WorkAuditor Blog

Is monitoring employees on company laptops legal? In most US states, yes — a company-issued laptop is employer property, and courts afford employees little expectation of privacy in the work activity that happens on it. The legal risk rarely comes from the monitoring itself. It comes from how the monitoring is rolled out: silently, without a policy, or in ways that reach into spaces the law still protects.

I've walked HR teams through this question more times than I can count. One marketing agency bought a fleet of used laptops and deployed monitoring before writing a single page of policy. A terminated employee spotted the agent in Task Manager and filed suit, and the agency settled for five figures mostly because it had never documented its own surveillance. Contrast that with a financial services client that did the paperwork first: policy, login banner, onboarding acknowledgment, and a narrow data-access list. That company has monitored for three years and has yet to lose a motion, because every employee's consent is on file.

Why company-owned hardware tilts the law in your favor

The Supreme Court's workplace-privacy framework asks whether the employee had a reasonable expectation of privacy in the particular context. On a company-owned laptop running company software, that expectation is thin. Federal courts have consistently held that employees have no reasonable expectation of privacy in work product and activity on employer-issued computers, especially when a policy says monitoring occurs.

That framing matters because it does the heavy lifting in every state. A state with no monitoring statute at all still applies common law privacy torts, and those torts protect only reasonable expectations. On a company laptop, with a policy in place, there's little for a plaintiff to grab onto.

What notice actually requires

Notice is the difference between lawful monitoring and a lawsuit. Three channels work best, and mature employers use all of them:

1. A written policy distributed before monitoring starts.
2. A login banner or splash screen on the laptop itself.
3. An acknowledgment signed at onboarding and re-signed when the policy changes.

A few states add statutory requirements on top. Delaware, for instance, requires written notice before an employer monitors phone or computer usage and ties specific notification duties to company-issued devices. Connecticut requires written notice before instituting electronic monitoring, with narrow exceptions. California's rules are stricter still and deserve their own review.

Where courts still protect employees

Even on a company laptop, four areas remain sensitive:

• Password-protected personal accounts. Logging into an employee's personal webmail or bank portal crosses the line, and employers who do it face real exposure.
• Personal cloud storage. Files an employee keeps in a personal Dropbox or iCloud account are sticky ground; courts have split on whether employer access is lawful.
• The webcam. Visual surveillance of a person in their own home raises video surveillance concerns and massive reputational risk. If you must capture screenshots, skip the camera.
• Off-hours activity. Monitoring what an employee does on the laptop at 11 p.m. on a Saturday is harder to justify; define business hours and stick to them.

The audio exception is not optional

Call recording and ambient audio are governed by wiretap statutes that treat speech differently from keystrokes. Around a dozen states require all parties to consent to recording. On a company laptop, the safe default is to disable audio capture entirely — which is what I recommend to nearly every client — or to obtain signed consent forms if call monitoring is genuinely needed.

BYOD changes the equation

When the "company laptop" is actually the employee's personal machine, the analysis shifts. Employers have far weaker claims to personal devices, and many state statutes and court decisions give employees more protection on equipment they own. If you allow bring-your-own-device arrangements, apply monitoring software only during work sessions, restrict it to business apps, and never capture anything from personal accounts.

A realistic launch sequence

For a company rolling out laptop monitoring this quarter, this order works:

1. Have counsel draft a policy specific to your state.
2. Publish the policy and issue the login banner before software goes live.
3. Collect signed acknowledgments at onboarding.
4. Configure the tool to collect work activity only — no audio, no personal accounts.
5. Restrict report access to HR and the employee's manager.
6. Review the setup quarterly and re-notify employees of any changes.

Is monitoring employees on company laptops legal? Yes, if you do it openly, narrowly, and in writing. Every case I've seen go sideways had the same root cause: silence. If you're building the transparent version of this, WorkAuditor is a cloud-based employee monitoring software for Windows and Mac that supports policy-aligned visibility without hidden features. You can see how it works at https://www.workauditor.com.