Meet Monica, who runs HR at a company with staff in more than one state. Arjun and Sara work for her. They're fictional, but their questions are the ones real employers and employees ask. We'll follow Monica as she checks the law before she buys monitoring software. We'll also check what Arjun and Sara can expect from their side.
This guide is general information about US law, not legal advice. Each law below links to its official text, which we read in late October. Laws change, so check with a lawyer before you act.
Is employee monitoring legal? The short answer
Generally yes, with limits. The California Attorney General says an employer is generally allowed to monitor your workplace communications, such as business phone calls and computer use. The limits come from federal and state law, and from what you tell employees. They change with the method you pick.
Monica wants software that records which apps run on company laptops. Her first question to the company lawyer is short: is it legal? The lawyer answers with three questions back. What will you collect, and for what business purpose? Where do the people work? What will you tell them?
In short: ask what you'll collect and what you'll tell people before you ask whether it's legal.
Which federal laws apply to employee monitoring?
Federal law sets the outer limits, and none of the laws below bans monitoring outright. Each law targets one way of doing it, such as secretly intercepting calls or reading stored messages without permission. Mostly these laws care how you collect and use the data, and whether you treat people alike.
Arjun has heard that a federal wiretap law bans monitoring. Monica checks, and the answer is narrower. The law covers listening in as a message happens, and it has a consent exception.
Swipe sideways for full table
Law | What it covers | What it means for an employer |
|---|---|---|
Wiretap Act, part of the Electronic Communications Privacy Act (ECPA) | Intercepting calls and messages as they happen | Allowed when one party has given prior consent, unless the purpose is criminal or tortious |
Stored Communications Act | Getting into stored email or messages without authorization | Exception for conduct the service provider authorizes. Ask how it applies to your systems |
National Labor Relations Act | Workers acting together for "mutual aid or protection" | Treat chats about pay and conditions with care before you act on them |
Title VII | Bias in the "terms, conditions, or privileges of employment" | Apply monitoring rules and discipline the same way to everyone |
Sources: Wiretap Act, part of the Electronic Communications Privacy Act (ECPA), Stored Communications Act, National Labor Relations Act and Title VII, at Cornell Law School's Legal Information Institute, checked October 21, 2026. The ECPA is the short title of the 1986 act that added the first two.
How the Stored Communications Act applies to a company's own systems is a question for a lawyer. So is how the wiretap law treats equipment used in the ordinary course of business.
In short: keep monitoring on work systems, treat everyone alike and leave private accounts alone.
Which states require notice of electronic monitoring?
Employee monitoring laws vary most at the state level. Some states require a notice before monitoring starts, and the details differ. The table shows three of them. The list is partial, so check each state where you have staff, because a rule in one state doesn't follow your people to another.
Swipe sideways for full table
State and law | What it requires | Penalty or enforcement |
|---|---|---|
New York, Civil Rights Law 52-c | Written notice at hiring, acknowledged by the employee and posted where staff can see it | Attorney general enforces. Up to $500, then $1,000, then $3,000 for repeats |
Delaware, 19 Del. C. 705 | Daily notice, or a one-time notice the employee acknowledges, before monitoring phone, email or internet use | $100 civil penalty per violation |
Maine, Public Law 2025 chapter 524 | Notice before surveillance starts, notice to job candidates and a written notice every calendar year | Fine of $100 to $500 per violation, enforced by the Department of Labor |
Maine's law became law without the governor's signature on January 11, 2026. We checked Civil Rights Law 52-c, 19 Del. C. 705 and Public Law 2025 chapter 524 on October 21, 2026, at the linked legislature pages. The pages we read don't give Maine's start date, so confirm that before you rely on it.
Other states may have notice rules too. They weren't verified for this guide, so they aren't listed.
Arjun works from New York and Sara works from Maine. Monica sends one notice during onboarding for both of them, then finds out Maine wants a written reminder every year. She had never put that on a calendar.
In short: a notice written to the strictest rule is easier to keep than five written to the minimum.
Do employers need consent, or is notice enough?
Notice and consent are different, and the law asks for one or the other depending on the method. Notice means you tell people monitoring exists. Consent means a person agrees to it. The state monitoring laws above ask for notice. Recording a conversation is where consent takes over.
Notice tells people that monitoring exists.
- Written, often with a signed acknowledgment
- The three states above ask for it
Consent means a person agrees to it.
- Federal law looks for one party's prior consent
- Some states need every party's consent
Monitoring people without their knowledge is where employers get into trouble. A secret method skips the notice those three states require. A secret recording can break the consent rules in the next section. Even where no notice law applies, a signed acknowledgment is the best proof that people knew.
