Is It Legal to Monitor Employees Without Knowledge? 2026

Monitoring employees without their knowledge is legal under federal law in most circumstances, but a growing number of states require employers to give written notice before any electronic monitoring begins. The answer is not a simple yes or no; it depends heavily on what you are monitoring, how, and where your employees are located.

Federal law gives employers broad authority to monitor workplace communications and activity on company systems. But several states, including New York, Connecticut, Delaware, and California, have passed laws that require advance notice or impose stricter limits on what employers can monitor without consent.

Most employers assume that if a practice is legal federally, it is legal everywhere. That assumption has become increasingly expensive as state employee privacy laws have multiplied since 2020.

Here's something related: Is It Illegal to Borrow Money for a Down Payment? 2026

This article covers every major dimension for 2026: federal law, state-by-state notice requirements, monitoring by type, remote work rules, GPS tracking, email and phone monitoring, penalties, and employee rights.

Is It Legal to Monitor Employees Without Their Knowledge

Monitoring employees without their knowledge is legal under federal law for most forms of workplace electronic monitoring, but it is restricted or prohibited by state law in several states that require prior written notice. The legality depends on the monitoring method, the device being monitored, and the state where the employee works.

Federal law, specifically the Electronic Communications Privacy Act (ECPA) at 18 U.S.C. 2510, allows employers to monitor employee communications on company systems under the business use exception and the consent exception. The business use exception permits interception of electronic communications made in the ordinary course of business. The consent exception applies when the monitored party has consented, which courts have found can include implicit consent through an employment agreement or workplace policy.

The important limitation that federal law does not address is notice. ECPA does not require an employer to tell employees they are being monitored. That silence at the federal level is where state laws step in, and those state laws have been getting stricter year by year.

Core Legal Framework at a Glance:

Monitoring personal devices, even during work hours, is a different legal analysis entirely and creates significantly more legal exposure than monitoring company-owned equipment.

Can Employers Monitor Employees Without Notice

Employers can monitor employees without prior notice under federal law, but cannot do so in New York, Connecticut, Delaware, and several other states that have enacted mandatory prior notice requirements. For employers with workers in multiple states, the most restrictive state’s law typically controls for that employee.

The federal default is permissive. ECPA does not require employers to announce monitoring programs. Courts have consistently held that employees using company-owned devices on company networks have a reduced expectation of privacy, particularly when a workplace acceptable use policy has been provided to them.

But the state law landscape has shifted significantly since 2021. New York’s Civil Rights Law Section 52-c, effective May 7, 2022, requires employers to provide prior written notice to employees before monitoring their electronic communications, telephone calls, or internet usage on any company device or network. Connecticut’s law (CGS 31-48d) has required prior written notice since 1998. Delaware requires similar notice under Title 19, Section 705 of the Delaware Code.

States Requiring Prior Written Notice for Employee Monitoring:

Employers who operate across state lines must apply the strictest applicable state law to each employee based on where that employee works.

Federal Employee Monitoring Laws

The primary federal laws governing employee monitoring are the Electronic Communications Privacy Act (ECPA) of 1986 (18 U.S.C. 2510 et seq.) and the Stored Communications Act (SCA) (18 U.S.C. 2701). Together, they create the federal framework that most employer monitoring practices operate within.

The ECPA prohibits the intentional interception of wire, oral, or electronic communications but carves out two critical exceptions for employers. The business use exception permits interception when the employer is monitoring communications made on devices provided for business use in the ordinary course of business. The consent exception applies when at least one party to the communication has consented, and courts have broadly found that employee handbook acknowledgments satisfy consent.

The Stored Communications Act is separate from ECPA and governs access to stored electronic communications, including stored emails and messages on employer-owned servers. Employers generally have authority to access stored communications on their own systems without violating the SCA because they are the system operators.

Federal Law Exceptions That Permit Employer Monitoring:

• Business use exception: Monitoring on company equipment during ordinary business operations
• Consent exception: Employee has consented, including through workplace policy acknowledgment
• Provider exception (SCA): Employer as system operator can access stored communications on own servers
• One-party consent: Federal law permits recording when one party to the conversation consents (employer can be that party in some circumstances)

The National Labor Relations Act adds a layer that many employers miss. The NLRB has held that employers cannot use monitoring systems to specifically target or chill protected concerted activity, including employees discussing wages, working conditions, or union organizing. Monitoring policies that appear designed to suppress that activity can constitute an unfair labor practice.

