Employee Monitoring Laws by State (US 2026) — State-by-State Guide

States with Specific Employee Monitoring Laws

New York — Electronic Monitoring Law (ESPA 2022)

New York's Electronic Monitoring Law (effective May 2022) requires:

• Employers with employees in New York must provide prior written notice before monitoring email, internet activity, or telephone communications.
• The notice must be in writing (electronic is acceptable), acknowledge the employee's receipt, and describe specifically what monitoring will occur.
• A notice must be provided to each new hire at or before the time of hiring.
• The law applies to private employers with employees in New York — remote employees working from New York for an out-of-state employer are covered.
• Penalties: civil penalties of $500 (first violation), $1,000 (second), $3,000 (subsequent violations).

Connecticut — Electronic Monitoring Law

Connecticut's employee monitoring statute (CGS §31-48d) is among the most prescriptive in the US:

• Employers must give employees prior written notice of any electronic monitoring that may occur.
• The notice must describe the types of monitoring that may be used (email, phone, internet, computer activity).
• Must be provided one time in writing (at hiring or before monitoring begins).
• Posting notice in the workplace is also acceptable for general workforce notification.
• Exceptions: employer may monitor without notice if there is reasonable grounds to believe criminal activity is being committed, and the monitoring is for investigating that specific activity.

Delaware — Computer Crime Law + Monitoring Provisions

Delaware requires employers to notify employees if they are monitoring computer usage, phone calls, or email. The notification requirement covers all forms of electronic monitoring on company-provided equipment. No specific form is required, but written policy included in the employee handbook and acknowledged in writing is best practice.

California — CCPA, Labor Code, and Privacy Rights

California has the strongest employee privacy regime in the US:

• California Consumer Privacy Act (CCPA) — as amended by CPRA, grants employees rights to know what personal information employers collect, the right to opt out of "sale" of personal information, and the right to non-retaliation for exercising rights. Employer exemption expired in 2023 — employees are now fully covered.
• Labor Code §980 — prohibits employers from requiring employees to disclose personal social media account credentials or to access personal accounts in the employer's presence.
• Penal Code §637.7 — prohibits electronic tracking of an employee's location without their consent, with narrow exceptions. GPS tracking of company vehicles is generally permitted; employee personal vehicles are generally not.
• California Constitution Art. I §1 — provides an independent right to privacy that courts have applied to workplace monitoring, even in private employment contexts.
• Best practice for California: extensive written notice, granular consent where possible, avoid any monitoring that could constitute surveillance of protected activities (union activities, political activity, etc.).

Texas, Florida, and Employer-Friendly States

Most states have no specific employee monitoring legislation beyond the ECPA baseline. In these states — Texas, Florida, Georgia, Arizona, and most others — employer monitoring of company-provided equipment and communications is broadly permitted with disclosure via employment policy. Best practice remains:

• Written monitoring policy in the employee handbook
• Signed acknowledgement at onboarding
• Clear statement that company devices and networks are monitored
• Purpose limitation to legitimate business activities

Remote Workers — Which State Law Applies?

For remote employees, the question of which state's law applies is increasingly important. The general principle: the law of the state where the employee works (their home state) applies, not the employer's state. This means:

• A New York-based company with a remote employee working from California must comply with California's employee privacy requirements for that employee.
• A Texas-based company with a remote employee in New York must provide the New York ESPA 2022 written notice to that employee.
• Multi-state employers should use a monitoring policy that satisfies the most restrictive states where they have employees — typically California and New York.

50-State Quick Reference

Best Practice for Multi-State Employers

1. Use a written monitoring policy that satisfies New York and Connecticut requirements — this covers all states' requirements by default.
2. Add California-specific provisions: employee rights under CCPA, GPS consent for personal vehicles, union activity exclusions.
3. Require signed acknowledgement at onboarding and for every policy update.
4. Maintain a register of employees by state; ensure state-specific notices are delivered.
5. Review policy annually — employee monitoring legislation is evolving; additional states are likely to pass specific laws in 2026-2027.
6. Consult an employment lawyer in any state where you hire a significant number of remote employees.

This article is for general informational purposes only. Employee monitoring laws change frequently. Consult a licensed employment attorney in your jurisdiction before implementing monitoring programmes.