Monica puts one line about monitoring into the employee handbook and calls it done. Her lawyer shakes her head. A handbook line nobody signs for doesn't meet a rule that asks employees to acknowledge the notice.
In short: a signature turns "we told them" into something you can show.
Is it legal to record calls, audio and video at work?
Recording a conversation is where consent rules are strictest. Federal law allows it when one party consents. Some states, such as California and Washington, ask for every party's consent. Video is mostly a state matter. The safest habit is a clear notice at the start of every call.
Swipe sideways for full table
State and law | The rule | What a violation can cost |
|---|---|---|
California, Penal Code 632 | Recording a confidential communication needs every party's consent | A fine up to $2,500 per violation, jail time or both |
Florida, Statutes 934.03 | Interception is lawful when all parties have given prior consent | Felony of the third degree |
Washington, RCW 9.73.030 | Recording a private conversation needs every participant's consent, with listed exceptions | Not checked |
Maryland, Cts. & Jud. Proc. 10-402 | Interception is lawful when all parties have given prior consent | Felony, up to 5 years or a $10,000 fine, or both |
Sources: Penal Code 632, Statutes 934.03, RCW 9.73.030 and Cts. & Jud. Proc. 10-402, checked October 21, 2026. The list is partial.
Cameras and audio at work are mostly a state matter. California bars employers from making audio or video recordings of employees in restrooms, locker rooms or changing rooms. An employer can't use such a recording for any purpose. No federal rule on workplace cameras was verified for this guide.
Arjun's team takes customer calls. A supervisor records one to review it and tells no one. Monica hears about it a week later, and the call goes straight to the lawyer.
In short: for calls, a notice at the start of each one beats memorizing which states want what.
What can an employer monitor on work devices and personal devices?
Work devices and work accounts are the safest ground, because the employer owns them. The Illinois Department of Labor says the state's act doesn't stop an employer from monitoring its own equipment. Personal devices, personal accounts and homes carry more risk, and some states limit what an employer may ask for.
Illinois bars employers from asking for a username and password to a personal online account. California's Labor Code 980 does the same for personal social media, unless the employer is investigating misconduct. It still lets an employer ask for access to a device it issued.
Maine's new law lets an employee decline a request to install a data collection app on a personal device. It also bars audio or video monitoring in a worker's home or personal vehicle unless the job requires it.
For location, California's Penal Code 637.7 bars using an electronic tracking device to find a person. It defines the device as one attached to a vehicle or other movable thing. The text doesn't say whether a phone app counts, so ask a lawyer first.
One more rule covers data. California's privacy law now covers employee data too. The state Attorney General says the exemptions for employment-related data expired on December 31, 2022.
Monica's first draft asked every employee to install the tracker on a personal phone. Sara, in Maine, says no. Monica learns that Maine's new law gives workers that right. She checks the start date with her lawyer and decides the draft was wrong either way.
In short: the company can watch what it owns, and a personal device needs an invitation, not a requirement.
What happens when an employer gets it wrong?
Penalties range from small civil fines to prison time, and in some cases the people monitored can sue. The state fines are in the tables above. Federal law adds a civil claim and a criminal charge for illegal interception. The cheapest fix is a notice, because a missing one is the easiest mistake to avoid.
A person whose communication is intercepted illegally can bring a civil action. A court can award damages, punitive damages in some cases, and attorney's fees.
Under that law, statutory damages are $100 a day or $10,000, whichever is more. The claim must start within two years of when the person could reasonably have found out.
The same wiretap law makes illegal interception a crime, with a fine or up to five years in prison. In Illinois, people harmed under the state's privacy act can sue without filing a complaint first.
In California, a recording made in breach of Penal Code 632 can't be used as evidence. The one exception is a case about the violation itself.
Monitoring data can cause trouble after you collect it. Title VII bars discrimination in the terms and conditions of employment. Firing someone on monitoring data needs the same fairness as any other decision.
Monica's lawyer lays out what could follow the supervisor's secret recording. The customer could make a claim, the recording might be useless as evidence, and the company's name could end up in a complaint. Monica had thought the worst case was an awkward email.
In short: secret recording carries the steepest penalties in this guide, so fix that first.
How can an employer monitor legally?
Decide why you monitor. Collect only what you need. Tell people in writing, and have a lawyer check the state rules. A written plan is what makes a method hold up in practice, so write it before the tool goes live and update it as laws change.
- Write the business reason in one sentence.
