Connecticut Employee Monitoring Laws: Notice, GPS, and Privacy Rules (2026)

Connecticut employers who use electronic monitoring, meaning any collection of employee activity data on the employer's premises by a means other than direct observation, must give prior written notice under Conn. Gen. Stat. § 31-48d. A separate statute, § 31-40x, bars employers from demanding an employee's personal social media password.

Information last verified on 2026-07-09. This article has not yet been reviewed by a licensed lawyer.

Jurisdiction scope: This article covers Connecticut's employee electronic-monitoring notice law (§ 31-48d), its social media password statute (§ 31-40x), and how they interact with the federal wiretap "ordinary course of business" exception, GPS tracking, workplace video, and biometric time clocks. It does not re-derive Connecticut's general call and video recording consent rules; see Connecticut Recording Laws for that.

Recording consent and the federal "ordinary course of business" exception

Connecticut's employee-monitoring rules sit on top of, not instead of, the general recording consent framework. Connecticut is treated as a hybrid consent state for call and video recording generally, a separate topic covered in depth at Connecticut Recording Laws and its workplace-specific page. This article focuses only on the employment-specific layer.

Federal law adds one more piece. Title I of the Electronic Communications Privacy Act amends the federal Wiretap Act, 18 U.S.C. §§ 2510 to 2523, to make intercepting wire, oral, or electronic communications without consent unlawful (18 U.S.C. § 2511). The Act's definition of a covered "device" excludes equipment an employer furnishes and uses in the ordinary course of its business, 18 U.S.C. § 2510(5)(a)(i), a business-extension exemption courts extend to an employer that owns the phone, email, or computer system. In Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983), the court held that once a monitored call is identified as personal rather than business in nature, continued listening can fall outside the exemption. Connecticut employers who rely on this federal exception still have to satisfy § 31-48d's separate state notice duty; the two requirements are independent of each other.

When Connecticut employers must give notice of electronic monitoring

Under § 31-48d(a)(3), "electronic monitoring" means collecting information on the employer's premises about an employee's activities or communications by any means other than direct observation, including a computer, telephone, wire, radio, camera, or electromagnetic, photoelectronic, or photo-optical system. The definition excludes information collected for security purposes in common areas held open to the public, and anything collected in a way already prohibited by other state or federal law.

Section 31-48d(b)(1) requires each employer that engages in any type of electronic monitoring to give prior written notice to all employees who may be affected, describing the types of monitoring that may occur. Posting a notice in a conspicuous place readily available for employees to view satisfies the written notice requirement; a business does not need to obtain a signature from every worker. The Connecticut Department of Labor publishes a sample poster that lists the monitoring categories the statute covers (telephone, camera including hidden cameras, computer, radio, wire, electromagnetic, photoelectronic, and photo-optical systems) with a blank line for "other."

The notice duty does not apply to a criminal investigation, and information gathered through electronic monitoring during one may still be used later in an employee disciplinary proceeding, under § 31-48d(d).

Covert monitoring: the "reasonable grounds" exception

Section 31-48d(b)(2) lets an employer monitor without giving prior written notice when it has reasonable grounds to believe employees are engaged in conduct that violates the law, violates the legal rights of the employer or other employees, or creates a hostile workplace environment, and the monitoring may produce evidence of that misconduct. This is a narrow exception built for a specific, already-suspected problem, such as a harassment complaint or suspected theft, not a substitute for a general monitoring notice.

Employers found in violation of the notice requirement face civil penalties the Labor Commissioner levies after a hearing conducted under Conn. Gen. Stat. §§ 4-176e to 4-184: up to $500 for a first offense, $1,000 for a second, and $3,000 for a third and each subsequent offense. There is no private right of action written into the statute; enforcement runs through the Labor Commissioner.

Social media password protections under Connecticut law

Conn. Gen. Stat. § 31-40x prohibits an employer from requesting or requiring an employee or applicant to disclose a username, password, or other means of authenticating access to a personal online account, or from requiring that account be accessed in the employer's presence. "Personal online account" means an account used exclusively for personal purposes and unrelated to any business purpose, which can include email, social media, and retail accounts.

