Do Cyprus employers have to record working hours?

The instrument to know is the Organisation of Working Time Law. Its recording obligation is not a blanket daily-hours rule; it hangs off the 48-hour ceiling. Average weekly working time, including overtime, must not exceed 48 hours across the reference period, and where you permit a worker to go past that average, you must keep up-to-date records of those workers and make them available to the competent authority on request. ^[1] Read that line carefully, because it is easy to overstate. The records duty is triggered by the opt-out from the 48-hour cap: it reaches the workers who exceed the average, not the whole payroll, and by its terms it does not demand a minute-by-minute log of everyone’s day. ^[1] For the majority of your people who sit inside the 48-hour average, the statute sets no equivalent standing duty to capture each day’s hours. That is the current legal position, stated plainly and without dressing it up.

No, not as a general duty. As Cyprus law stands today there is no across-the-board obligation to log every employee’s daily start and finish times; the only statutory recording duty covers workers you permit to exceed the 48-hour weekly average, for whom up-to-date records must be kept and made available to the competent authority. ^[1] The direction of travel is the other way, though: the CJEU has held that Member States must require an objective, reliable and accessible system measuring each worker’s daily hours. ^[2]

The gap between "no general duty in Cyprus" and "a clear EU expectation" is real, and worth grasping rather than ignoring. In CCOO v Deutsche Bank the Court of Justice of the European Union held that the Working Time Directive, read with the Charter, requires Member States to oblige employers to set up an objective, reliable and accessible system enabling the duration of time worked each day by each worker to be measured. ^[2] That ruling speaks to what Member States must put in place; on its own it does not rewrite a national statute overnight. What it means for Cyprus shows up in the European Commission’s 2023 implementation report on the Directive, which names Cyprus among five Member States that have no clear obligation to record working time. ^[3] Put the two together and the trajectory is hard to miss: the direction of EU law is toward a systematic daily-hours record, and Cyprus has been flagged as a jurisdiction that has not yet aligned. This is the direction of travel, not a rule already in force in Cyprus. But it is a direction that rarely reverses.

If you had any doubt about which way the current runs, the Court of Justice settled it more recently. In a December 2024 judgment the CJEU reaffirmed the CCOO obligation (that the Working Time Directive requires a system enabling the duration of time worked by each worker to be measured) and pushed further, holding that those provisions preclude national legislation or practice that exempts the employers of domestic workers from setting up such a system. ^[4] Two things jump out. First, the core measurement duty is not being quietly softened or boxed into its original facts; five years on, the Court restated it and applied it again: the behaviour of a settled principle, not a one-off. Second, and more telling, the Court refused to carve out an exemption even for domestic-worker employers: households employing a cleaner or carer, about as far from a corporate HR department as the working world gets. If the Court will not exempt that household, the room for assuming your business sits outside the recording expectation is shrinking, not growing. ^[4]

The honest caveat still holds, and it matters not to overstate it. A CJEU judgment about what Member States must require does not, by itself, create a Cyprus statutory duty overnight; the ruling addresses what national law must eventually provide, and the domestic-worker case arose in another Member State’s courts, not in Cyprus. ^[4] So the Cyprus position today is unchanged: no general daily-hours duty, only the 48-hour opt-out records. ^[1] What has changed is how confidently you can call the destination: the recording obligation is hardening at EU level, and the case for waiting gets weaker every time the Court reaffirms it.

The sensible reading is neither complacency nor panic. Cyprus has been named as lacking a clear recording obligation, and the CJEU’s expectation points squarely at a daily-hours system (an expectation the Court reaffirmed as recently as December 2024, while refusing even a domestic-worker exemption), so the low-cost, low-regret move is to record hours well before anyone forces you to. ^{[2] [4] [3]} What to record now, in practice: the start and end of each shift, break periods, and any overtime, captured through a system that is objective (not reconstructed after the fact), reliable (tamper-resistant and complete), and accessible (retrievable by the worker and, where relevant, the authority): the very qualities the Court described. ^[2] Hold the two obligations apart in your head: the 48-hour opt-out records are a present legal duty for the staff they cover, whereas a full daily-hours system is, today, prudent preparation rather than a Cyprus statutory requirement. ^[1] And mind one boundary: recording the hours each person actually works is a different obligation from declaring contractual terms in ERGANI. ERGANI records what the parties agreed, not what happened at the door, and filing that registration does not discharge the actual-hours measurement CCOO describes. We cover the ERGANI employment-terms obligation separately in our guide to ERGANI and employment terms in Cyprus. The reasons to get ahead of this are ordinary business ones. A reliable hours record settles pay disputes, evidences rest-break and overtime compliance, and means that if a clear recording duty does land, you are already compliant instead of scrambling. And because that same record is personal data, processed in Cyprus under the GDPR as complemented by Law 125(I)/2018, collect the minimum and set a retention limit: capture hours, not a surveillance trail. ^[5] The data-protection side of a working-time log (lawful basis, minimisation and retention) is covered in our guide to GDPR and attendance data, and getting it right from day one beats retrofitting it later.