95. Information Technology Act and HR – Understanding HR’s Role in Technology Governance

Why Technology Governance Is No Longer Just an IT Function

We have been discussing the concept of the digital workplace and the accountability that comes with it. While earlier conversations focused on data protection, this part of the discussion shifts attention to technology itself and, more importantly, to why Human Resources has a direct role in it.

At first glance, technology appears to be firmly within the domain of IT teams. Most organisations have well‑structured IT policies, supported by systems, processes, and training programmes designed to ensure that employees follow digital protocols. Given this, a natural question arises: where does HR come into this space?

To answer that, it is important to first step back and understand how technology is actually used within the workplace.

The Workplace Today Is Built on Digital Systems

A modern workplace is filled with digital systems at every level. Simple examples include email and messaging platforms that employees use constantly. Beyond that, most organisations operate on HRMS platforms, which manage attendance, payroll, performance, and employee information.

Even systems that are not immediately labelled as technology control tools—such as biometric devices—function as surveillance tools. Whether it is recording time of entry and exit or capturing employee movement, these systems are continuously tracking and recording employee activity.

In addition to these systems, organisations maintain electronic records of employee data, communication, and documentation. These digital systems are not just supporting operations. They are actively managing people, behaviour, and information.

While these systems may also be used to manage customers, a large portion of their use is directly related to employees. Data is being generated by employees, about employees, and through employee activity.

Why HR Naturally Becomes Central to Technology Governance

Once we acknowledge that most digital systems in the workplace are closely tied to employees, the role of HR becomes clearer. HR is responsible for employee behaviour, policies, misconduct handling, and organisational processes. When those behaviours and processes move into digital environments, technology governance automatically intersects with HR responsibilities.

If the entire system cycle revolves around employees, then HR policies, discipline frameworks, and operational processes must align with how these digital systems function.

For example, if systems are not properly defined or governed, employees may not clearly understand what is expected of them. They may not follow consistent practices, and organisational behaviour can become unpredictable. In such situations, it is not enough to have systems in place. There must be clarity on how those systems are to be used.

The IT Act Cannot Be Treated as an IT-Only Topic

A common mistake organisations make is treating the Information Technology Act as something that only IT or cybersecurity teams need to understand. While IT teams play a critical role in setting up systems and frameworks, the application of the law in everyday work happens through employee behaviour.

This is where HR comes in.

HR practitioners must understand the IT Act well enough to ensure that HR policies, HR systems, and standard operating procedures reflect its principles. It is not sufficient for the organisation to have a well‑drafted IT policy. The policy must be translated into actual employee conduct through HR mechanisms.

This includes ensuring that employees know what actions are acceptable, what actions are not, and how digital systems should be used within the organisation.

From Policies to Behaviour: The HR Responsibility

Even if the IT team develops strong frameworks and provides training programmes, the responsibility of embedding these practices into daily behaviour rests with HR. Policies must not only exist—they must be understood, adopted, and consistently implemented across the organisation.

HR policies and SOPs must therefore incorporate clear guidance on technology use. These must explain not just how systems function, but also how employees are expected to behave when using them.

Without this integration, organisations face a gap between system capability and employee action. Systems may be strong, but behaviour may not align with them.

This gap creates risk.

Technology Systems Influence Employee Conduct

Digital systems are not passive tools. They actively influence how employees behave. Access to systems, handling of data, communication through emails or messaging platforms, and management of records all shape organisational conduct.

If governance around these systems is weak, employees may use them inconsistently or incorrectly. This is not necessarily due to intent, but often due to lack of clarity or direction.

From an HR perspective, this means that governance must extend beyond defining processes. It must include defining acceptable behaviour within digital systems.

This includes areas such as how employees access systems, how they use credentials, how they communicate through digital platforms, and how policies apply to these actions.

Why HR Policies Must Reflect Technology Use

As the workplace becomes more digital, HR cannot treat technology as a separate function. HR policies must reflect the realities of how employees interact with technology on a daily basis.

This means aligning HR frameworks with:

• How systems are accessed
• How employee data is handled
• How communication tools are used
• How misconduct can occur within digital environments

If these elements are not integrated into HR policies, organisations may have systems but lack behavioural discipline. This leads to inconsistency and weak accountability.

Building Clarity and Consistency in the Digital Workplace

The purpose of integrating technology governance into HR is not to create additional complexity. It is to create clarity.

Employees must understand:

• What they are expected to do
• What they should avoid doing
• How their actions within digital systems affect the organisation

When expectations are clearly defined and consistently implemented, organisations are able to maintain control over how digital systems are used.

Without this clarity, even well‑designed systems can lead to inconsistent behaviour across teams and functions.

The Role of HR in Enabling Digital Discipline

Ultimately, governance in a digital workplace is not achieved by systems alone. It is achieved through how people use those systems.

HR plays a central role in building this discipline. This includes creating policies that reflect digital realities, enabling training programmes that clarify expectations, and ensuring that behaviour across the organisation remains aligned with defined processes.

The objective is not to shift responsibility from IT to HR, but to recognise that both functions operate together. IT enables systems, but HR ensures those systems are used correctly.

Closing Thought

Technology governance cannot remain confined to IT policies. In a workplace where systems are used primarily by employees, governance becomes a people issue—and therefore an HR responsibility.

For HR practitioners, understanding this shift is the starting point. The next step is ensuring that HR policies, systems, and practices reflect how technology is actually used, so that behaviour, accountability, and compliance move together in a digital workplace.