The statute carves out employer-provided accounts, devices the employer supplies or pays for, and accounts used for the employer's business. An employer may also require access as part of an investigation into suspected misconduct, a violation of law, or an unauthorized transfer of confidential or financial data, but even then it cannot require the employee to hand over a username or password directly. A commissioner who finds an employee aggrieved may levy a civil penalty of up to $500 for a first violation and up to $1,000 for each subsequent violation; the penalty is lower, up to $25 for a first violation and up to $500 for each subsequent violation, when the aggrieved party is an applicant rather than a current employee.

GPS and vehicle tracking

Connecticut has not enacted a dedicated statute requiring notice before an employer places a GPS tracker in a company vehicle. Whether § 31-48d's notice duty reaches vehicle tracking at all is an open question, since the statute defines electronic monitoring by reference to the employer's premises, and several compliance blogs assert a GPS notice duty that the statutory text does not clearly support.

Connecticut's electronic stalking statute, § 53a-181f, is a separate criminal law that targets someone who, with intent to kill, injure, harass, or intimidate, uses an electronic monitoring or communication system to place a person in reasonable fear of serious harm or to cause substantial emotional distress. That intent element means ordinary employer fleet tracking, done for dispatch, safety, or routing purposes, is a different legal question than the criminal statute's target conduct. For the general framework covering GPS trackers on vehicles in Connecticut, including the consent principles that typically exempt a vehicle's own owner, see Connecticut GPS Tracking Laws.

Cameras, biometric time clocks, and other limits

Connecticut's voyeurism statute, § 53a-189a, makes it a felony to knowingly photograph, film, videotape, or otherwise record another person without consent while that person is not in plain view and has a reasonable expectation of privacy, a category that includes changing rooms, locker rooms, and restrooms. This is a criminal law of general application, not an employment statute, but it means an employer cannot rely on § 31-48d's monitoring notice to justify a hidden camera in a space where employees undress.

Illinois' Biometric Information Privacy Act, 740 ILCS 14, requires written, informed consent before an employer collects a fingerprint, hand geometry scan, or other biometric identifier, and creates a private right of action with statutory damages. Connecticut has no equivalent statute, so an employer here using a fingerprint or facial-recognition time clock is not currently exposed to BIPA-style litigation risk, though the Connecticut Data Privacy Act treats biometric data as a sensitive category requiring opt-in consent for processing more broadly. Elsewhere, driver-facing camera systems used for fleet safety have produced large Illinois settlements, including Lytx's $4.25 million settlement approved in 2025 over facial geometry data collected from truck drivers without BIPA consent, a useful illustration of how "safety monitoring" hardware can collide with biometric privacy law in states that regulate it.

Watch out: Posting a general "this workplace uses security cameras" sign is not the same as the specific written notice § 31-48d requires. The notice needs to describe the types of monitoring in use, and an employer that only posts a generic security notice while also monitoring computer or phone activity has not satisfied the statute for those additional categories.

Disclaimer

This article presents general legal information about Connecticut's employee electronic-monitoring notice statute (Conn. Gen. Stat. § 31-48d), its social media password law (§ 31-40x), and related federal and state law. It is not legal advice and does not create an attorney-client relationship. Statutes and their enforcement are subject to amendment and change. Consult a lawyer licensed in Connecticut for advice about a specific workplace monitoring situation. Information last verified: July 9, 2026.

Related articles

• Employee Monitoring Laws by State
• Connecticut Recording Laws
• Connecticut Workplace Recording Laws
• Connecticut GPS Tracking Laws
• Connecticut Data Privacy Laws
• US Recording Laws by State

---

Last updated: 2026-07-09. Statutes cited reflect their in-force version as of 2026-07-09.

More Connecticut Laws

• Connecticut AI Meeting Recording Laws
• Connecticut At-Will Employment Laws
• Connecticut Data Privacy Laws
• Connecticut GPS Tracking Laws
• Connecticut Recording Laws
• Connecticut Whistleblower Laws