Key Takeaway: Federal law broadly permits employer monitoring on company systems through the business use and consent exceptions, but the NLRA limits monitoring that targets protected employee organizing activity, and state laws can add far stricter requirements.

What Can Employers Legally Monitor

Employers can legally monitor email, internet usage, computer activity, phone calls on company phones, GPS location of company vehicles, video in most non-private workplace areas, and productivity metrics on employer-owned devices and networks. The boundary shifts when monitoring extends to personal devices, personal accounts, or areas with a reasonable expectation of privacy.

Company-owned devices represent the most permissive monitoring category. When an employer provides a laptop, phone, or tablet for work use, courts have consistently held that employees have little to no reasonable expectation of privacy on that device. Email accounts hosted on company servers, browser history on company networks, files stored on company systems, and application usage on company devices can all be monitored legally under federal law.

The personal device distinction is where employers most often create legal exposure. Monitoring a personal phone brought to work, accessing personal email accounts on a work network, or installing monitoring software on a personally owned device requires explicit consent in most states and is legally risky even with consent.

Monitoring Type Legal Status:

Bathrooms, changing rooms, and private medical areas are absolute off-limits for video or audio surveillance in every US jurisdiction, regardless of device ownership.

Employee Monitoring Laws by State 2026

Employee monitoring laws vary significantly by state in 2026, and the trend is clearly toward stronger employee protections. The most active legislative period for state employee monitoring laws has been 2018 through 2025, with multiple states passing new or strengthened requirements.

California’s framework is among the most complex. California Penal Code 632 requires all-party consent for audio recording of confidential communications, which affects phone call monitoring significantly. California Labor Code 435 prohibits employers from using any monitoring system to monitor employees in areas where they have a reasonable expectation of privacy. California’s law extends beyond the workplace and into work-from-home situations when employees work from a personal residence.

Illinois has a broad eavesdropping law under 720 ILCS 5/14-2 that requires two-party consent for audio recordings, including monitored phone calls. Employers who record calls in Illinois without two-party consent face potential criminal liability, not just civil exposure.

State Employee Monitoring Law Comparison (2026):

Two-party consent states create the most legal complexity for employers who monitor phone calls. Recording a call in California, Illinois, Maryland, or Washington without all parties’ consent is potentially a criminal act, not just a civil infraction.

States That Require Employee Monitoring Notice

Four states currently require employers to give prior written notice to employees before any electronic monitoring begins: New York, Connecticut, Delaware, and in certain contexts, California. These states represent the leading edge of employee privacy protection in the US, and their frameworks are frequently studied as models by other state legislatures.

New York’s law (Civil Rights Law Section 52-c), effective since May 7, 2022, is the most recent and in some ways the most specific. It requires employers to give prior written notice in the form of a written acknowledgment signed by the employee before any monitoring of telephone calls, email, or internet access. The requirement applies to all employers who monitor electronic communications regardless of company size.

Connecticut’s law (CGS 31-48d) has been in effect since 1998 and requires employers to give prior written notice before electronically monitoring employees’ use of any telephone, internet access, or email. Connecticut also requires employers to post a notice in a conspicuous place accessible to all employees. Both requirements must be satisfied, not just one.

Notice Requirements in Detail:

Employers in these states who monitor without providing the required notice face civil penalties and potential civil lawsuits from employees. Establishing a monitoring policy and obtaining signed acknowledgments at hiring is the standard compliance practice.

California Employee Monitoring Law

California’s employee monitoring law is built on two primary statutes: Penal Code 632 (the Invasion of Privacy Act) and Labor Code Section 435. Together, they create the most employee-protective monitoring framework of any major US state for the private sector.

California Penal Code 632 makes it a criminal offense to intentionally record or eavesdrop on a confidential communication without the consent of all parties. A “confidential communication” is one in which any party reasonably expects the communication will not be overheard or recorded. This creates the most significant restriction on telephone call monitoring: employers who record calls in California without all parties’ consent face criminal misdemeanor charges.

