Arkansas Employee Monitoring Laws: Workplace Privacy Rules (2026)

Arkansas has no law requiring employers to notify employees before monitoring their email, internet use, or phone calls. Instead, employee monitoring in Arkansas runs on a mix of federal wiretap law and one narrow state statute: Ark. Code § 11-2-124, which protects employees' personal social media accounts from employer access.

Information last verified on July 9, 2026. This article has not yet been reviewed by a licensed lawyer.

This article covers what Arkansas law actually says about an employer's ability to monitor its employees, as distinct from the general rules on recording conversations covered in Arkansas Recording Laws. It focuses on the areas where Arkansas has its own rules: social media password protections, restrictions on video and audio surveillance, and how the state's silence on a general monitoring notice law affects Arkansas employees and employers.

Jurisdiction scope: This article addresses Arkansas state law on employer monitoring of employees, including Ark. Code § 11-2-124 (social media passwords) and Ark. Code § 5-16-101 (workplace video recording), together with the federal ECPA baseline that fills the gap left by Arkansas having no dedicated electronic-monitoring notice statute. It does not re-derive Arkansas's general one-party consent recording rules or its GPS and vehicle-tracking law in depth; for those, see the linked Arkansas recording law and GPS tracking law pages.

How Federal and Arkansas Recording Law Apply to Employer Monitoring

Arkansas is a one-party consent state for recording wire, oral, and electronic communications, meaning only one participant in a conversation needs to agree for a recording to be lawful under state law. This article does not re-derive that framework; for the full rules on consent, penalties, and exceptions, see Arkansas Recording Laws.

A separate federal rule matters more for day-to-day employer monitoring. Under the Wiretap Act, the business-extension exemption in 18 U.S.C. § 2510(5)(a) excludes communications equipment a business furnishes and uses "in the ordinary course of business" from the Act's definition of an interception device, so a business that owns its phone or computer system can monitor communications on that system without needing a party's consent at all. The Eleventh Circuit narrowed that exception in Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983): an employer can monitor a business call, but once a call is identified as personal, continued listening falls outside the exception, and the employer is expected to stop or rely on spot checks instead. No Arkansas court has adopted a broader employer-monitoring rule than this federal baseline.

Does Arkansas Require Notice Before Electronic Monitoring?

No. Arkansas has not enacted an electronic-monitoring notice statute along the lines of Connecticut's Conn. Gen. Stat. § 31-48d, Delaware's 19 Del. Code § 705, New York's N.Y. Civil Rights Law § 52-c, or Maine's 26 M.R.S. § 620-A. Those four states require an employer to give employees written notice before monitoring computer, phone, or internet use, and some require conspicuously posted signage. Arkansas has no equivalent duty. An Arkansas employer that monitors company email, internet browsing, or phone systems answers only to the federal ECPA baseline described above, plus whatever notice it chooses to give through an employee handbook or acknowledgment form as a matter of policy rather than legal obligation.

This gap is worth naming plainly because compliance blogs sometimes imply a broader patchwork of state notice duties than actually exists. As of this writing, no bill establishing a general Arkansas electronic-monitoring notice law has passed the General Assembly, and a targeted search of 2025 and 2026 session activity found none pending.

Arkansas's Social Media Password Law

Ark. Code § 11-2-124, the Employer Social Media Password Act, enacted in 2013, prohibits an Arkansas employer from requiring or requesting that a current or prospective employee disclose a username and password to a personal social media account, add a supervisor to the account's contact list, or change the account's privacy settings. Employers also cannot discharge, discipline, or refuse to hire someone for declining to comply, and the protection extends to job applicants as well as current employees.

The statute has two significant limits built into it. First, an employer may still view whatever information about an employee is already public on the internet; the law reaches only login credentials and private access, not public posts. Second, if an employee's social media activity is reasonably believed to be relevant to a formal investigation of a violation of law or of the employer's written policies, the employer can require disclosure of the account for that investigation only, and the resulting access cannot be used for any other purpose.

An administrative rule implementing the statute, 010.14.14 Ark. Code R. 001, is administered through the Arkansas Department of Labor and Licensing. Neither the statute nor the rule spells out a private right of action for an employee whose credentials were wrongfully demanded, so the practical remedy available to an affected employee is not fully settled under current Arkansas law.

Video and Audio Surveillance in the Arkansas Workplace

Arkansas criminalizes secretly recording someone in a place where they have a reasonable expectation of privacy. Under Ark. Code § 5-16-101, using a camera or other image-recording device to secretly observe, photograph, film, or videotape a person in a private area, such as a restroom, locker room, or changing area, without consent is a Class D felony. The statute expressly exempts "security monitoring operated by or at the direction of the owner or administrator of a place of business," which is why ordinary, visible workplace security cameras in common areas do not by themselves violate the law.

That exception is narrower than it looks. It covers routine business security monitoring, not covert cameras placed specifically to capture someone in a restroom or changing area, which is the exact conduct § 5-16-101 was written to reach regardless of who installs the camera. No published Arkansas appellate decision squarely addresses an employer-installed camera in an employee restroom, so employers have practical reason to treat those spaces as off-limits rather than test the boundary. Audio recording of employee conversations is separately governed by Arkansas's one-party consent rule described above; see Arkansas Recording Laws: Workplace and Arkansas Recording Laws: Voyeurism for fuller treatment of both topics.

GPS and Vehicle Tracking

Arkansas closed a long-standing gap in its tracking-device law with Act 600 of 2025, which made it a form of criminal harassment under A.C.A. § 5-71-208 to use a tracking device to determine a person's location or movement without consent and without good cause or legal authority. The statute targets tracking a person, not a piece of property, and its core purpose is stopping covert surveillance of an ex-partner or acquaintance rather than regulating employer fleet management.

Arkansas has no dedicated statute requiring an employer to notify an employee before tracking a company-owned vehicle, and no Arkansas court has yet applied § 5-71-208 to an employer-employee fleet-tracking scenario. For the general rules on GPS and vehicle tracking devices in Arkansas, including the consent principles that typically apply to vehicles a business owns outright, see Arkansas GPS Tracking Laws.

Biometric Monitoring

Arkansas has no employer-specific biometric-privacy statute. Unlike Illinois, which requires written consent before an employer collects a fingerprint or face scan under the Biometric Information Privacy Act, Arkansas treats biometric identifiers only as a protected data category under its breach-notification law, Ark. Code § 4-110-103, which governs what happens after a data breach rather than how an employer may collect a fingerprint or facial scan in the first place. A 2025 bill, SB 258 (the Arkansas Digital Responsibility, Safety, and Trust Act), originally included biometric consent requirements, but the Senate Committee on Transportation, Technology and Legislative Affairs stripped those provisions before the bill died at the end of the session. For more on how Arkansas treats biometric data generally, see Arkansas Biometric Privacy Laws.

What to Watch in Arkansas

Arkansas's current framework, one narrow social media statute plus the federal ECPA baseline, has not changed materially since 2013. Connecticut, Delaware, New York, and Maine have each added employer notice duties in the years since, and Colorado adopted an AI-specific hiring-decision disclosure law in 2026, so multi-state employers with an Arkansas workforce should not assume Arkansas will remain the least-regulated state in the group indefinitely. For a look at how other states handle electronic-monitoring notice, social media privacy, and workplace surveillance, see the Employee Monitoring Laws hub.

Disclaimer

This article provides general legal information about employee monitoring law in Arkansas as of July 9, 2026. It is not legal advice and does not create an attorney-client relationship. Workplace privacy and employment law involve fact-specific analysis; consult an attorney licensed in Arkansas about your specific situation before acting on anything in this article.

Related articles

• Employee Monitoring Laws by State
• Arkansas Recording Laws
• Arkansas GPS Tracking Laws
• Arkansas Biometric Privacy Laws
• United States Recording Laws

---

Last updated: July 9, 2026. Statutes cited reflect their in-force version as of July 9, 2026.

More Arkansas Laws

• Arkansas AI Meeting Recording Laws
• Arkansas At-Will Employment Laws
• Arkansas Data Privacy Laws
• Arkansas GPS Tracking Laws
• Arkansas Recording Laws
• Arkansas Whistleblower Laws