WorkAuditor Blog

"Monitoring" and "surveillance" get used interchangeably in workplace discussions, but the law draws a real line between them — and employers who blur it are the ones who end up in court. The distinction isn't semantic. It maps onto the legal concepts that decide liability: notice, expectation of privacy, and proportionality. Monitoring with notice is defensible; surveillance without it is a claim waiting to happen.

A client once showed me a "productivity tool" that silently took webcam screenshots every five minutes and reported a "productivity score" to every manager. The vendor called it monitoring. The employees called it surveillance. The distinction the vendor missed was the difference between a defensible program and a reputational catastrophe.

A working definition

Monitoring, in the sense the law tolerates it, has three features: it's disclosed, it's scoped to work activity, and it serves a stated business purpose — security, performance, or compliance. Surveillance adds features that monitoring lacks: it's covert, it's continuous, it reaches beyond work into personal life, or it collects more than any stated purpose requires. The same tool can be monitoring at 9 a.m. and surveillance at 9 p.m.

The legal levers

Three concepts decide where a practice falls:

• Notice. A published policy and signed acknowledgment convert secret observation into lawful monitoring. The absence of notice is the single strongest factor in plaintiffs' favor.
• Expectation of privacy. Courts protect the spaces and channels where employees reasonably expect privacy: restrooms, locker rooms, personal accounts, and — increasingly — the home office. Monitoring that reaches into these spaces is surveillance regardless of what you call it.
• Proportionality. The collection must match the purpose. Continuous webcam capture for a data-security objective fails this test; activity logs for productivity management pass it.

Audio and video: the two biggest traps

Audio is governed by wiretap statutes, and around a dozen states require every party's consent to recording. Recording a conversation without notice can be a crime, not just a tort — the most expensive mistake in this whole area, and the reason I tell clients to disable audio capture unless a business case genuinely demands it.

Video is less regulated than audio in most states, but it fails badly on the expectation-of-privacy test in private areas. Cameras in restrooms or changing rooms are unlawful virtually everywhere, and cameras in home offices tread on the growing recognition that the home is a private place. Visible cameras with clear signage in public work areas are the defensible version.

Location tracking and off-duty hours

Continuous location tracking deserves its own scrutiny. Tracking a company vehicle during work hours is common and generally lawful. Tracking an employee's personal vehicle, or pinging their phone around the clock, crosses into surveillance territory — several states restrict location tracking of personal vehicles, and off-hours tracking raises intrusion claims even where no statute exists. If location data matters, collect it during business hours, from company assets, with notice.

Biometrics: a separate regulatory maze

Fingerprint and facial-recognition systems used for time clocks or access control sit in a regulatory category of their own. Illinois' biometric privacy law requires written, specific consent and carries statutory damages that have produced enormous settlements; several other states have followed with their own rules. If your monitoring program touches biometric identifiers, treat it as a distinct compliance project, not an add-on.

The reputational dimension

The legal line isn't the only line. Employees who discover covert monitoring — and they always do — respond with resignations, negative reviews, and, increasingly, public disclosure. The companies that run monitoring for years without incident are uniformly the ones that tell employees what they collect, why, and who can see it. Transparency is a retention strategy as much as a compliance one.

Designing monitoring that isn't surveillance

The principles are simple enough to print:

1. Publish the policy before the tool goes live.
2. Collect only what the stated purpose requires.
3. Keep personal accounts, private spaces, and off-hours out of scope.
4. Use audio and cameras only where truly justified, and only with notice.
5. Restrict data access to HR, security, and the employee's manager.
6. Audit your own tool regularly — vendors ship feature updates that expand collection without asking.

Surveillance vs monitoring isn't a question of tooling; it's a question of design. The same software can be either, depending on how you configure it and what you tell people. If you want the monitoring side of that line, WorkAuditor is a cloud-based employee monitoring software for Windows and Mac with transparent collection scopes, privacy controls, and access limits designed for disclosed, proportionate monitoring. You can compare it against your needs at https://www.workauditor.com.