- List what the tool collects and what it never collects.
- Send written notice and keep a signed acknowledgment.
- Keep personal devices and accounts out of scope.
- Limit who sees individual data, and set a deletion date.
- Have a lawyer check each state where you have people, then repeat yearly.
Any tool you pick should support steps 2 and 4, and let you limit who sees data. We360.ai is our product, so here is what its privacy docs say, in three parts. They describe a desktop agent that records activity.
The setup page tells admins to check local law before they turn on screenshots or screen recording.
What it collects on a work computer.
- Active window plus app and website use
- Keyboard and mouse activity, not what was typed
- Screenshots at intervals admins set
Where you control it as an admin.
- Screenshots can be switched off for a team or person
- Blur level and manager downloads are adjustable
- Screen recording is off until you enable it
What it never collects from employees.
- Individual typed characters
- Webcam feeds
Employees can see their own numbers in the employee dashboard, and admins can set screenshot controls by team. One honest limit: the docs pages we read don't describe a built-in notice or sign-off step. Your own written notice still has to go out. See how open, policy-led employee monitoring works.
We360.ai gives clear, real-time productivity insights without micromanaging.
Monica uses the six steps as her launch checklist and sends the notice a week before the tool goes live. Sara asks what the screenshots show. Monica opens the settings and shows her the blur level.
In short: a six-line plan, signed notices and a lawyer's check turn the law into routine.
Where does legal end and ethical begin?
Legal is the minimum. A tool can be lawful and still feel unfair when it's secret, wider than the job needs or used to punish. A good test is whether you could explain the setup, in plain words and to the person it watches, without squirming. If you couldn't, change the setup before you launch.
Source: American Psychological Association, Work in America 2026 topline data, Harris Poll, May 21 to June 1, 2026, self-reported by 2,009 employed US adults.
People already assume it's happening. Open practice gives them something better than a guess. For the employee side, see our post on the signs of being monitored at work.
Monica's first dashboard shows managers everything and employees nothing. Sara says it feels like being watched, not measured. Monica admits she designed it for her own comfort.
In short: the law tells you the least you must do, and the people you manage will judge the rest.
FAQ
Is employee monitoring software legal? +−
Yes, in general, when you use it on work devices for a business reason and follow your state's notice and consent rules. The law looks at what the software collects, who sees it and what employees were told, not at the product itself.
Is it legal to monitor employees without their knowledge? +−
What makes an employee monitoring technique legal? +−
A particular employee monitoring technique is legal only if it fits the federal wiretap and stored-message rules, your state's notice and consent rules, and any limit on personal accounts and devices. A written business reason and a signed notice make that easier to show. A lawyer should check the state rules.
Can I sue my employer for spying on me? +−
Sometimes. Federal law lets a person sue over illegal interception of calls or messages. Illinois says people harmed under its privacy act can sue. Whether you have a claim depends on the facts and your state, so talk to an employment lawyer.
Can my employer legally monitor me at home? +−
Yes, on company devices and accounts, where your policy and state notice rules allow it. Under Maine's law, an employer can't watch or listen to you at home through audio or video unless the job requires it. Ask HR for the written policy and read what it covers.
Can I be monitored on my personal device? +−
Sometimes. Maine lets you decline a request to install a monitoring app on a personal device, and Illinois and California bar employers from demanding personal account passwords. Elsewhere the rules vary, so read your policy before you install anything and ask what it collects.
Can employers monitor employee emails? +−
Yes, work email, generally. The California Attorney General says employers may access workplace email and voicemail. Personal email and social accounts are different, and some states bar demanding passwords. Federal stored-message law adds limits, so ask a lawyer before reading anything private.
Related Guides

What is employee monitoring? It is when an employer collects data about how work gets done, such as hours, apps, activity or location, usually with software on company devices. This guide explains what it tracks, how it works, what US law says and how to start fairly.

Screen monitoring software captures what appears on a work computer screen, as scheduled screenshots, a live view or a video recording. Employers use it to review work and settle disputes. Employees should know what it captures and who sees it. This guide covers the types, features, privacy controls and US legal basics.

To monitor employee computer activity well, decide why you need the data, pick the lightest method that answers it, tell employees first and test on one computer before a rollout. This guide covers the methods, built-in tools versus software, setup, what monitoring can see, US notice rules and fair use.

An employee monitoring policy is a short written document that tells employees what a company tracks on work devices, why, who sees the data and how long it's kept. This guide gives you an employee monitoring policy template, sample wording, a consent form and the US notice rules.
