Employer Guide to Wearable Recording Device Policies

Employees are showing up with AI voice recorders clipped to their badges, smart glasses that look like regular eyewear, and wrist-worn devices that transcribe every conversation. Employers who respond with a blanket ban risk violating federal labor law. Employers who do nothing risk liability under wiretapping statutes, biometric privacy laws, and confidentiality obligations. This guide covers how to build a wearable recording device policy that is legally defensible across all 50 states.

Key Takeaways

1Blanket bans on all recording devices violate the National Labor Relations Act. The NLRB has consistently struck down overbroad policies that could chill employees' Section 7 rights to document workplace conditions.
2A lawful wearable recording policy must be narrowly tailored to legitimate business interests (trade secrets, client confidentiality, patient privacy) and must expressly preserve employees' rights to record for protected purposes.
3Employers in Illinois, Texas, Washington, and Colorado face additional compliance obligations under biometric privacy laws if employees use smart glasses or devices that capture facial geometry or voiceprints.
4Connecticut, New York, and Delaware require employers to provide advance written notice of any electronic monitoring, with specific posting and acknowledgment requirements that apply to employer-deployed wearable devices.
5The ADA may require employers to allow recording or transcription devices as reasonable accommodations for employees with hearing disabilities, even where a general no-recording policy exists.

Why Employers Need a Wearable Device Policy Now

The wearable recording device market is not a future problem. Meta's smart glasses line sold over seven million units in 2025. Plaud reports more than 1.5 million users of its AI voice recorder. Amazon acquired the always-on Bee AI wearable in July 2025. OSHA itself is issuing Vuzix M400 smart glasses to federal workplace inspectors.

Existing recording policies written for smartphones and security cameras do not address the unique challenges wearable devices present. A phone sitting on a conference table is visible. A Plaud NotePin clipped to a lanyard is not obviously a recorder. Meta Ray-Ban glasses are indistinguishable from ordinary eyewear. An always-on wrist device like Bee AI records without any deliberate action by the wearer.

The litigation landscape is accelerating. The March 2026 class action against Meta over smart glasses privacy practices, the Otter.ai and Fireflies.ai lawsuits over AI meeting recording, and California's SB 1130 (the first bill specifically targeting wearable recording devices) all signal that employers without clear policies face increasing legal exposure.

Major employers are already taking action. Delta Air Lines became the first U.S. carrier to ban personal AI smart glasses for flight attendants in July 2025, citing privacy and data protection concerns in international environments. Southwest Airlines followed in February 2026 with a company-wide ban on smart glasses and wearable technology with recording capabilities during work hours, across all departments.

The NLRB Constraint: What You Cannot Ban

Any employer drafting a wearable device policy must start with the National Labor Relations Act. Section 7 (29 U.S.C. § 157) protects employees' rights to engage in "concerted activities for the purpose of collective bargaining or other mutual aid or protection." The NLRB has consistently held that workplace recording can be a form of protected concerted activity when employees document safety concerns, harassment, discrimination, or other working conditions.

Under the Stericycle framework (August 2023), the NLRB evaluates employer work rules by asking whether a rule has a "reasonable tendency to chill employees in the exercise of their Section 7 rights." If so, the rule is presumptively unlawful unless the employer can demonstrate it advances a legitimate and substantial business interest that cannot be achieved through a more narrowly tailored rule.

In practice, this means:

Blanket bans fail. A policy stating "No recording devices of any kind are permitted in the workplace" is almost certainly unlawful under Stericycle. The NLRB struck down Whole Foods' blanket recording ban on exactly these grounds.
Narrow restrictions survive. In January 2026, an NLRB Administrative Law Judge dismissed a complaint against UPS's recording policy, finding that the General Counsel had not shown the narrowly drafted policy had a reasonable tendency to chill Section 7 rights.
Context matters. Boeing successfully defended a "no camera" rule because it was tied to specific security requirements for federal contractor work and proprietary information protection.

One critical boundary: NLRB Acting General Counsel William Cowen clarified in GC Memo 25-07 (June 2025) that secretly recording collective bargaining sessions is a per se unfair labor practice, even though recording other workplace interactions may be protected. Employers engaged in union negotiations should ensure both sides understand this prohibition.

Building a Lawful Policy: Required Elements

A defensible wearable recording device policy should include the following elements. This framework draws on SHRM guidance, Fisher Phillips employer advisories, and the NLRB's Stericycle analysis.

1. Scope and definitions. Define what the policy covers: smart glasses, AI voice recorders (Plaud, Omi), always-on ambient recorders (Bee AI), body cameras, AI meeting transcription tools (Otter.ai, Fireflies), and any device capable of audio or video capture. Specify that the policy covers both employer-issued and personally owned devices.