California Labor Code Section 435 adds a separate prohibition on employer surveillance of employees in areas where they have a reasonable expectation of privacy. This provision explicitly covers working from home: when an employee works in a personal residence, that residence is an area of reasonable privacy expectation, and monitoring that extends into the home environment without consent creates legal exposure.

California Employee Monitoring Key Facts:

Readers also liked: Is It Illegal to Fly Another Country’s Flag in America? 2026

• Penal Code 632: All-party consent for audio recording; criminal misdemeanor for violation
• Labor Code 435: Prohibits monitoring where employee has reasonable expectation of privacy
• Penalty for Penal Code 632 violation: Up to $2,500 fine and up to one year in county jail per violation
• Civil damages under Penal Code 637.2: Up to $5,000 per violation or three times actual damages
• Remote work coverage: Monitoring of home environments requires specific consent
• Company device monitoring: Permitted with appropriate workplace policy disclosure

California’s criminal penalty for audio recording violations distinguishes it from most states where violations carry only civil consequences. Employers with California employees who monitor phone calls should ensure all-party consent for any recorded call.

New York Employee Monitoring Law

New York’s employee monitoring law, Civil Rights Law Section 52-c, took effect on May 7, 2022, and requires all private employers in New York to provide prior written notice before monitoring or intercepting employee telephone calls, emails, or internet usage on any company-owned device or network. The law is enforceable by the New York Attorney General.

The notice requirement under Section 52-c must be provided at the time of hiring for new employees. For existing employees at the time the law took effect in 2022, employers were required to provide notice as soon as practicable. The notice must be in writing, and employees must acknowledge receipt of the notice in writing. Electronic acknowledgment is permitted.

The penalty structure for violations is civil rather than criminal. The New York Attorney General enforces Section 52-c, and civil penalties are $500 for a first violation, $1,000 for a second violation, and $3,000 for a third and any subsequent violation. Each employee who is monitored without notice can constitute a separate violation, meaning an employer with 50 employees who failed to provide notice could face up to $25,000 in first-violation penalties.

New York Section 52-c Compliance Checklist:

• Provide written notice to all new employees before monitoring begins
• Obtain written acknowledgment of the notice from each employee
• Electronic acknowledgment is acceptable
• Notice must cover telephone, email, and internet monitoring
• Notice must identify what is being monitored
• Post the notice in a conspicuous place accessible to all employees
• Retain documentation of notice and acknowledgment indefinitely

New York’s law applies to employers regardless of size. There is no small business exemption. A sole proprietor with one employee in New York must comply with the same notice requirements as a large corporation.

Key Takeaway: New York, Connecticut, Delaware, and California represent the most restrictive states for employee monitoring. Employers with workers in those states must provide prior written notice and, in California, obtain all-party consent for any audio recording.

Can Employers Monitor Employee Emails Legally

Employers can legally monitor employee emails on company-owned email systems and servers under federal law, provided monitoring occurs within the business use exception under ECPA and the employer has an appropriate workplace policy. Personal email accounts, even when accessed on company networks, carry more legal risk.

Company email accounts hosted on employer servers are owned by the employer. The Stored Communications Act (18 U.S.C. 2701) permits system operators to access stored communications on systems they own and operate. Courts have consistently held that employees have a minimal expectation of privacy in work email accounts, particularly when an acceptable use policy has been communicated to employees.

Personal email accounts are legally different. Gmail, Yahoo Mail, and similar personal accounts are not employer-owned systems. Accessing the content of personal email accounts without the employee’s consent may violate the SCA, and in some states, may constitute an invasion of privacy under state law. Employers should monitor whether an employee is accessing personal email on company time and devices, not the content of those personal accounts.

Email Monitoring Legal Status by Type:

The practical standard for email monitoring compliance: have a clear written email policy that employees acknowledge, limit monitoring to company email accounts and company systems, and do not access personal email content under any circumstances without explicit written consent.

Can Employers Monitor Employee Phone Calls

Employers can legally monitor employee phone calls on company-provided phones under federal law through the business use exception in ECPA, but audio recording of those calls requires either one-party or two-party consent depending on the state. In two-party consent states, recording without all parties’ consent is a criminal violation.

