Workplace surveillance and the law

Workplace surveillance is legal in most of the country, with a thin and growing layer of notice requirements on top. New York became the largest state to require private employers to give written notice of electronic monitoring when its law took effect in 2022 (New York statute, 2022), joining older notice laws in Connecticut and Delaware, while no federal statute governs monitoring of workers in general (national legal terrain, 2022–2024).

This explainer covers what employers may track, what they must tell workers, and where the enforceable lines sit.

What can employers legally monitor?

On company systems and premises, a great deal. Courts have generally allowed monitoring of company email, networks, internet use and employer-owned devices, and video surveillance of non-private work areas, with the main federal constraints coming from the Electronic Communications Privacy Act's business-use exception and the National Labor Relations Act's protection of organizing (federal statutes and NLRB guidance). A general counsel memo in 2022 framed surveillance that tends to interfere with protected activity as a potential unfair labor practice (NLRB GC memo 23-02, 2022).

The word 'generally' carries weight. Facts decide these cases, and a camera or keylogger aimed at protected conversation is treated differently from one aimed at productivity.

Which states require notice of monitoring?

Three anchor the map. Connecticut's law dates to 1998, Delaware's to 2000, and New York's electronic monitoring notice act took effect in May 2022, requiring written notice at hiring and a posted notice for electronic monitoring of employee activity (state statutes, 1998–2022). A handful of localities have added their own rules. Most states require nothing specific.

Notice statutes tell workers that monitoring exists. They do not limit what is collected, how long it is kept, or what decisions it drives — which is exactly where most of the current legislative argument sits.

Does monitoring law differ for remote workers?

Substantively, no; practically, yes. The notice statutes apply to monitoring wherever the employee sits, but home spaces raise privacy expectations that company premises do not, and several courts have treated recording in areas where workers hold a reasonable expectation of privacy far more skeptically (case law summarized in legal reporting, 2021–2023). Employers have responded with camera-off policies and monitoring scoped to work applications only — as policy, not as legal command.

Workers in multiple states at once, common in remote arrangements, can fall under more than one notice regime. The employer must satisfy the strictest applicable one.

Can surveillance discipline be challenged?

Yes, through three different doors, each with its own clock and forum. In a union workplace, discipline and the monitoring itself can be grieved and, for deployment decisions, bargained as a mandatory subject. In any workplace, surveillance that interferes with organizing can support an unfair labor practice charge (NLRB GC memo 23-02, 2022). And in states with off-duty-conduct or privacy statutes, monitoring outside work hours or in private areas can support a state claim.

1. Preserve the notices, policies and any posted warnings about monitoring.
2. Document what data the system collected and what decision relied on it.
3. Match the facts to the applicable forum: grievance, board charge, or state claim.
4. File within the forum's deadline — charge deadlines in labor cases are short.

Union Times Today publishes information, not professional advice; the list describes the ordinary routes, not a conclusion about any case.

The wiretap framework supplies the outer boundary, and it is older than the technology it now governs. The federal Electronic Communications Privacy Act and its state analogues prohibit intentional interception of communications, subject to the business-use exception that employers rely on for routine system monitoring (ECPA, as amended). The exception covers ordinary course-of-business monitoring of the employer's own systems; it does not clearly cover audio recording of conversations, which several states regulate through all-party-consent recording statutes (state recording laws, various years).

That split is why camera systems and audio systems are treated differently in practice. A video camera in a work area raises, at most, a notice question in most states. A microphone in the same camera raises a consent question, and consent statutes carry their own penalties. Employers who bought integrated camera-and-audio hardware have learned the distinction from enforcement, not from documentation.

Biometric systems sit at the newest edge. Time clocks and access systems that scan fingerprints or faces trigger statutes in a growing set of states requiring notice, consent and retention schedules, with a private right of action in at least one major state (state biometric privacy statutes, 2008–2024). Employment is one of the largest commercial users of biometric identification, which is why the notice-and-consent regime there has more litigation behind it than any general monitoring law.

One enforcement detail shows how the notice laws bite. New York's act carries per-violation penalties assessed for each affected employee, not per employer, which converted a paperwork duty into a class-scale exposure and drove rapid compliance after the 2022 effective date (New York statute, 2022). Penalty structure, more than statutory text, explains why some notice laws are widely followed and others ignored: where the fine is fixed and small, notice becomes a line item; where it multiplies by headcount, it becomes a compliance program.

A reader evaluating any monitoring program can ask four questions that cover most of the law. What system collects the data, and on whose equipment. Which notice statutes attach, by state and by work location. Whether any collection touches protected organizing or private spaces. And which decisions — pay, discipline, scheduling — actually consume the data, because the consuming decision, not the collection, is where every forum locates the harm.

What is on the legislative agenda?

The pending direction runs from notice toward limits: bills in several states have proposed restricting what may be collected, capping retention, or barring monitoring of off-duty activity (state legislative reporting, 2023–2024). None has broadly passed. What is established today is a notice regime in a minority of states, the federal business-use exception, and the labor board's charging posture on surveillance that touches organizing (NLRB, 2022).

What remains genuinely unknown is whether any state will bind the substance rather than the paperwork. What no jurisdiction yet grants is a general right to know what was collected, how long it is kept, or which decision it drove.

Related: Why hospital staffing falls short · Algorithmic management at work.