2. Business justification. State the legitimate business interests the policy protects. Common justifications include protecting trade secrets and proprietary information, maintaining client and customer confidentiality, complying with industry regulations (HIPAA, FINRA, FERPA), safeguarding attorney-client privileged communications, and protecting employee privacy in sensitive areas. The more specific the justification, the better the policy survives NLRB scrutiny.

3. Where and when restrictions apply. Define restricted zones (client meeting rooms, patient care areas, R&D labs, server rooms) and unrestricted zones (break rooms, parking lots, personal workspace during breaks). Restrictions should apply during work time in work areas, not as a 24/7 prohibition.

4. Section 7 savings clause. Explicitly state that the policy does not restrict employees' rights to engage in protected concerted activity under the National Labor Relations Act. This language is not optional; its absence is itself evidence that the policy could chill protected rights.

5. Consent and notification procedures. In two-party consent states (California, Florida, Illinois, Pennsylvania, and nine others), specify that recording requires the consent of all parties. In states with employer monitoring notice requirements (Connecticut, New York, Delaware), describe the notification process the employer follows.

6. Biometric data provisions. If employees use smart glasses or devices that capture facial geometry or voiceprints, address biometric privacy compliance. In Illinois, this means informed written consent under BIPA before any biometric collection occurs.

7. ADA accommodation statement. Include a statement that the company will consider recording or transcription devices as reasonable accommodations for employees with qualifying disabilities through the interactive process.

8. Consequences for violations. Specify the range of disciplinary actions for policy violations, from verbal warning to termination. Note that discipline must be applied consistently and cannot be used pretextually to retaliate against protected activity.

Employer-Issued vs. Employee-Owned Devices

The legal analysis differs significantly depending on who owns the wearable device.

Employer-issued devices (Vuzix smart glasses for warehouse picking, RealWear helmets for field inspections) give the employer more control over configuration, data handling, and usage boundaries. However, the EEOC's December 2024 fact sheet warns that employer-mandated wearables collecting health data (heart rate, eye tracking, fatigue indicators) may constitute "medical examinations" under the ADA, which are strictly limited to situations that are "job related and consistent with business necessity." Employers deploying wearable devices that collect biometric data must obtain informed consent under applicable state laws before deployment, not after.

Employee-owned devices (personal Meta Ray-Bans, Plaud recorders, Bee AI wristbands) present the reverse challenge. The employer cannot control what the device captures outside of work, but retains the right and obligation to restrict usage in the workplace. Policies should clearly state that bringing a recording-capable wearable device to work does not authorize its use for recording in restricted areas. The policy should also address what happens if an employee's personal device inadvertently captures protected information.

For employers considering purchasing wearable devices for their workforce, the procurement process should include a privacy impact assessment that evaluates what data the device collects, where it is stored, who has access, and whether the vendor's data practices comply with HIPAA, BIPA, GDPR, or other applicable frameworks.

State Monitoring and Notice Requirements

Several states impose specific obligations on employers who conduct electronic monitoring of employees. These statutes apply regardless of the general consent framework and create additional compliance steps for wearable device deployment.

State	Statute	Requirements	Penalties
Connecticut	CGS § 31-48d; § 31-48b	Prior written notice of all electronic monitoring (§ 31-48d); conspicuous workplace posting; monitoring prohibited in areas for employee health, personal comfort, or safeguarding possessions (§ 31-48b)	$500 first offense, $1,000 second, $3,000 subsequent
New York	CVR § 52-c	Written notice upon hiring; signed employee acknowledgment; conspicuous posting	$500 first offense, $1,000 second, $3,000 subsequent
Delaware	Title 19 § 705	Daily notification when accessing monitored systems, or one-time written notice with documented acknowledgment	$100 per violation
Colorado	HB24-1130	Written consent before collecting biometric identifiers from employees; written retention and destruction policies	Enforced under Colorado Privacy Act

Employers deploying wearable devices to their workforce in these states must complete the notice and consent requirements before the devices are issued, not after. Retroactive notice does not cure the violation.

Biometric Privacy Compliance

Smart glasses and AI wearables that process facial geometry, voiceprints, or other biometric identifiers trigger compliance obligations under state biometric privacy laws. Employers bear the primary compliance burden because they control the workplace environment.

Illinois BIPA (740 ILCS 14) is the most consequential. It requires informed written consent before collecting biometric identifiers (which include face geometry captured by smart glasses and voiceprints created by AI meeting tools). Statutory damages are $1,000 per negligent violation and $5,000 per intentional or reckless violation, with a private right of action. Following the August 2024 amendment, damages are calculated per type of violation rather than per scan, but cumulative exposure for an employer whose workers routinely use smart glasses in the workplace remains substantial.

Texas CUBI (Tex. Bus. & Com. Code § 503.001) prohibits capturing biometric identifiers for commercial purposes without consent. The Texas Attorney General enforces the statute, and penalties reach $25,000 per violation. Washington (RCW 19.375) restricts commercial use of biometric identifiers with attorney general enforcement. Colorado's HB24-1130, effective July 1, 2025, requires written consent and written retention policies for employee biometric data.

For employers, compliance means: obtain written consent before employees use any device that may capture biometric data; publish a biometric data retention and destruction schedule; designate a responsible officer; and conduct periodic audits.

ADA Accommodations and Recording Devices

The Americans with Disabilities Act requires employers with 15 or more employees to provide reasonable accommodations to qualified employees with disabilities. Recording and transcription devices are increasingly used as workplace accommodations, creating a direct tension with no-recording policies.

The EEOC's guidance on hearing disabilities lists reasonable accommodations including real-time captioning (CART), assistive listening devices, hearing aid-compatible headsets, and direct streaming to cochlear implants. An employee who is deaf or hard of hearing may request an AI-powered transcription device (such as a Plaud recorder or captioning glasses) as the accommodation that enables them to participate effectively in meetings.

Employers cannot deny the accommodation solely because the device is capable of recording. Instead, the employer must engage in the interactive process and explore whether the accommodation can be structured to address confidentiality concerns. Options include devices that transcribe without storing audio, restricting the accommodation to specific meeting types, or providing alternative accommodations (human notetaker, CART services) when recording poses a genuine confidentiality risk.

Documenting the interactive process is essential. If a dispute arises, the employer must demonstrate that it considered the requested accommodation in good faith and offered an effective alternative if the specific device was not feasible.

Discipline and Enforcement

Employers can discipline employees for violating a lawfully drafted recording policy, up to and including termination in at-will employment states. Courts have upheld terminations for secret workplace recording in several contexts. In Bashaw v. Majestic Care of Whitehall (2025), a court upheld the firing of a Director of Social Services who secretly recorded meetings containing sensitive health information, finding the recordings undermined workplace trust. In Hudson v. Blue Cross Blue Shield of Alabama, the Eleventh Circuit upheld termination for violating a no-recording policy even though the employee was recording to prove Title VII discrimination claims.

The key constraint is that discipline cannot be applied selectively or pretextually to punish protected activity. Before terminating an employee for unauthorized recording, employers should confirm that the recording was not protected concerted activity under NLRA Section 7 (documenting safety hazards, harassment, or discrimination); that the recording does not fall under a state whistleblower protection statute; that the policy the employee violated is lawful under Stericycle; and that discipline has been applied consistently to other employees who committed similar violations.

Courts apply the "after-acquired evidence" doctrine (established in McKennon v. Nashville Banner Publishing Co., 513 U.S. 352) in wrongful termination cases involving recordings. If an employer discovers that an employee was engaged in misconduct while secretly recording (such as capturing privileged attorney-client communications), the after-acquired evidence may limit the employee's available damages, typically cutting off back pay at the date the misconduct was discovered and precluding reinstatement.

Visitors, Vendors, and Contractors

Non-employees who enter the workplace are not covered by NLRA protections, giving employers broader latitude to restrict their recording. Practical steps include posting visible signage at facility entrances stating the recording policy; including wearable device restrictions in visitor agreements, vendor contracts, and service-level agreements; requiring contractors to acknowledge the policy as a condition of facility access; and screening visitors for recording-capable devices in high-sensitivity environments (healthcare, classified, R&D).

OSHA inspectors present a unique case. The agency has expanded its deployment of Vuzix M400 smart glasses for workplace inspections, allowing inspectors to livestream their observations to remote supervisors. Employers cannot prohibit OSHA inspectors from using government-issued recording equipment during authorized inspections, but they should be aware that the inspection may be documented in real time and should have counsel available for walk-around discussions.

Industry-Specific Employer Obligations

Healthcare Employers

HIPAA-covered entities face the strictest requirements. Any wearable device that captures protected health information, whether a patient's face, a name on a chart, or a conversation about treatment, triggers HIPAA breach notification obligations. Healthcare employers should ban personal recording-capable wearable devices from all clinical areas where PHI is present, require HIPAA-compliant encryption for any employer-issued wearable technology, document patient consent for any authorized recording in clinical settings, and conduct risk assessments under the HIPAA Security Rule that address wearable devices.

