Can I Monitor My Employee's Email and Computer Activity?

This question almost always arrives with a specific worry behind it. Maybe your team went remote and the office went quiet, and now you genuinely cannot tell whether Tuesday afternoons involve any work. Maybe one employee's output has cratered and you want to know what is actually happening on that laptop. Wanting visibility into your own business is not paranoia, it is a legitimate management concern, and the law mostly agrees with you. 

So let's cover what you can do, what a few states require before you do it, and then the harder question, which is whether the thing you are legally allowed to do will actually get you what you want.

On company systems, the answer is mostly yes

Start with the clean case. If the device, the email account, and the network belong to the company, you generally have broad legal room to monitor them. The federal law in this area, the Electronic Communications Privacy Act, sounds protective but contains two exceptions that swallow most of the rule for employers: monitoring done for legitimate business purposes, and monitoring done with consent, which is why every employee handbook you have ever seen includes a line about company systems being subject to review. 

Work email on your domain, browsing on your network, files on your server, all of it is fair game in most circumstances, and courts have consistently held that employees have little expectation of privacy in employer-owned systems, especially once they have been told so.

That is the legal foundation. Now for the places it gets thinner.

Where the ground gets murky

Personal accounts are the first bright line. Even on a company laptop, an employee's personal Gmail, their private social media, and anything protected by their own password sits in different legal territory, and employers who have gone snooping there, or used saved passwords to log in, have lost in court. A growing list of states also explicitly bars you from demanding employees' personal account passwords. 

The rule of thumb is simple: company accounts are yours to review, personal accounts are not, even when they are accessed through your hardware.

Personal devices flip the problem around. If your team is bring-your-own-device, your monitoring rights shrink dramatically, because now the hardware, and most of what happens on it, belongs to them. If you need real oversight or security control, provide the equipment. It is cleaner legally and cleaner culturally, because nobody wonders whether your software can see their family photos.

And in several states, notice is not optional. New York requires written notice of electronic monitoring to every new hire, with a signed acknowledgment. Connecticut and Delaware have their own notice requirements. The trend across states is unmistakable: you can monitor, but you have to say so first.

HR Tip: Even where notice is not legally required, secret monitoring is the worst position you can occupy, and covert monitoring aimed at one specific employee is worse still. If you quietly install tracking on one person's machine to build a case, you have converted a performance problem into a privacy grievance, and the story in any later dispute becomes your surveillance, not their work. Disclose monitoring in the handbook, get a signed acknowledgment, and apply it uniformly. Transparency is not just the safer legal footing, it is the only version of monitoring a team can respect.

Not all monitoring reads the same

Legally, an email review policy and a webcam-always-on tool might rest on the same consent language. Culturally, they are different planets, and it helps to see the ladder clearly.

Reviewing company email and network logs when there is a reason, an investigation, a security alert, a specific concern, is standard practice, and employees broadly understand it. Always-on productivity software is another step up: keystroke counters, idle-time trackers, random screenshots, webcam check-ins. 

These tools tell your team, every minute of the day, that they are suspects. And they measure the wrong thing anyway, because keystrokes are not output. The remote-work era has spawned a whole industry of mouse jigglers and productivity theater precisely because people who are measured on wiggle learn to wiggle.

HR Tip: be careful with any tool that touches biometrics, like fingerprint time clocks or software that verifies workers by face. Illinois' biometric privacy law requires specific written consent and has generated an avalanche of class actions with steep per-violation damages, and other states are following. If a vendor's product scans any part of a human, ask your attorney before you ask for the demo.

The paradox at the heart of it

Here is the honest part, and it is the reason this post cannot simply hand you a surveillance toolkit. The research on workplace monitoring keeps finding the same uncomfortable result: heavily surveilled employees are not more productive, they are more anxious, less committed, and, strikingly, more likely to break rules, because monitoring signals distrust and people live down to it. Your best performers, the ones with options, are also the ones most likely to leave rather than work under a screenshot tool. 

So the surveillance you bought to solve a productivity problem can end up manufacturing one, while the actual low performer learns to look busy.

None of this means visibility is wrong. It means the visibility that works is aimed at the work, not the worker.

What to aim at instead

The founders who manage remote teams well almost all converge on the same approach: define what done looks like, make it visible, and stop measuring presence. Clear deliverables with dates. Short, regular check-ins where progress is shown, not narrated. 

Shared dashboards or project boards where work status is public to the team, which creates far more accountability than any hidden tracker, because it is peers seeing peers. When someone underperforms against clear expectations, you will know quickly, and you will have something concrete to address, which is more than a keystroke report has ever given anyone.

Keep monitoring for what it is genuinely good at: security, protecting confidential data, and investigating specific concerns when they arise, under a policy everyone has read and signed.

If you are building or rebuilding how your remote team works, this is a place where a little structure pays for itself many times over. Savvy HR helps founders develop remote work policies that cover monitoring, security, and expectations in plain language your team can actually agree to, and we can help you evaluate whether an HR technology purchase will solve your problem or just relocate it. If you are staring at a monitoring software demo and feeling unsure, talk to us before you click buy.

---

About Savvy HR Partner

Savvy HR Partner is an HR and payroll consulting firm that helps growing organizations build strong people operations. We specialize in HR strategy, compliance, employee relations, policy development, compensation guidance, and payroll support designed to scale with your business.

To learn more about our services, visit www.savvyhrpartner.com.

You can also follow Savvy HR Partner on LinkedIn, Facebook, and Instagram for practical HR insights and guidance for founders, leaders, and HR professionals.

If you are looking for HR support, you can schedule an appointment during HR Office Hours.