Yes. In the United States, employers can generally monitor activity on company-owned devices and networks when they have a legitimate business reason. Federal law restricts intercepting communications, and New York, Connecticut and Delaware require written notice of electronic monitoring. Monitoring that reaches personal accounts, off-duty time or union activity carries real legal risk.
Key takeaways
- No federal law bans monitoring of work computers, and no federal law requires notice.
- New York, Connecticut and Delaware require employers to tell employees in writing.
- Audio recording, biometrics and personal accounts are governed by stricter rules.
- A written policy with a signed acknowledgment is the single most useful protection.
Is it legal to monitor employees' computers in the US?
Generally, yes. Courts start from the question of whether the employee had a reasonable expectation of privacy. On a computer the company owns, used on a network the company runs, under a policy that says use may be monitored, that expectation is low.
That is why the written policy matters so much. It is the document that sets the expectation.
Which federal laws apply to employee monitoring?
The Electronic Communications Privacy Act (ECPA). The ECPA makes it unlawful to intentionally intercept wire, oral or electronic communications. Employers usually rely on two exceptions, summarized in SHRM's toolkit on workplace monitoring: monitoring in the ordinary course of business, and monitoring with the consent of one party.
The Stored Communications Act. This part of the ECPA covers messages at rest. A company that provides the email or messaging system can generally access what is stored on it. That does not extend to an employee's personal, password-protected accounts.
The National Labor Relations Act. Employees have a right to discuss pay and working conditions and to organize. Surveillance aimed at that activity, or that discourages it, can be an unfair labor practice.
The Fair Labor Standards Act. This is a pay law, but it matters here. If your monitoring data shows someone working outside scheduled hours, that time counts. The Department of Labor is direct about it: work that is "suffered or permitted" is work time that must be paid.
Which states require notice of employee monitoring?
| State | Law | What it requires | Penalty |
|---|---|---|---|
| New York | Civil Rights Law § 52-c, in force since May 7, 2022 | Written notice at hiring to employees whose phone, email or internet use is monitored, an acknowledgment in writing or electronic form, and a notice posted in a conspicuous place | Civil penalties up to $500 for a first violation, $1,000 for a second and $3,000 for each one after |
| Connecticut | General Statutes § 31-48d | Prior written notice of the types of monitoring that may occur. Posting the notice in a conspicuous place satisfies the rule. There is a narrow exception for investigating suspected misconduct | $500 for a first offense, $1,000 for a second and $3,000 for each one after |
| Delaware | Title 19, § 705 | Either an electronic notice each day the employee uses employer email or internet, or a one-time notice the employee acknowledges | $100 per violation |
Three more sets of state rules come up often:
- Audio. Several states, including California, Florida and Pennsylvania, require every party's consent before a conversation is recorded. Treat any feature that records sound with care.
- Biometrics. The Illinois Biometric Information Privacy Act requires written notice and a written release before a company collects identifiers such as fingerprints or scans of face geometry.
- Employee data in California. Since January 1, 2023, the California Consumer Privacy Act has covered employees of businesses subject to it, including the duty to give notice when personal information is collected.
What can employers legally monitor?
On company devices and accounts, with a business purpose and a clear policy, employers typically monitor:
- hours worked, attendance and breaks
- applications and websites used
- work email and work chat accounts
- files on company storage
- screenshots during working hours
- company vehicles and company phones
What is risky or off limits?
- Personal accounts. Reading an employee's personal email or social media, even on a work computer, can violate federal and state law.
- Recording audio without the consent state law requires.
- Private spaces. Cameras in restrooms and changing areas are prohibited almost everywhere.
- Off-duty time and personal devices without clear consent.
- Union and protected activity.
- Sensitive details caught by accident. A screenshot can capture a medical portal or a bank balance. Blurring screenshots and limiting who can view them reduces that exposure.
Do you have to tell employees they are being monitored?
In New York, Connecticut and Delaware, yes, in writing. Everywhere else in the US there is no general duty, but telling employees is still the right call. Notice lowers the expectation of privacy that claims depend on, and it avoids the damage that follows when people discover monitoring on their own.
Use the employee monitoring policy template and the announcement plan.
What should you do before you start monitoring?
Write down the purpose
Timekeeping, billing, security or workload.
Limit the scope
Limit monitoring to company devices and to working hours.
Write the policy
Put it in a written policy that lists what is and is not recorded.
Give notice
Give notice and collect a signed acknowledgment from every employee.
Post the notice
Post it where your state requires it.
Control the data
Restrict who can see the data, and decide how long to keep it.
Get legal advice on the riskier parts
Get legal advice before adding webcam, audio or biometric features, or before monitoring staff outside the US. The rules in Europe are different. See Employee monitoring under GDPR.
How does BirdsEye help you monitor lawfully?
Compliance is the employer's job, and software cannot do it for you. What software can do is make the lawful path the default. In BirdsEye, every employee can open the desktop agent and see the rules applied to them. Tracking stops outside the working hours and days you set, and a manager's request for an immediate capture is refused outside them. Screenshots can be blurred, access follows roles, and an audit log records changes to settings. Details are on the security and privacy page.
Frequently asked questions
Can my employer monitor my personal computer?
Not without your knowledge in any practical sense. Monitoring software has to be installed on the device. If you install your employer's software on a personal computer, it can record what that software is built to record while it runs.
Can employers monitor employees who work from home?
Yes. The rules follow the device and the account, not the location. A company laptop at home can be monitored the same way as one in the office, subject to the same notice requirements.
Is it legal to take screenshots of employees' screens?
On company devices and for a business purpose, generally yes in the US, with written notice in New York, Connecticut and Delaware. Reduce risk by limiting captures to working hours, blurring them and restricting who can view them.
Can an employer monitor without telling employees?
Federal law has no general notice requirement, but three states do, and covert monitoring is hard to defend if challenged. Connecticut's law has a narrow exception for investigating suspected misconduct. Get legal advice before monitoring anyone covertly.
Sources
- New York Civil Rights Law § 52-c
- Holland & Knight: New York law requires notice of employees' electronic monitoring
- Connecticut General Statutes § 31-48d
- Delaware Code, Title 19, Chapter 7, § 705
- SHRM: Managing workplace monitoring and surveillance
- US Department of Labor: Fact Sheet 22, Hours Worked under the FLSA
- Illinois Biometric Information Privacy Act, 740 ILCS 14