Privacy at Work
Workers often assume their employer can't read their messages or track their location, and many employers assume they can monitor everything. The truth is in the middle and varies by state. In general, you have less privacy on employer systems and in work areas than at home, but laws limit some kinds of monitoring and protect certain information.
- All Workers
- Drivers
- Remote Workers
- Employers
Email, devices and internet
- Employers generally may monitor work email, chat, files and internet use on company systems and devices, especially if they have a policy saying so. Assume work messages can be read.
- Several states require written notice of electronic monitoring. A few limit what employers can access.
- Using personal accounts (private email, personal social media) is more private, but employers may have a policy limiting access from work devices. Don't log into personal accounts on a work computer.
- On your own phone, an employer usually can't demand access unless there's a clear policy and your consent. Company management apps on a personal phone can see some data; read what you install. See Smartphone Security.
- Several states ban employers from requiring passwords to your personal social media accounts.
Cameras and recording
- Employers can generally use video cameras in work areas such as shop floors, offices and job sites. They can't place cameras where people expect real privacy, such as restrooms, locker rooms, changing areas and, in many states, break rooms used for private needs.
- Audio recording is more tightly regulated by wiretap laws. Many states require consent from one or all parties to a conversation. Hidden audio recording of private conversations is often illegal.
- Vehicle cameras (dashcams) face drivers and the road. Companies must follow state laws and tell workers; driver-facing cameras are an active privacy issue. See Safe Driving Basics.
- Union and group activity: employers can't use surveillance to spy on protected union or group activity under the NLRA. See Right to Organize.
Location tracking and wearables
- Employers can usually use GPS on company vehicles and equipment and track work phones during work hours. Some states require notice or limit tracking to work time.
- Tracking you on off-duty time, through your personal phone or vehicle, is more restricted. Many states bar it.
- Employers may use wearable sensors and badges for safety, such as fall detection, heat monitoring and lone worker alerts. Ask what data is collected, who sees it, how long it's kept, and whether it can be used for discipline. See Lone Working.
- Biometrics such as fingerprints and face scans for clock-ins are limited by laws in some states that require written consent and set rules for storing the data.
Medical and personal information
- Medical information your employer gets through ADA exams, leave requests and workers' compensation must be kept confidential, in files separate from your regular personnel file. See Disability Accommodations.
- Employers can't ask for genetic information or family medical history under the Genetic Information Nondiscrimination Act (GINA), with limited exceptions.
- Drug tests and medical screenings are limited by law and, in some places, restricted to safety-sensitive jobs. See Drug Testing.
- Your Social Security number, bank account and home address should be protected. Ask how HR stores it. See Identity Theft.
- You can generally see your personnel file in many states. See Access to Records for OSHA exposure and medical records.
Searches, lockers and off-duty conduct
- Employers can usually search company property such as lockers, desks, vehicles and tool boxes, especially under a clear policy. Your own locked bag or personal locks are less clear, so ask about the policy.
- Some states protect lawful off-duty conduct or off-duty political activity. Many don't. Posts that are about pay, safety or working conditions made with coworkers can be protected under the NLRA. See Social Media & Your Job.
How to protect yourself
- Read the handbook and policies on monitoring and ask what is collected.
- Use work systems for work only and personal ones for personal matters.
- Assume anything on a work device is visible. Don't send sensitive personal messages on work accounts.
- Raise concerns in writing with HR or your union rep, and ask for notice and data-retention limits.
- Contact your state attorney general or labor department if you think you're being unlawfully monitored. See Where to Get Help.
Workplace privacy checklist
- I read my employer's monitoring policy and know what's collected
- I keep personal accounts and messages off work devices
- I know cameras and recording aren't allowed in restrooms or changing areas
- I know my medical information must be kept confidential
- I know where to report unlawful monitoring
Standards & references
Last updated: