Employers monitor systems for security, productivity and compliance reasons. Doing so lawfully depends on notice, scope, and the particular channel involved.
Company systems. Monitoring of employer-owned devices, email and network activity is generally permitted where employees have been told, which is why an acknowledged policy defeating any expectation of privacy is the foundation.
Communications interception is regulated by wiretap statutes. Recording calls requires consent — one party in many states, all parties in others, and the stricter rule usually governs a multi-state call.
Stored communications. Accessing an employee’s personal webmail or social account, even from a company device, or using credentials saved in a browser, can violate computer access and stored communications laws. Ownership of the device does not carry ownership of the account.
Location tracking of vehicles and devices attracts state-specific rules, including consent and off-duty limits.
Video is generally permitted in work areas with notice, and prohibited in areas with a reasonable expectation of privacy.
Labour law limits. Surveillance of union or other protected concerted activity, or creating the impression of it, is unlawful.
Data protection obligations attach to what is collected: purpose limits, retention schedules and access controls. Collecting more than is needed creates a discovery and breach exposure that outlasts the reason for collecting it.