Federal ECPA (18 U.S.C. 2511(2)(a)(i)) permits employers to intercept communications on company-provided equipment in the ordinary course of business. Listening in on a call without recording it is generally permitted on company phones under this exception. The legal complexity increases when the call is recorded.

For recording, federal law requires only one-party consent, meaning the employer (as one party to the monitoring) can consent on behalf of the business. But two-party consent states override that federal standard for recordings. California, Illinois, Maryland, Washington, Pennsylvania, and several other states require all parties to consent before a phone call is recorded. An employer in Chicago who records a call with a customer in Los Angeles faces two-party consent requirements in both Illinois and California.

Phone Call Monitoring by State Consent Requirement:

The interstate call problem is real and frequently overlooked. When a call connects parties in different states with different consent requirements, courts generally apply the law of the state with the stricter standard.

GPS Tracking Employees Legally

GPS tracking of employees using company-owned vehicles is legal in all 50 US states, but GPS tracking of employees’ personal vehicles requires consent in most jurisdictions and is outright prohibited without consent in several states. The company-owned vs. personal vehicle distinction drives the entire legal analysis.

Company vehicle GPS tracking is broadly permitted because the employer owns the vehicle. The employer has a legitimate business interest in knowing where their business property is located at all times. Courts have consistently held that employees have minimal privacy expectations in employer-owned vehicles during work hours. Several states, including New York (Labor Law 203-c), have passed specific GPS tracking notice requirements even for company vehicles.

Personal vehicle GPS tracking without consent is the high-risk category. Installing a GPS tracker on an employee’s personal car without their knowledge and consent may violate state wiretapping or surveillance laws, and in some states, it is a criminal act. Texas Business and Commerce Code Chapter 123 specifically addresses GPS tracking and creates civil liability for unauthorized tracking of personal vehicles.

GPS Tracking Legal Framework:

New York Labor Law Section 203-c requires employers who use GPS or similar tracking on company vehicles to provide written notice to employees before tracking begins. This notice requirement is separate from the electronic monitoring notice requirement under Civil Rights Law 52-c and must satisfy its own specific conditions.

Can Employers Monitor Employees Working from Home

Employers can monitor employees working from home using company-owned devices and software, but monitoring that extends into the physical home environment without consent creates legal exposure, particularly in California and other states with strong privacy protections. The remote work monitoring question is the fastest-evolving area of employee monitoring law.

Monitoring software installed on company-owned laptops provided to remote employees is legal under federal law. Screen capture, keystroke logging, time-tracking software, and productivity monitoring tools all operate on company-owned devices, and the company’s ownership of the device is the controlling factor. Employees who use personal devices for work are in a legally different category.

The home environment protection is specific to certain states. California’s Labor Code Section 435 and its broad reasonable expectation of privacy framework creates real risk for employers who use cameras or audio tools that capture the employee’s home environment without explicit consent. A virtual background requirement during video calls is fine. An always-on camera pointed at an employee’s living space raises serious legal questions.

Remote Work Monitoring: What Is and Is Not Permitted:

• Company laptop monitoring (keystroke, screen capture, productivity): Generally permitted
• Time tracking and login/logout monitoring: Generally permitted
• Email and communication monitoring on company accounts: Generally permitted
• Camera access beyond video calls (ambient monitoring): High risk; state law varies
• Audio recording of home environment: Very high risk; all-party consent states prohibit
• Monitoring of personal devices used for work: High risk; explicit consent required
• Physical monitoring of employee’s home: Prohibited without consent in all states

The cross-state jurisdiction question is particularly relevant for remote work. An employer in Texas whose employee works from California must follow California’s stricter monitoring laws for that employee, not Texas law.

Key Takeaway: Remote work monitoring on company devices is broadly legal, but monitoring that reaches into the home environment, personal devices, or audio without all-party consent in restrictive states creates significant legal exposure for employers.

Employee Computer Monitoring Without Knowledge

Employee computer monitoring without knowledge is legal under federal law on company-owned computers, but requires prior written notice in New York, Connecticut, Delaware, and several other states, and carries increased risk when monitoring software captures data from personal accounts or activities on those computers.

