To monitor employee internet usage fairly, record the website domain and the time spent on it, only on work devices and only in working hours. Classify sites as productive, neutral or unproductive for each team, review patterns by week and tell employees exactly what is recorded. Leave page content, private messages and personal accounts alone.
Key takeaways
- Record domains and time, not page content.
- Limit it to work devices and working hours.
- New York's notice law names internet access or usage directly.
- Read trends by team and week. Single visits tell you little.
Why do employers monitor internet usage?
Security
Spotting risky sites, unapproved file sharing and data leaving the company.
Productivity
Seeing how much of the working day goes to work tools.
Policy
Checking that the acceptable use policy is followed, and having evidence when it is not.
Be clear which of the three you are solving. Security monitoring and productivity monitoring need different tools and different levels of detail.
What methods are there?
| Method | What it records | Works for remote staff? | Level of detail |
|---|---|---|---|
| Firewall or DNS logs | Domains requested from the office network | Only on the company network or VPN | Domain |
| Browser management | History and extensions in a managed browser | Yes, on managed browsers | Full address |
| Desktop agent | The site in the active browser tab and the time spent | Yes | Domain, sometimes the page title |
| Content inspection | The content of pages and uploads | Yes | Everything |
For productivity questions, a desktop agent that records the domain is enough. Content inspection belongs to security teams with a specific risk to manage.
How much detail should you record?
The domain tells you whether time went to work tools, news or video. The full address starts to reveal what a person was reading, and page content reveals private life. Each step up needs a stronger reason.
Is it legal to monitor employee internet usage?
In the United States, generally yes on work equipment. This is not legal advice.
- Notice. New York's Civil Rights Law § 52-c requires written notice when an employer monitors internet access or usage. Connecticut and Delaware have notice rules as well.
- Federal law. Employers usually rely on two exceptions to federal wiretap law, summarized in SHRM's toolkit on workplace monitoring: monitoring in the ordinary course of business, and monitoring with the consent of one party.
- UK and EU. You need a lawful basis, clear notice and the least intrusive method that achieves the purpose. See employee monitoring in the UK.
What should you record and what should you leave alone?
Record
- The domain of the site in the active tab
- Time spent, inside working hours
- The category you assigned: productive, neutral or unproductive
Leave alone
- The content of web pages
- Private messages and personal email
- Banking, health and other personal accounts
- Anything outside working hours
How do you set it up?
State the purpose
Productivity, security or policy. Pick one to start.
Write it into the policy
Say that website domains are recorded during working hours on work devices. Use the policy template.
Classify sites by team
Social media is unproductive for accounting and productive for marketing.
Review what has no rule
New tools appear every month. Classify them instead of guessing.
Read weekly trends
Compare a team with its own past, not with another team.
Talk before you act
Ask what a pattern means before you treat it as a problem.
How do you classify websites?
| Example | Engineering | Sales | Marketing |
|---|---|---|---|
| Code hosting and documentation | Productive | Neutral | Neutral |
| CRM | Neutral | Productive | Productive |
| Social networks | Unproductive | Productive, for prospecting | Productive |
| News sites | Neutral | Neutral | Neutral |
| Video streaming | Unproductive | Unproductive | Unproductive |
The same site can be work for one team and distraction for another, which is why one list for the whole company produces unfair scores. More on scoring is in what is a productivity score?
How much personal browsing is normal?
There is no reliable universal figure, and we will not invent one. Short breaks are part of a healthy working day, and some personal browsing comes with them. Set your own norm by looking at each team's baseline over a month, then watch for changes.
Should you block sites instead?
Blocking and monitoring do different jobs. Block what is dangerous or unlawful. For everything else, visibility and a conversation work better than a wall that people route around on their phones.
How does BirdsEye track websites?
- Domain only. BirdsEye records the domain of the site in the active browser tab. It is most precise on Windows.
- Optional. An administrator can switch website tracking off completely.
- Working hours only. Nothing is recorded outside the hours and days you set.
- Your rules. Classify by website domain, application name or words in the window title. Starter rules cover common tools from day one.
- Nothing left unclassified for long. BirdsEye suggests rules for the domains seen most often and lists everything no rule covers.
- Visible to employees. The agent shows each person whether website tracking is on.
- VS Codeproductive
- Figmaproductive
- Outlookneutral
- Video streaming sitesunproductive
Frequently asked questions
Can my employer see my browsing history?
On a work device, usually yes, in some form. Monitoring software, managed browsers and the company network can all record which sites are visited. What is recorded depends on the tool and the policy.
Can employers see private or incognito browsing?
Yes. Private mode only stops the browser saving history on the device. Monitoring software and network logs still see the sites.
Is it better to block websites or monitor them?
Block what is dangerous. Monitor the rest and deal with patterns through conversation. Heavy blocking pushes personal browsing onto phones and tells you nothing.
Does monitoring include personal accounts?
It should not. Record the domain, not the content, and tell employees to keep personal accounts on personal devices.