Can My Employer Monitor My Emails and Internet Usage?

You open your work laptop and send a quick personal email — only to wonder, “Is my boss reading this?” Employee privacy in the workplace is a legal gray area, often leaving workers confused about what employers can and cannot monitor. While companies have legitimate reasons for tracking communications, they must also follow legal guidelines.

Understanding your privacy rights is crucial to ensuring that your employer isn’t overstepping legal boundaries. If you’re concerned about how much of your digital activity is being watched, understanding the steps you can take to protect your privacy can give you peace of mind. For legal help, reach out to an employment lawyer.

Understanding Employer Monitoring Practices

Legitimate business reasons for monitoring employees include enhanced security, enforcing productivity, and ensuring policy compliance. Responsible companies balance the need for employee monitoring with respect for the employee’s privacy rights.

Employee monitoring software can track actions on work computers and cell phones and may include email monitoring and internet activity. Screen recording and keystroke software tracks the actions taking place on the company-owned computer. Employers may also monitor phone calls and voicemail messages. This type of monitoring is common in industries where employee communications with customers are common. Recorded calls can be used to audit quality and training.

Employee monitoring can take place with other types of company equipment. For businesses that have employee-driven vehicles, GPS and driver habit tracking may be used. This tracking ensures the vehicles are only used for business purposes and are driven responsibly.

Companies may monitor general and shared spaces of the business premises with video surveillance. This does not extend to areas where there is a reasonable expectations of privacy, such as the bathroom.

Fight for Your Employee Rights at Work

If your employer is violating your rights, you can find a top employment law attorney near you in the Super Lawyers directory who will stand up for you.

Find a lawyer today

Legal Framework for Email and Internet Monitoring

While employers can monitor employee emails on company-owned devices, they must adhere to a complex legal framework, including:

• The National Labor Relations Act (NLRA). Prohibits employers from using their email monitoring software to prevent employees from protected union organizing activities.
• The Electronic Communications Privacy Act (ECPA). Provides privacy protections for wire, oral, and electronic communications. However, if there is a legitimate business purpose, an employer can monitor communications. To claim this exception, the employer must be able to show the business reason. Another exception is consent. Employers can gain consent to monitoring through employment agreements or company policies.
• The Stored Communications Act (SCA). Limits the scope of monitoring that employers can engage in. Employers can access stored emails located on the company system but cannot access private emails.
• The Computer Fraud and Abuse Act (CFAA). Initially enacted to address computer hacking. However, it also applies to employers whose monitoring goes beyond what they are authorized. It protects employees from an employer accessing personal emails without permission.

No single federal law governs employee privacy across all communication methods and situations. An employment lawyer can help you determine which federal law applies to your situation.

State laws may provide an additional layer of protection to employees, though they can vary significantly. Some states have enacted laws governing employer monitoring of email and other electronic communications. New York, Connecticut, and Delaware require employers to give employees advance notice before monitoring electronic communications. Other states require consent from all parties being monitored in electronic communications or have biometric data regulations.

Monitoring of Remote Employees

In recent years, monitoring and privacy concerns have faced a new challenge: Remote workers. This can be even more complicated when the employee resides in a different state from their employer. There can be additional legal issues if the remote employee uses their personal device to access a work email account.

Modern technology has also necessitated laws to address how employees use social media. Many states have enacted laws to limit an employer’s ability to access their employee’s social media.

Employee Consent and Reasonable Monitoring

Employers must find a balance between monitoring employees and protecting employee’s privacy. Lax monitoring can leave security and productivity gaps; overly aggressive monitoring can violate federal and state laws.

One area of dispute is employee consent. Employers should know the difference between explicit and implicit consent:

• Explicit consent. Clear and documented permission from the employee, typically involving the employee signing an employment agreement or employee handbook.
• Implicit consent. Inferred consent from the employee. This approach typically has the employer casually communicating that monitoring will happen to employees but not getting direct agreement from the employee.

Employers and employees should understand when there is an expectation of privacy. Generally, employees have a low expectation of privacy when using company-owned devices. The expectation of privacy is higher when employees use personal devices or accounts for work purposes.

Employer Best Practices

Employers should develop clear monitoring policies that define the scope, purpose, and monitoring method. All policies should be written down and made available to employees.

The employer should get explicit consent from employees, ensuring they acknowledge and agree to the monitoring practices. The employer should routinely audit their monitoring practices to maintain a balance and prevent overly invasive actions.

Finally, employers should routinely consult with an employment attorney to stay up to date on the law. As laws change, an employer may need to adjust their monitoring practices to stay compliant.

Steps To Take if You Suspect Privacy Violations

If you suspect your employer has violated your privacy rights, there are several steps you can take.

Start by reviewing your employee handbook to familiarize yourself with relevant company policies. There may also be separate additional written policy agreements as companies update their policies in response to changing technology.

Maintain your own record of all communications between you and your employer about monitoring policies and actions. If you address a privacy violation, keep all relevant communications in writing. Take note of the date, time, and method of monitoring for each instance that you believe is a violation of your privacy rights. Try to communicate with the company first to resolve the issue.

If you need to take further steps to protect your privacy rights, consult with an employment attorney. A lawyer will know the relevant federal and state privacy laws and can explain when a company is allowed to monitor signs of employee rights violations. With professional legal advice, you can determine if you have a claim.

Find Legal Help

Employer monitoring is a common practice, but it must be conducted within the bounds of the law. If your employer’s monitoring feels invasive or violates stated policies, you have legal avenues to challenge it. Since employment law varies widely by jurisdiction, seeking legal counsel is the best way to understand your options.

Find a skilled employment lawyer who can assist you with protecting your employment rights.