When working-hours registration is mandatory, how GDPR applies, and what the penalties are, a compliance briefing for HR, legal and finance.
For compliance and HR teams, the question is no longer whether to register working hours, but how to do it in a way that holds up under inspection. Belgian and European law are converging on a single principle: an objective, reliable, daily record of every employee’s hours. Getting ahead of this with a digital time-registration system is the difference between a calm audit and an expensive one. This briefing sets out the legal framework, the per-sector obligations, the GDPR dimension and the penalties, with links to the official sources.
Quick Navigation
- The Legal Basis
- When Is Time Registration Mandatory?
- Obligations by Sector
- GDPR and Employee Privacy
- Penalties and Enforcement
- Compliance Checklist
- What Changes in 2027
- Managing Compliance with Technology
- Frequently Asked Questions
The Legal Basis
Belgian time-registration law sits on a European foundation. In its 2019 CCOO judgment, the Court of Justice of the EU ruled that member states must oblige employers to operate an objective, reliable and accessible system to measure daily working time. The ruling is published on EUR-Lex. Belgium is transposing this into a national obligation effective January 2027, with official guidance issued by the FPS Employment at werk.belgie.be.
Alongside this general duty sit the sector-specific attendance regimes, Check-in at Work (CIAW) and its check-in-and-out (CIAO) expansion, enforced by the NSSO. Together they form the compliance landscape every Belgian employer must navigate.
When Is Time Registration Mandatory?
❌ “We’ll keep paper timesheets until someone asks.”, already non-compliant for covered sectors and untenable from 2027.
✅ A verified digital record from day one, available to both employee and inspector.
In practice, three triggers make registration mandatory: operating in a CIAW-covered sector above the relevant threshold; employing posted or foreign workers (who also require a separate Limosa declaration); and, from January 2027, simply being a Belgian employer subject to the general working-hours duty.
Obligations by Sector
Thresholds differ sharply between sectors, which is why a one-size approach fails.
Construction
- CIAW applies where no subcontractor exceeds €500K, where one subcontractor exceeds €5K, or where there are two or more subcontractors.
- Chain liability makes the main contractor responsible for subcontractor registrations. See the construction page.
Cleaning
- CIAW threshold of €30,000; CIAO (check-in and out) active since 2025.
Meat processing
- CIAW threshold of €5,000, reflecting intensive NSSO oversight.
All sectors from 2027
- Objective daily working-hours registration becomes mandatory regardless of sector.
- Official NSSO guidance: socialsecurity.belgium.be.
The table below summarises the per-sector picture. Treat green as “clearly covered”, amber as “threshold-dependent”, and red as “no informal approach is defensible”.
| Sector | CIAW threshold | CIAO | 2027 daily record | Liability note |
| Construction | €5K–€500K (subcontractor rules) | Not yet | ✅ Required | Chain liability on main contractor |
| Cleaning | €30,000 | ✅ Since 2025 | ✅ Required | High mobile-staff exposure |
| Meat processing | €5,000 | Not yet | ✅ Required | Intensive NSSO scrutiny |
| Transport | Not CIAW-specific | Not yet | ✅ Required | Driving-time rules also apply |
| Office / services | Not CIAW-specific | Not yet | ✅ Required | Paper records ❌ non-compliant |
Footnote: thresholds depend on contract structure; when uncertain, treat the site as covered and register everyone.
GDPR and Employee Privacy
Working-hours data, and especially GPS-verified registrations, is personal data. The Belgian Data Protection Authority (Gegevensbeschermingsautoriteit) supervises its processing; see gegevensbeschermingsautoriteit.be. Three principles govern compliant use:
- Proportionality: collect only what you need to prove hours and attendance.
- Purpose limitation: use the data for payroll and compliance, not covert surveillance.
- Retention limits: keep records only as long as the law requires, then delete.
A well-designed time-tracking platform bakes these principles in, with role-based access and defined retention.
Penalties and Enforcement
| ⚠️ CIAW non-compliance carries administrative fines from €300 and criminal fines that can reach €6,000 per worker per day. With chain liability, those exposures can land on the main contractor even when a subcontractor failed to register. |
Beyond fines, the practical cost of non-compliance is a failed inspection: reconstructing hours from memory, disputed timestamps, and payroll corrections. Tamper-resistant digital records, verified at the moment of capture, remove that risk. Compare compliant platforms in our tools guide.
