Alabama Employee Monitoring Laws (2026): Workplace Privacy Rules

Alabama has no law requiring employers to notify workers before monitoring calls, email, computers, or company vehicles, and no law barring employers from requesting a worker's social media password. Federal wiretap law and Alabama's criminal surveillance statutes still set real limits, especially for hidden cameras and audio.

Information last verified on 2026-07-09. This article has not yet been reviewed by a licensed lawyer.

Jurisdiction scope: This article addresses Alabama state law and the federal ECPA baseline as they apply to employer monitoring of employees. It does not re-derive Alabama's one-party consent recording rules in depth (see the linked recording-law page) or general GPS-tracking law outside the employment context (see the linked GPS-tracking page).

Electronic Monitoring and Notice Requirements

Alabama has not enacted a statute requiring employers to give notice before monitoring employee email, internet use, or phone activity. Only Connecticut, Delaware, New York, and (as of a 2026 law) Maine currently impose that kind of dedicated notice duty, and Alabama is not among them. In Alabama, the baseline instead comes from federal law: Title I of the Electronic Communications Privacy Act, 18 U.S.C. Sections 2510 to 2523, makes it unlawful to intentionally intercept wire, oral, or electronic communications without consent (18 U.S.C. § 2511), but the business-extension exemption in 18 U.S.C. 2510(5)(a) excludes communications equipment furnished by an employer and used in the ordinary course of business from the Act's definition of an interception device, a doctrine courts extend to let employers who own the phone, email, or computer system monitor communications on that system in the ordinary course of business.

Courts have narrowed this in practice. In Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983), a federal appeals case interpreting the exception, an employer that monitored a work phone line was found to have exceeded the ordinary-course exception once the call was identified as personal rather than business-related; continued listening after that point was not protected. Alabama employers relying on the federal exception should stop monitoring, or spot-check only, once a call is clearly personal. Because Alabama imposes no separate written or posted notice duty, an employer that never tells employees monitoring is happening is not violating a specific Alabama statute, though the practice can still support an Alabama common-law invasion-of-privacy claim in an egregious case, which is a separate legal theory from any notice statute.

A related, newer wrinkle: Alabama's first comprehensive consumer privacy law, the Alabama Personal Data Protection Act (HB 351, signed April 17, 2026, effective May 1, 2027), exempts personal data processed in the employment context. That is different from California, where the CCPA/CPRA employee exemption expired and now gives employees a notice-at-collection right against their own employer. Alabama employees do not get an equivalent privacy-law notice mechanism from the new state law.

Call, Email, and Video Surveillance at Work

Alabama is a one-party consent state for recording communications, meaning only one party to a call or conversation needs to agree to a recording; the detailed rules live on RecordingLaw's Alabama recording laws page and are not repeated here. In the employment context, that one-party rule combines with the federal ordinary-course-of-business exception described above: an employer that owns the phone or email system, and that is itself effectively a party to business communications routed through that system, generally does not need each employee's separate consent to monitor business-related calls or messages.

Video surveillance in ordinary work areas, such as a sales floor, warehouse, or open office, is generally lawful without special notice, since employees do not have a reasonable expectation of privacy in spaces visible to coworkers and the public. That changes sharply in private areas. Alabama's aggravated criminal surveillance statute, Ala. Code Section 13A-11-32.1, makes it a Class C felony to intentionally surveil someone in a place where they have a reasonable expectation of privacy, without consent, for the purpose of sexual gratification. Alabama's voyeurism statutes, Ala. Code Sections 13A-11-41 and 13A-11-42, separately criminalize knowingly photographing or filming a person's intimate areas without consent under circumstances of a reasonable expectation of privacy, ranging from a Class A misdemeanor to a Class C felony depending on the degree. A general criminal surveillance statute, Ala. Code Section 13A-11-32, also criminalizes surveillance while trespassing in a private place. Together, these statutes are why employers avoid installing cameras in restrooms, locker rooms, or other changing areas even though Alabama has no employment-specific video-surveillance statute; a security camera aimed at a public-facing counter is a different legal situation from one aimed inside a changing area.

Audio recording carries its own separate criminal exposure. Alabama's criminal eavesdropping statute, Ala. Code Section 13A-11-31, makes it a Class A misdemeanor to intentionally use any device to eavesdrop, whether or not the person is present, subject to the one-party consent framework covered on the linked recording-law page.

