Legal guide When computer monitoring is lawful and how to stay compliant

Is a Keylogger Legal? A Guide to Computer Monitoring Law

Keylogger and computer monitoring software is legal when it is used on devices you own, on computers used by your minor children, or on company-owned equipment with proper notice and consent. The rules change when the device belongs to someone else and they do not know they are being monitored. This guide explains where the line is, in plain language.

The short answer

Computer monitoring software such as Anywhere Monitor records keystrokes, screenshots, websites, chat and email. Using it is lawful in three common situations:

  • Your own computers - you may monitor any device you own.
  • Parental monitoring - parents may monitor computers they own that are used by their minor children.
  • Workplace monitoring - employers may monitor company-owned computers with advance written notice and a published policy.

It is generally not lawful to install monitoring software on a device you do not own or are not authorized to use, or to monitor an adult without their knowledge and consent.

When monitoring your own devices

You can always monitor hardware you own. This includes your personal computer, your home office machine and a family computer that belongs to you. Keeping activity logs on your own device - for security, backup or peace of mind - does not require anyone's permission.

Parental monitoring of children

Parents in most countries may monitor computers they own that are used by their children, because the parent owns the device and is responsible for the child's safety online. Good practice includes telling older children that the computer is monitored. In the United States, the Children's Online Privacy Protection Act (COPPA) applies to children under 13, so if your monitoring collects personal information from younger children, review COPPA requirements and consider age-appropriate disclosure.

Workplace monitoring

Employers can monitor company-owned computers and networks, but the standard requirements are advance written notice and a clear, published monitoring policy. Some states go further: California, Connecticut and Delaware require employers to notify employees in writing before monitoring. The safest approach is a signed policy that explains what is tracked, why, and who has access to the data.

Federal law in the United States

Two federal statutes frame most monitoring questions:

  • Electronic Communications Privacy Act (ECPA) / Wiretap Act - restricts the interception of private communications. Consent requirements depend on whether your state follows the one-party or two-party rule.
  • Computer Fraud and Abuse Act (CFAA) - makes it a crime to access a computer without authorization, which covers installing monitoring software on machines you do not own or are not allowed to use.

Laws change and vary by state, so this guide is general information, not legal advice.

Two-party consent states

Most US states follow the one-party consent rule: recording a communication is allowed if at least one party consents. A smaller group of states requires all parties to consent. States generally treated as all-party (two-party) consent states include:

RuleStates
All-party (two-party) consentCalifornia, Connecticut, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada, New Hampshire, Pennsylvania, Washington
One-party consent (examples)Texas, New York, Ohio, Georgia, Colorado, Arizona and most other states

These rules apply to the recording of private communications. Monitoring activity on a device you own is a different question from intercepting communications, and state rules continue to evolve - check your state's current law before you start monitoring.

International guidance

  • European Union (GDPR) - monitoring of employees must be based on a legal basis, be proportionate, and employees must be informed.
  • United Kingdom - monitoring must be transparent and justified under the Data Protection Act.
  • Canada (PIPEDA) - consent is generally required before collecting personal information.
  • Australia - workplace monitoring is lawful when workers are notified; parental monitoring of minors is generally accepted.

How to use monitoring software responsibly

  • Only install on devices you own or are explicitly authorized to monitor.
  • Tell family members and employees that the computer is monitored and why.
  • Read our Acceptable Use Policy before you install.
  • Use strong passwords on your monitoring account so the logs stay private.
  • Consult a local lawyer if you have any doubt about your situation.

Frequently asked questions

Yes, when it is used lawfully: on computers you own, on devices used by your minor children, or on company-owned computers with proper notice and consent. Installing monitoring software on a device you do not own or are not authorized to monitor is generally illegal.

In the United States, parents may generally monitor computers they own that are used by their minor children. Some states and countries have specific rules, and COPPA applies to children under 13, so check local law and use the software responsibly.

Employers may monitor company-owned computers when they provide advance written notice and a clear policy. Several states, including California, Connecticut and Delaware, require employers to disclose their monitoring practices.

No. Installing keylogger or monitoring software on a spouse's, partner's or any other adult's device without their knowledge is illegal in most jurisdictions and is widely classified as spyware. You must have consent or legal authorization.

California, Connecticut, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada, New Hampshire, Pennsylvania and Washington require all parties to consent to the recording of a private communication. Always check current state law.

Yes. You can monitor your own devices at any time. Recording activity on hardware you own for your own purposes, such as backing up your own data or keeping an eye on a home computer, is lawful.

Anywhere Monitor is built for monitoring computers you own and protecting children - it runs on Windows, Mac and Ubuntu and sends encrypted logs to a private web console. See the feature list or try the live demo.