Federal laws prohibit the interception of another’s electronic communications, but these same laws have multiple exceptions that generally allow employers to monitor employees’ email and internet use on employer-owned equipment or networks. As a result, under federal law, if a private-sector employee uses an organization’s telephone or computer system, their employer is generally permitted to monitor their communications. That said, once the personal nature of a communication is determined an employer’s ability to continue monitoring the communication may be curtailed. For example, under the National Labor Relations Act, employers cannot electronically spy on certain types of concerted activity by employees about the terms and conditions of employment.
Although monitoring is broadly permitted under federal law, some states require that employers notify employees that they may be monitored. Even in states that do not require notice, employers often choose to provide notice since employees who think that they are being monitored are less likely to misuse corporate systems. It is good practice for an employer to have employees sign a consent or acknowledgment that monitoring may occur and to inform them that personal calls may not be made from particular telephones.
Employers may also monitor what an employee posts to social media. Some states prohibit, however, employers from requesting that an employee provide his or her username and password to a social-media account in order for the employer to see content that was not published publicly. This would include, for example, posts that were made available only to an employee’s friends, or personal network. In addition, some states prohibit employers from requiring that their employees accept a friend request that would permit the employer to view friends-only social media posts. Finally, some states prohibit monitoring of telephone calls on an employer’s telephone network without the consent of one or both parties to the communication.
Percent of employers who actively monitor their employees electronically.1
States that require private companies to provide notice to employees of electronic monitoring.2
States that introduced or considered legislation in 2016 prohibiting employers from requesting passwords to social media accounts.3
What to consider when crafting an employee monitoring policy:
1. Romy Ribitzky, “Active Monitoring of Employees Rises to 78%,” ABC News (Apr. 18, 2017) available at http://abcnews.go.com/Business/story?id=88319&page=1.
2. National Conference of State Legislatures, State Laws Related to Internet Privacy, (last checked Dec. 31, 2017), http://www.ncsl.org/research/telecommunications-and-information-technology/state-laws-related-to-internet-privacy.aspx; these states are: Connecticut (Conn. Gen. Stat. § 31-48d) and Delaware (Del. Code § 19-7-705).
3. National Conference of State Legislatures, Access to Social Media Usernames and Passwords, (last checked Dec. 31, 2017), http://www.ncsl.org/research/telecommunications-and-information-technology/employer-access-to-social-media-passwords-2013.aspx.