Can I Monitor My Employees’ Email and Computer Activity?
You want to know what your employees are doing on company devices during work hours. Maybe you suspect someone is leaking information. Maybe you want to verify that remote employees are actually working. Maybe you just want to understand how company technology is being used. Can you legally monitor their email and computer activity?
The general answer is yes, with important caveats.
The General Rule: Employer-Owned Devices Are Employer Territory
When employees use company-owned devices (laptops, phones, tablets, etc.) and company-provided systems (email accounts, network access, software, etc.), employers have broad latitude to monitor that activity. The legal basis is straightforward: it is your property and your system.
Federal law does not prohibit employers from monitoring communications on company systems, provided those systems are used for business purposes and employees have been notified that monitoring may occur.
Notice Is Critical
The most important legal protection for employer monitoring is notice. Employees who are informed in advance that company devices and systems may be monitored have a significantly reduced expectation of privacy on those systems.
Notice should be:
• In writing: in your employee handbook, an acceptable use policy, or an employment agreement
• Specific: stating what types of monitoring may occur (email, internet usage, application activity, etc.)
• Acknowledged: employees should sign confirming they received and understood the notice
Without notice, monitoring is still often legally permissible, but notice eliminates the argument that employees had a reasonable expectation of privacy on company systems.
State Law Variations
Several states impose additional restrictions on employer monitoring:
• Connecticut and Delaware require employers to provide specific written notice of electronic monitoring before implementing it
• California has stronger privacy protections than most states, and monitoring that goes beyond what employees were notified about creates liability
• New York City has an electronic monitoring disclosure law requiring annual notification
Before implementing any monitoring program, check your state’s specific requirements.
What You Generally Cannot Monitor
Personal devices
If an employee uses their personal phone or personal laptop for work, either because you allow BYOD (bring your own device) or because they choose to, your monitoring rights are much more limited. You generally cannot install monitoring software on an employee’s personal device without their explicit consent, and even with consent, the scope of what you can monitor is narrower.
Personal accounts on company devices
Even on company devices, monitoring personal accounts like a personal Gmail account or a personal social media account raises different issues than monitoring company email. Courts have sometimes found that employees retain privacy interests in personal accounts even when accessed on company equipment.
Union employees
If your employees are unionized, monitoring may be a mandatory subject of bargaining. New monitoring programs may need to be negotiated before implementation.
The Practical Question: Should You?
Even where monitoring is legally permissible, the management question is whether it is wise. Pervasive monitoring like keystroke logging, screenshot capture, and constant activity tracking signals distrust, damages morale, and often backfires by increasing turnover among the employees whom you do not want to leave.
The most common legitimate uses for monitoring are: investigating a specific suspected policy violation, verifying compliance with data security requirements in regulated industries, and reviewing communications after a complaint or incident. Monitoring as a default management approach for all employees is a different calculation. For a more effective approach to remote performance concerns, see Remote Employee Not Responsive During Work Hours: What Can I Do?.
The Bottom Line
Monitoring company devices and systems is generally permissible with proper notice. Have a written technology use policy, notify employees that monitoring may occur, and document acknowledgment. Before implementing broad monitoring programs, check your state’s specific requirements and consult with HR or employment counsel. For a broader look at the written policies every small business should have in place, see HR Policies Every Small Business Needs.
Get a Complete Employee Handbook Template
Our handbook includes a technology and equipment use policy with monitoring disclosure language, giving you the written notice foundation you need to protect your business while monitoring company systems.
→ Small Business Employee Handbook Template — $199 | pragmatichrgroup.com
Editable Word document + PDF. Instant download. Created by a SHRM-SCP certified HR professional.
Questions about this or other HR topics? Visit pragmatichrgroup.com for more resources.