GPS and Vehicle Tracking

Alabama has no employment-specific GPS-notice statute comparable to New Jersey's dedicated vehicle-tracking law. Instead, Alabama's general tracking-device statutes apply, and they were written with an owner-consent structure that favors employers tracking their own vehicles. Ala. Code Section 13A-6-96 makes it a second-degree offense to place an electronic tracking device on someone's property without the consent of the owner; Ala. Code Section 13A-6-95 raises that to a first-degree offense when the device is placed with intent to surveil, stalk, or harass. Both sections were added by Alabama HB 153 (2023). Because an employer that owns a fleet vehicle is the "owner" for purposes of this consent requirement, tracking a company truck or car generally falls within the statute's consent exception, and Alabama does not separately require the employer to notify the employee driving it, unlike Maine's 2026 law, which addresses vehicle GPS by an express carve-out rather than a notice duty. The deeper legal background, including how these sections interact with the federal stalking statute and United States v. Jones, 565 U.S. 400 (2012), is covered on RecordingLaw's Alabama GPS tracking laws page.

Employers that track personal vehicles employees are reimbursed for using, rather than employer-owned vehicles, are on weaker footing, since the employee, not the employer, is the vehicle's owner for consent purposes.

Social Media Password Protection

Alabama has not enacted a social-media-password law. Twenty-seven other states, including neighboring Tennessee, bar employers from requesting or requiring an employee's or applicant's username or password for a personal social media account, generally with narrow exceptions for internal misconduct investigations and employer-owned accounts. Alabama is not one of them, and no pending 2026 legislation was found that would add Alabama to that list. That does not mean Alabama employers routinely demand social media credentials; the practice is rare nationally even in states without a specific ban, largely because it creates other legal risk (for example, under federal discrimination law if a manager sees an applicant's protected-class information on a personal account). It does mean an Alabama employee has no state statute to point to if an employer does ask, unlike an employee in a state on the protected list.

Biometric Monitoring

Alabama has no dedicated biometric-privacy statute governing employer use of fingerprint time clocks, hand-geometry scanners, or facial recognition, and no equivalent of Illinois's Biometric Information Privacy Act (740 ILCS 14), which requires written consent before collection and creates a private right of action. Alabama's Data Breach Notification Act, Ala. Code Section 8-38-1 et seq., does not reach biometric data at all. The Act's definition of "sensitive personally identifying information" (Ala. Code Section 8-38-2(6)) lists only a non-truncated Social Security or tax identification number, a driver's license or other government-issued ID number, a financial account number paired with an access code, information about a person's medical history or diagnosis, a health insurance policy or subscriber ID number, and a username or email address paired with a password or security question, each combined with a person's name; fingerprints, facial geometry, and other biometric identifiers are not on that list. The Act does not regulate biometric data collection or require advance consent. This gap is part of a larger national pattern: driver-facing biometric cameras used for fleet safety have produced multiple BIPA class-action settlements against trucking and logistics companies in Illinois, including Lytx's $4.25 million settlement approved in 2025 and Samsara's roughly $3.95 million settlement the same year, but those cases turned on Illinois's unusually strong statute. An Alabama employer using the same kind of hardware would not face the same private-lawsuit exposure under state law, though federal or contractual obligations can still apply. RecordingLaw's Alabama biometric privacy page covers Alabama's biometric-data rules in more depth.

Watch out: "No notice statute" does not mean "no legal risk." Employers that roll out invasive monitoring software without any communication to staff, similar to the scope of Meta's internal keystroke and app-activity monitoring program that drew employee backlash in June 2026 after sensitive data proved broadly accessible inside the company, still face reputational, morale, and potential common-law privacy exposure in Alabama even without a dedicated statute to violate.

Where to learn more

Employees and employers researching a specific monitoring practice, whether it is call recording, a company vehicle tracker, or a workplace camera, can start with RecordingLaw's broader Employee Monitoring Laws by State hub, which compares Alabama's approach against states with dedicated notice or social-media-password statutes.

Disclaimer

This article provides general legal information about Alabama employee monitoring law as of the verification date above. It is not legal advice and does not create an attorney-client relationship. Laws change, and how a statute applies can depend on specific facts. Readers with a specific situation should consult a lawyer licensed in Alabama.

Related articles

• Alabama Recording Laws
• Alabama GPS Tracking Laws
• Alabama Biometric Privacy
• Alabama At-Will Employment Laws
• Employee Monitoring Laws by State

---

Last updated: 2026-07-09. Statutes cited reflect their in-force version as of 2026-07-09.

More Alabama Laws

• Alabama AI Meeting Recording Laws
• Alabama At-Will Employment Laws
• Alabama Data Privacy Laws
• Alabama GPS Tracking Laws
• Alabama Recording Laws
• Alabama Whistleblower Laws