Tag: privacy rights

You probably have less privacy at work than you think

Most of us understand that the workplace isn't quite the same as home. You're on someone else's time, using someone else's equipment, and operating within someone else's rules. But most employees don't fully grasp just how far that goes until they find themselves in a difficult situation, and by then, it's often a surprise.

What employers can actually monitor

Under federal and state law, employers have broad legal authority to monitor what happens on their systems and on their property. That can include:

Reading employee emails

Recording telephone conversations

Reviewing voicemail

Monitoring computer and internet activity

Video recording of employees in common work areas

If you're using your employer's devices, networks, or accounts, the general rule is that your employer may have access to what you're doing on them.

The email situation most people don't see coming

Email is one of the most common ways this plays out. Inboxes fill up fast, and it's completely normal to occasionally receive or forward something personal during the workday. A message from a friend, a funny photo, something forwarded from someone else.

Here's the scenario we see more than you'd think: an employee forwards something without reading it closely, or without scrolling all the way through. Buried in that email is language that's sexual, offensive, or otherwise inappropriate. The company's IT department flags it. It lands on a supervisor's desk. And suddenly the employee is facing discipline or termination, feeling like their privacy was violated, and discovering that legally, it wasn't.

The legal reality

This is the part that catches people off guard. Under both federal and state law, employees generally have little to no expectation of privacy when using company-owned equipment or systems. Courts have consistently upheld an employer's right to monitor workplace communications, and most company policies, often buried in an employee handbook you signed when you were hired, explicitly put employees on notice that monitoring may occur.

That doesn't mean employers can do anything they want. There are still limits, and context matters. But if you're using a work computer, a work email address, or a work phone, the baseline assumption should be that those communications are not private.

A few things that might surprise you

Two situations often catch people off guard, and they're worth spelling out clearly.

First, personal email accessed on a work computer. You might assume that logging into your Gmail or Yahoo account on your work laptop keeps things private because it's password-protected and it's your personal account. But under the Electronic Communications Privacy Act (ECPA), if you're accessing that email on a device owned by your employer, the employer may have the ability to monitor that activity. The password protects your account from outside access, but it doesn't necessarily protect the content from your employer's view of what's happening on their machine.

Second, text messages on an Apple device. If your employer issued you a Mac computer and you use Apple products, your iPhone texts and iMessages may sync to that computer automatically. Under the ECPA's Stored Communications Act (SCA), employers may be able to access communications stored on their systems, and a work Mac that backs up or logs your messages could qualify. Real-time interception of iMessages is a more complicated question, but stored messages on an employer-owned device are far more accessible than most people realize.

The key principle across all of this is straightforward: when you use your employer's equipment or networks, your expectation of privacy is significantly reduced, especially if your employer has a monitoring policy in place and has notified you of it.

What the law requires of employers

Federal law gives employers fairly wide latitude, but states have added their own rules.

In New York, employers must provide written notice at the time of hiring and post visible notices in the workplace if they monitor telephone, email, or internet activity. Those notices are often buried in employee handbooks that get signed on day one and forgotten, but they do count as consent under the law.

In Texas and Florida, there are no specific state notice requirements the way New York has them, but employers are still expected to have clear, communicated policies in place. Courts in both states have consistently held that when an employer puts employees on notice through a written policy, the employee's reasonable expectation of privacy on office equipment is significantly reduced. In Florida, the Florida Security of Communications Act also permits monitoring when an employee has acknowledged a workplace policy allowing it.

California takes a stricter approach. Employers there can still monitor office computers and internet activity, but courts have recognized that employees don't entirely lose their privacy rights just because they're at work. Overly intrusive monitoring methods, even in an office setting, have been found to cross the line when employees haven't been adequately informed.

What you can do

The simplest way to protect yourself is also the most practical: keep personal communications on personal devices and personal accounts. If something feels questionable to forward or send, trust that instinct. And be aware of any websites you log into from your work computer. If you wouldn’t do it with your boss looking over your shoulder then you probably shouldn’t do it on your work device.

And if you're in a situation where you believe your employer has crossed a line, whether it's monitoring that feels retaliatory, discriminatory, or connected to a broader workplace issue, it's worth talking to someone who can help you evaluate what actually happened and what your options are.

If you have questions about your rights at work, we're happy to help. Reach out to our team at VKV and let's figure out where you stand.