Computer monitoring tools commonly used by employers include keyloggers (software that records keystrokes), screen capture tools (software that takes periodic screenshots), activity trackers (monitoring application usage and active time), and network monitoring (tracking websites visited and bandwidth used). All of these are legal under federal law on company computers when covered by an appropriate workplace policy.

A closely related topic: Is It Illegal to Get a Happy Ending? 2026 State Laws

The specific legal exposure for computer monitoring without knowledge arises in two scenarios. First, in states that require prior written notice, operating any monitoring software without that notice is a statutory violation regardless of how non-invasive the monitoring is. Second, when monitoring software captures personal data, including personal email content, banking information, or private messages accessed on the company device, that capture can create liability beyond the monitoring notice issue.

Computer Monitoring Compliance Requirements:

• Maintain an up-to-date written computer monitoring policy
• Distribute the policy to all employees and obtain written acknowledgment
• Provide the required prior written notice in New York, Connecticut, and Delaware before any monitoring begins
• Limit monitoring to work-related activity; configure software to avoid capturing personal account credentials
• Store monitoring data securely; limit access to authorized personnel
• Retain monitoring records in accordance with your state’s employment record retention requirements

The NLRB added a new layer of complexity in 2023 when it issued guidance indicating that overbroad electronic monitoring policies that surveil protected concerted activity may constitute unfair labor practices. Monitoring programs that capture employee discussions about wages or working conditions must be designed to avoid that data being used for anti-union purposes.

Penalty for Illegal Employee Monitoring

Penalties for illegal employee monitoring range from civil fines of a few hundred dollars for notice violations in states like New York to criminal misdemeanor charges with fines up to $2,500 per violation and jail time for audio recording violations in states like California and Illinois. The severity depends on the type of monitoring, the state, and whether any criminal wiretapping statute was violated.

Civil penalties for notice violations are the most common category. New York imposes civil penalties of $500 for a first violation, $1,000 for a second, and $3,000 for each subsequent violation under Civil Rights Law 52-c. Those penalties apply per employee who was monitored without notice. An employer with 100 employees who failed to provide notice faces up to $50,000 in civil penalties for first-time violations alone.

Criminal penalties apply when monitoring violates state wiretapping or eavesdropping statutes. California Penal Code 632 violations are misdemeanors carrying up to $2,500 per violation and up to one year in county jail. Civil damages under California Penal Code 637.2 add up to $5,000 per violation or three times actual damages, whichever is greater. Illinois has similar criminal exposure under its eavesdropping statute.

Penalty Summary by Violation Type:

Civil lawsuits by employees are an additional exposure layer that penalty schedules do not capture. Employees who discover they have been illegally monitored can file individual civil claims for invasion of privacy, emotional distress, and in some states, statutory damages.

Employee Rights Against Workplace Surveillance

Employees have specific legal rights against workplace surveillance that vary by state, but the core protections that exist nationwide include: the right to privacy in bathrooms and changing rooms, protection from monitoring of personal devices without consent, protection from audio recording without appropriate consent in two-party states, and the right to protection from monitoring that targets protected union activity.

In states with prior notice requirements, employees have the right to receive written notice of monitoring before it begins and the right to retain documentation of that notice. New York employees have the right to a signed copy of the monitoring notice acknowledgment. Employees who discover they were monitored without the required notice have a legal basis for a complaint to the state attorney general.

The NLRA adds a federal layer of employee protection that applies nationwide. Employees have the right to engage in protected concerted activity, including discussing wages, working conditions, and union organizing. Employers who monitor communications specifically to identify and suppress that activity violate the NLRA, and affected employees can file unfair labor practice charges with the NLRB.

Employee Rights Summary:

• Privacy in bathrooms, changing rooms, and medical areas: Universal; no monitoring permitted
• Protection from personal device monitoring without consent: Universal
• Right to prior written notice (NY, CT, DE): Statutory right in those states
• Protection from all-party audio recording without consent: California, Illinois, Maryland, Washington, PA, and others
• NLRA protection for protected concerted activity: Federal right; all states
• Right to file complaint for illegal monitoring: AG offices in notice-requirement states
• Civil lawsuit rights for privacy invasion: Available in most states under common law

Employees who believe they have been illegally monitored should document what they know, file a complaint with their state’s labor department or attorney general, and preserve any records of monitoring activity they can access.

