While governmental tracing apps received special attention by research and the media during the Covid-19 pandemic, the surge in new work surveillance technologies went almost unnoticed. New organizational infrastructures based on Internet-of-things (IoT) technology have emerged at both, public and private sector organizations, promising a safe return to the workplace but equally threatening the privacy of employees. The goal of this paper is to take a closer look at a technology with ambivalent use by conducting a meta-synthesis of extant IoT studies. We classify the literature into four use cases with their implementation options: physical health monitoring, mental health monitoring, environmental health monitoring, and connected workplace. We also discuss main challenges emerging from privacy concerns along the IoT data lifecycle for occupational health initiatives in the office context. Based on that, we propose normative guidelines to assist employers interested in implementing privacy preserving IoT solu-tions for health and safety at work.