State Laws A practical guide to computer monitoring law across the United States

Computer Monitoring Laws in the United States

Monitoring software is legal across the United States when it is used on devices you own, on computers used by your minor children, or on company equipment with notice and consent. This page explains the federal framework, the state consent rules and the workplace requirements that matter most.

The federal framework

Two federal statutes set the baseline for computer monitoring law:

  • Electronic Communications Privacy Act (ECPA) - includes the Wiretap Act, which governs the interception of private communications. Whether consent is needed, and from whom, depends on state law.
  • Computer Fraud and Abuse Act (CFAA) - prohibits accessing a computer without authorization, so installing monitoring software on a device you do not own or are not allowed to use is a federal concern.

One-party vs. two-party consent states

Most states follow the one-party consent rule for recording private communications: at least one person involved in the communication must consent. A smaller group of states requires all parties to consent. The states generally classified as all-party (two-party) consent states are:

RuleStates
All-party (two-party) consentCalifornia, Connecticut, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada, New Hampshire, Pennsylvania, Washington
One-party consent (most others)Texas, New York, Ohio, Georgia, Colorado, Arizona, and the remaining states

Note that these rules concern recording communications. Logging activity on a computer you own - such as websites visited or applications used - is generally treated differently from intercepting a live communication. State law continues to evolve, so always verify the current rule in your state.

Workplace monitoring law

Employers may monitor company-owned computers, but the safe standard everywhere is advance written notice plus a published policy. States with specific workplace-notification requirements include:

StateRequirement
CaliforniaEmployers must give written notice that monitoring may occur (Cal. Labor Code 435).
ConnecticutEmployers must give prior written notice of electronic monitoring (Conn. Gen. Stat. 31-48d).
DelawareEmployers must provide prior written notice of electronic monitoring (Del. Code 19-705).

Even where no statute exists, published notice and a signed acknowledgement are the strongest protection for any monitoring program.

Parental monitoring of minors

Because parents own the computer, parental monitoring of a minor child's activity on the family device is lawful throughout the United States. Best practice is to be transparent with your children about why the computer is monitored. For children under 13, review the Children's Online Privacy Protection Act (COPPA) if your monitoring collects personal information.

What is still illegal

  • Installing monitoring software on a device you do not own without authorization.
  • Monitoring an adult spouse, partner or roommate without consent in two-party consent states (and it is risky everywhere).
  • Using another person's login credentials to access accounts (CFAA).

Disclaimer

This page is general information about computer monitoring law and is not legal advice. Laws change frequently and vary by jurisdiction. If you have questions about your specific situation, consult a qualified attorney in your state.

Frequently asked questions

One-party consent means a private communication may be recorded when at least one person involved consents. Two-party (all-party) consent means everyone involved must consent. The rule that applies depends on the state where the recording happens.

Yes. Employers should provide advance written notice and a clear monitoring policy. California, Connecticut and Delaware specifically require written notification to employees before monitoring begins.

In practice, parents may monitor computers they own that are used by their minor children in all US states, because the parent owns the device. Some states have specific parental-monitoring statutes; COPPA also applies to children under 13.

No state makes monitoring your own device illegal. The restrictions concern recording private communications without consent and accessing computers without authorization - which is why consent and device ownership matter.

Ready to monitor the computers you own? Read our full legal guide, review the Acceptable Use Policy, or try the live demo.