Remote Work Monitoring Laws 2026

Remote work monitoring laws in 2026 are the fastest-evolving area of employee privacy law in the US, driven by the post-pandemic normalization of distributed workforces and the proliferation of productivity monitoring software. No comprehensive federal remote work monitoring law exists, leaving employees dependent on state protections.

The core jurisdictional issue for remote work is which state’s law governs. Courts have generally held that the law of the state where the employee physically works applies to that employee’s monitoring rights, not the state where the employer is headquartered. A remote employee in California working for a Texas company is protected by California law, including its all-party consent requirement for audio recording and its privacy protections for home environments.

Colorado’s Equal Pay for Equal Work Act and related employment regulations have pushed Colorado toward considering stronger monitoring disclosure requirements. Washington State’s comprehensive privacy law framework applies to some employment monitoring contexts. The trend in 2026 is clearly toward more state legislative activity, not less, as employee advocacy groups push for broader monitoring transparency laws modeled on New York’s 2022 legislation.

Remote Work Monitoring Legal Framework 2026:

The practical implication for employers in 2026 is that remote workforce monitoring requires a state-by-state compliance review. A single monitoring policy applied uniformly to employees across all states creates legal exposure in the most restrictive states.

Frequently Asked Questions

Is it legal to monitor employees without their knowledge in the US?

Monitoring employees without their knowledge is legal under federal law on company systems, but several states require prior written notice before any electronic monitoring begins.
New York, Connecticut, and Delaware require written notice before monitoring starts, and violating those notice requirements carries civil penalties.
California requires all-party consent for audio recording and prohibits monitoring in areas of reasonable privacy expectation.
Employers with multi-state workforces must comply with the strictest applicable state law for each employee based on where that employee physically works.

What can employers legally monitor at work?

Employers can legally monitor email on company servers, internet usage on company networks, phone calls on company phones, computer activity on company devices, and GPS location of company vehicles.
Personal devices, personal email accounts, and personal phone calls are high-risk monitoring categories that require explicit consent in most states.
Bathrooms, changing rooms, and medical areas cannot be monitored by video or audio under any circumstances.
The company-owned device distinction is the most important factor in determining what monitoring is legally permissible.

Can an employer monitor employee emails and phone calls without telling them?

Employers can monitor company email and phone calls on company devices without telling employees under federal law, but several states require prior written notice.
New York Civil Rights Law 52-c, Connecticut CGS 31-48d, and Delaware Code Title 19 Section 705 all require prior written notice before monitoring begins.
Recording phone calls requires all-party consent in California, Illinois, Maryland, Washington, and Pennsylvania regardless of device ownership.
Employers in multi-state operations should assume the strictest applicable state law governs and provide notice to all employees regardless of location.

What is the penalty for illegally monitoring employees?

Penalties range from civil fines of $500 to $3,000 per employee for notice violations in New York to criminal misdemeanor charges with fines up to $2,500 and jail time for audio recording violations in California.
Illinois can charge audio recording violations as felonies in some circumstances, carrying up to three years in prison.
Federal SCA violations for unauthorized access to stored personal communications carry both civil and criminal penalties.
Employee civil lawsuits for invasion of privacy can generate additional liability beyond statutory penalties.

Do employers have to tell employees they are being monitored when working from home?

Employers must tell remote employees they are being monitored if those employees work in New York, Connecticut, or Delaware, where prior written notice is legally required.
The law of the state where the employee physically works governs monitoring requirements, not the state where the employer is based.
California’s strong privacy protections apply to remote employees working from California residences, including restrictions on monitoring that reaches into the home environment.
Outside of states with notice requirements, federal law does not require employers to inform remote employees of monitoring on company devices.

Closing

Employee monitoring law in 2026 runs on two parallel tracks: what federal law permits and what state law restricts. Federal law gives employers broad authority. State laws in New York, California, Connecticut, and others pull that authority back significantly, especially for audio recording and home environment monitoring.

Bookmark this page whether you are an employer building a monitoring compliance program or an employee trying to understand your rights. The laws in this space are changing faster than most organizations update their policies, and staying current matters.

Before you go further, consider reading Is It Illegal to Have a Crack in Your Windshield? 2026