Financial Services

FINRA Rule 3170 requires designated firms to record all telephone conversations of registered persons. SEC Rule 17a-4 mandates retention of communications for three years (six years for account records). Wearable recording devices that capture client conversations outside of approved, archivable channels create compliance violations. Financial services employers should prohibit personal wearable recorders during client interactions and ensure any employer-issued recording technology integrates with the firm's communications archiving system.

Education

FERPA protects student education records, and recordings containing identifiable student information may qualify as education records. The College Board banned smart glasses during the SAT starting in March 2026. Educational employers should establish clear policies for both staff and students, accommodating disability-related recording needs while protecting student privacy under FERPA.

Government and Classified Settings

Sensitive Compartmented Information Facilities (SCIFs) and classified environments maintain absolute prohibitions on all personal electronic devices, including wearable technology. Intelligence Community Directive 705 sets the physical and technical standards. Government contractors should ensure wearable device policies explicitly address classified work areas.

Multi-State and International Employers

Employers operating across multiple states face a patchwork of consent laws, monitoring notice requirements, and biometric privacy statutes. The most common approach is to draft a baseline policy that satisfies the strictest applicable jurisdiction (typically California or Illinois) and then add state-specific addenda for unique obligations like Connecticut's posting requirement or Colorado's biometric consent provision.

For remote workers, the policy should specify that the employee's state of residence governs recording consent requirements, not the employer's headquarters location. A remote employee in California is subject to California's two-party consent law even if the employer is based in a one-party consent state.

International employers face additional complexity. In the European Union, employer audio surveillance is generally prohibited under national data protection law, and GDPR requires a lawful basis to process voice recordings. Employers with EU-based workers should default to an all-party consent standard with documented GDPR Article 6 compliance. The UK ICO's March 2026 investigation of Meta over smart glasses signals that European regulators are actively scrutinizing wearable recording practices.

Employer Liability and Risk Mitigation

Employers face liability from two directions: the absence of a policy and the presence of an unlawful one. Having no wearable device policy exposes the employer to claims when an employee's recording captures trade secrets, HIPAA data, or privileged communications. Having an overbroad policy exposes the employer to NLRB unfair labor practice complaints and state law claims.

Under respondeat superior, an employee's recording within the scope of employment is imputed to the employer. If an employee wearing smart glasses captures a client's trade secrets, the employer faces potential liability under the Defend Trade Secrets Act (federal) and state equivalents. Negligent supervision creates separate direct liability for failing to train employees on recording policies, failing to establish policies, or failing to enforce them consistently. AI wearables that transmit data to third-party cloud servers compound the risk: if that data includes protected information, the employer faces breach notification obligations under state laws, CCPA, and sector-specific regulations.

To minimize exposure, employers should conduct a compliance audit of existing recording, BYOD, and electronic monitoring policies to assess whether they address wearable devices; train managers on recognizing wearable recording devices and responding consistently with the policy; document all policy acknowledgments, training completions, and accommodation discussions; review vendor data practices for any employer-issued wearable technology; and consult employment counsel in each state where the company has workers.

Employment practices liability insurance (EPLI) policies typically cover wrongful termination and discrimination claims arising from recording policy disputes. However, coverage for BIPA statutory damages varies by carrier and should be confirmed. Cyber insurance may cover data breach exposure if a wearable device is compromised.

Recording Laws by State

Your state's consent framework determines the baseline for your wearable recording policy. In two-party consent states, any employee recording without all parties' agreement is a criminal offense, which strengthens the employer's justification for restrictions. In one-party consent states, employees have broader legal rights to record, which constrains how far your policy can go. Click any state below for detailed recording law guidance.

One-party consent (37 states + DC): Employees can record their own conversations without informing other participants.

Two-party consent (13 states): All participants must consent before any recording. Stronger basis for employer restrictions.

CACalifornia CTConnecticut DEDelaware FLFlorida ILIllinois MDMaryland MAMassachusetts MIMichigan MTMontana NHNew Hampshire OROregon PAPennsylvania WAWashington

International Workplace Recording Laws

Employers with international operations face additional constraints. EU member states generally prohibit employer audio surveillance under national data protection laws, even in countries that otherwise allow one-party recording. GDPR requires a documented lawful basis for processing voice recordings. The EU AI Act, fully applicable from August 2026, prohibits certain AI-powered biometric systems in workplaces.

For multinational employers, the practical approach is to adopt the strictest applicable standard as the company-wide default: require all-party consent for any workplace recording, document the business justification, and maintain separate compliance addenda for each jurisdiction. Click any country below for its full recording law guide.