Posted and Foreign Workers
Cross-border work adds a layer. Posted or foreign workers active in Belgium generally require a separate Limosa declaration in addition to ordinary time registration and any applicable CIAW obligation. The three regimes are distinct but overlapping: Limosa declares the posting, CIAW declares attendance on covered sites, and time registration records the hours worked. A platform that consolidates attendance and hours, such as the time-tracking system, reduces the number of places where a cross-border worker can fall through the cracks.
| ⚠️ Missing a Limosa declaration is enforced separately from CIAW, so a foreign worker can trigger more than one penalty regime at once. Confirm the declaration is in place before the worker sets foot on site. |
Record-Keeping and Retention
Compliance does not end when an hour is registered, the record has to survive an inspection that may come months later. Two principles apply: records must remain accessible to both the employee and the labour inspectorate, and they must be retained for the period the relevant labour and social-security rules require, then deleted in line with GDPR. In practice this means choosing a system that timestamps registrations immutably, logs who accessed what, and can produce a complete export on demand. Reconstructing hours from memory or editable spreadsheets is precisely the scenario that turns a routine inspection into a dispute.
Compliance Checklist
- Confirm whether each site exceeds a CIAW threshold.
- File CIAW/CIAO declarations through a Check-in at Work capable system.
- Document a GDPR retention and access policy for hours data.
- Brief subcontractors, chain liability makes their gaps your fines.
- Keep inspector-ready exports available on demand from your time-tracking system.
What Changes in 2027
- January 2027: objective daily working-hours registration becomes mandatory for all employers.
- Expect faster, data-led inspections and tighter NSSO data-quality expectations.
- CIAO check-in-and-out logic is likely to widen beyond cleaning.
- Manual exports give way to live payroll integration as the compliance norm.
Managing Compliance with Technology
Suivo, a Belgian IoT company with over 15 years of experience, offers comprehensive time registration for companies that must satisfy both labour law and the NSSO. Their platform helps you:
- Capture verified hours via a mobile time-tracking app.
- File CIAW and CIAO declarations automatically.
- Apply GDPR-aligned access and retention controls.
- Produce inspector-ready audit exports in minutes.
- Manage multi-site workforces from one product suite.
Suivo’s IoT platform integrates seamlessly with existing payroll and ERP systems, helping companies like Cegelec stay compliant across multiple sites and subcontractors.
“Our last NSSO inspection took fifteen minutes. Every hour and every check-in was already verified and exportable, there was simply nothing to dispute.”
– Compliance Officer, mid-size cleaning company in Brussels
Take Action Today
Don’t let a legislative gap turn into a six-figure fine. Start by confirming which thresholds apply to your sites, documenting your GDPR approach, and moving from paper to verified digital records before the 2027 deadline.
For more information about time-registration legislation in Belgium, contact Suivo at +32 3 375 70 30 or visit the time-tracking solution page to see how their platform keeps you compliant.
Free Compliance Guide
Want to navigate Belgian time-registration law with more confidence? Our Compliance Guide gives you a simple, practical overview to stay compliant, manage GDPR, and avoid penalties.
Inside, you’ll find:
- The biggest legal challenges in time registration today
- How Suivo helps with CIAW filing, GDPR controls and audit-readiness
- Real-life success stories from Cegelec, Hoogmartens and Van Moer
- Practical solutions for fleet, workforce, and asset management
Frequently Asked Questions
When does time registration become mandatory for all employers in Belgium?
From January 2027, every Belgian employer must keep an objective daily working-hours record. Sector regimes like CIAW already apply sooner, so a digital time-tracking system is worth adopting now.
What are the penalties for not registering working hours?
CIAW non-compliance carries administrative fines from €300 and criminal fines up to €6,000 per worker per day, and chain liability can extend exposure to the main contractor. Filing through a Check-in at Work system reduces that risk.
How does GDPR apply to time-registration data?
Hours and location data are personal data and must be processed proportionately with defined retention, under the Belgian Data Protection Authority. Compliant time-tracking software provides the access and retention controls you need.
Who is responsible if a subcontractor fails to register?
Under chain liability, the main contractor can be held responsible for a subcontractor’s missing CIAW registrations. Our tools guide covers platforms that give main contractors full site-wide visibility.
