, no individual output, no performance use |\n| 1–2 | Run the tool selection with the council informed; share the processor agreement and hosting details |\n| 2 | Draft the works agreement against the twelve items above |\n| 3 | Complete the data protection impact assessment where required, and align it with the agreement |\n| 3–4 | Sign, then pilot with a small volunteer group and show the council the actual output format |\n| 4+ | Launch, and share aggregate results with the council on the same timeline as management |\n\nThe pilot in week 3–4 is the highest-leverage step in the list. Showing a council the real report — visibly free of anything that could identify anyone — resolves more objections than any amount of written assurance.\n\n## Two failure modes to avoid\n\n**Running a \"quick pulse\" outside the agreement.** Small, informal surveys are exactly where co-determination gets bypassed, and they set a precedent that poisons the negotiation for the programme you actually care about. Bring the pulse inside the agreement's cadence clause instead.\n\n**Promising anonymity you cannot deliver.** If the survey has 30 respondents and you report by team, you have not run an anonymous study, whatever the invitation said. The credibility cost of one identifiable finding is years long — every future study gets lower participation and more guarded answers. See [anonymous employee research with AI interviews](/docs/anonymous-employee-research-ai-interviews) for the design detail.\n\n## Frequently asked questions\n\n**Do we need works council approval for every employee survey?**\nIn Germany, assume yes for anything using a technical system to collect employee responses, because §87(1) No. 6 BetrVG is triggered by a system's objective suitability for monitoring rather than by your intention. The efficient answer is one framework works agreement covering employee research generally, with a light notification step per study, rather than a fresh negotiation each time.\n\n**Can we rely on employee consent instead of a works agreement?**\nNo, for two separate reasons. Consent is a data protection concept and does not displace a labour-law co-determination right at all. And within data protection, the EDPB's position is that employee consent is unlikely to be freely given because of the power imbalance, so it is a weak basis even on its own terms. Use a works agreement plus an appropriate legal basis, and reserve consent for genuinely optional extras.\n\n**What happens if we launch without involving the works council?**\nThe measure can be treated as legally void, the council can seek an injunction to stop it, and you may be unable to use data already collected. Beyond the legal exposure, it is a relationship cost that makes every subsequent programme harder.\n\n**Does this apply outside Germany?**\nThe specific §87 mechanism is German, but the pattern is not. The Netherlands gives works councils consent rights over personnel-data systems, France requires CSE consultation on monitoring and working conditions, and multinational rollouts can engage a European Works Council. Design to the German standard and you will usually clear the others.\n\n**How small can a reporting group be before anonymity breaks?**\nThere is no single legal number, and the honest answer depends on how well colleagues know each other. A threshold of 5 is a common floor and 10 is safer for sensitive topics. What matters more than the number is preventing filter stacking, since combining three innocuous filters is how a group of 200 becomes a group of 3.\n\n**Can we use AI to conduct employee interviews in a co-determined workplace?**\nYes, and it is often easier to agree than a human-moderated alternative, because no colleague hears the answer. The conditions are specificity and restraint: describe exactly what the AI does, commit in writing that no output is attributed to or used against an individual, keep a human in the loop on findings, and disclose the AI's role to employees in the invitation.\n\n## Related Resources\n\n- [Structured Questions Guide](/docs/structured-questions-guide) — the six question types that make aggregate-only reporting practical\n- [Anonymous Employee Research with AI Interviews](/docs/anonymous-employee-research-ai-interviews) — the design that keeps an anonymity promise\n- [Koji for HR and People Teams](/docs/koji-for-hr-people-teams) — running employee research at scale\n- [Voice of the Employee](/docs/voice-of-employee-program) — building a listening programme that drives change\n- [Employee AI Adoption Research](/docs/employee-ai-adoption-research) — the study most likely to need a works agreement in 2026\n- [GDPR-Compliant AI User Research](/docs/gdpr-compliant-ai-user-research) — the underlying data protection baseline\n- [Research Data Access Controls and Audit Trails](/docs/research-data-access-controls-audit-trail) — enforcing the access limits your agreement promises","category":"Research Operations","lastModified":"2026-08-01T03:19:46.201697+00:00","metaTitle":"Works Councils and Employee Research: Germany and EU Compliance Guide","metaDescription":"Employee surveys trigger §87 BetrVG co-determination, and employee consent is rarely a valid GDPR basis. How to get a works agreement, design for real anonymity, and launch without being blocked.","keywords":["works council employee research","Betriebsrat employee survey","BetrVG section 87 co-determination","works agreement employee survey","employee research Germany GDPR","employee consent not freely given","European employee research compliance","Betriebsvereinbarung Mitarbeiterbefragung"],"aiSummary":"In Germany, employee research engages full works council co-determination under section 87(1) No. 6 BetrVG, which is triggered by a technical system being objectively suitable for monitoring rather than by employer intent; bypassing it can render the measure void and expose the employer to an injunction. Separately, employee consent is generally not a valid GDPR basis because the EDPB treats the employment power imbalance as preventing freely given consent, so legitimate interests plus safeguards written into a works agreement (Betriebsvereinbarung) is the workable route, with Article 88 GDPR national rules layered on top. The unlock is architectural anonymity: no individual-level output, a suppression threshold of 5 to 10 per reporting cell, restrictions on cross-tabulation stacking, agreed verbatim de-identification, no non-respondent tracking, defined retention and a named access list. A works agreement should cover twelve items including explicit AI disclosure and a written commitment that no output is attributed to an individual. Consulting the works council before tool selection, and piloting to show the real report format, compresses a six-week negotiation to roughly two.","aiPrerequisites":["An employee population in Germany or another co-determined European jurisdiction","An existing works council or employee representative body","A planned employee survey, pulse or interview programme"],"aiLearningOutcomes":["Recognise when an employee study triggers section 87 BetrVG co-determination","Explain why employee consent is not a reliable GDPR legal basis","Draft the twelve clauses a works agreement for employee research should contain","Design a study that is architecturally incapable of identifying individuals","Set suppression thresholds and prevent cross-tabulation triangulation","Sequence council engagement to avoid a blocked or voided launch"],"aiDifficulty":"advanced","aiEstimatedTime":"13 min read"}],"pagination":{"total":1,"returned":1,"offset":0}}