Iowa Employee Monitoring Laws (2026): Workplace Surveillance Rights

Iowa has no statute requiring employers to notify employees before electronic monitoring, and no social-media-password law. Workplace surveillance runs on the federal Electronic Communications Privacy Act's business-use exception, Iowa's one-party consent recording law, and the invasion-of-privacy tort applied in Koeppel v. Speirs (2011).

Information last verified on July 9, 2026. This article has not yet been reviewed by a licensed lawyer.

Jurisdiction scope: This article covers Iowa state law on an employer's ability to monitor employees: electronic-monitoring notice, social media password protection, GPS and vehicle tracking, and workplace video and audio surveillance. It does not re-derive Iowa's general one-party consent recording rule (see Iowa Recording Laws) or Iowa's general GPS tracking statute (see Iowa GPS Tracking Laws) in depth. Information current as of July 2026.

Can an Employer Monitor Employees in Iowa?

Yes. Federal law sets the floor for workplace monitoring, and Iowa has not adopted additional employment-specific restrictions on top of it. Title I of the Electronic Communications Privacy Act, 18 U.S.C. sections 2510 to 2523, makes it unlawful to intentionally intercept a wire, oral, or electronic communication without consent (18 U.S.C. § 2511), but the business-extension exemption at 18 U.S.C. section 2510(5)(a) excludes employer-provided phone and computer systems used in the ordinary course of business from the Act's definition of an interception device, letting an employer that provides the phone or computer system monitor communications on that system for legitimate business reasons. The Eleventh Circuit's decision in Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983), narrowed that exception in practice: once a monitored call is identified as personal, continued listening can fall outside the exception, and an employer is generally expected to stop listening once it has determined the call is personal. An employer can also rely on consent, either because Iowa is a one-party consent state under Iowa Code section 808B.2(2)(c), see Iowa Recording Laws for the full framework, or through an acknowledged monitoring policy signed at hiring.

Does Iowa Require Notice Before Electronic Monitoring?

No. Iowa has not enacted an electronic-monitoring notice statute. Four states, Connecticut (Conn. Gen. Stat. section 31-48d), Delaware (19 Del. Code section 705), New York (N.Y. Civil Rights Law section 52-c), and Maine (26 M.R.S. section 620-A), require employers to give employees written notice before monitoring computer, phone, or internet use on employer-owned systems. Iowa employers face no comparable statutory duty, and no bill creating one has moved through the Iowa legislature as of mid-2026.

That does not mean Iowa employees have no protection. The federal "ordinary course of business" exception described above only shields monitoring genuinely tied to business communications. An Iowa employer that intercepts a call or email already known to be purely personal risks liability under Iowa Code section 727.8 (eavesdropping, a serious misdemeanor) or Iowa Code section 808B.2 (unlawful interception, a Class D felony) on top of federal exposure. Most Iowa employers address the notice gap voluntarily, through a monitoring policy in the employee handbook, because a signed acknowledgment strengthens the consent-based defense even where no statute compels it.

Social Media Password Protections for Iowa Employees

Iowa employees have no state-law protection against an employer demanding a personal social media username or password. Twenty-seven states, including neighboring Illinois, Nebraska, and Wisconsin, bar employers from requiring an employee or applicant to disclose social media login credentials, log in in front of a supervisor, or add a manager as a "friend" or connection, according to the National Conference of State Legislatures' 50-state tracker. Iowa has not enacted a version of that law.

An Iowa employer that conditions employment on handing over a personal password is not violating a dedicated state social-media statute. An affected employee may still have claims under other theories depending on the facts, such as discrimination law if the demand correlates with a protected characteristic, but Iowa law does not give social media credentials the specific protection it gives in states with a social-media-password statute.

GPS and Vehicle Tracking Rules for Iowa Employers

Iowa Code section 708.11A makes it a serious misdemeanor, up to one year in jail and a fine of $430 to $2,560, to place a global positioning device on another person or on an object in order to track that person's movements, without that person's consent and without a legitimate purpose. Read those elements carefully, because they are commonly misdescribed. The consent the statute asks about is the consent of the person being tracked, not the consent of whoever owns the vehicle, and the statute reaches "an object," not just a vehicle. Owning the company car is therefore not by itself a defense.

What keeps ordinary fleet tracking outside the statute is the "legitimate purpose" element. Dispatching service calls, routing and scheduling, verifying mileage or hours, and protecting employer property are legitimate business purposes, so an employer that tracks a company vehicle for reasons like those has not committed the offense. Employee consent, through an acknowledged vehicle-tracking policy, is the other way out and the sturdier one, because it removes any argument about whether a particular purpose was legitimate. Tracking that serves no business purpose, such as following an employee's personal movements after hours, is where an employer's exposure actually begins. Iowa has not enacted a New Jersey-style statute requiring written notice before an employer tracks a company vehicle. See Iowa GPS Tracking Laws for the full tracking-device statute and its penalties.

The stakes change sharply once tracking becomes part of a pattern meant to frighten someone. Iowa Code section 708.11 makes stalking with a technological device, GPS included, a class C felony carrying up to ten years in prison, even on a first offense. That provision targets abusive, fear-inducing tracking rather than ordinary fleet management, but it shows how far Iowa law reaches once tracking crosses from a business tool into harassment.

Video and Audio Surveillance in Iowa Workplaces

Iowa law draws a sharp line between surveillance of open work areas and surveillance of places where an employee has a reasonable expectation of privacy. Cameras covering a sales floor, warehouse, or common work area generally raise no independent Iowa statutory claim. Cameras in a bathroom, locker room, or similar space can.

The Iowa Supreme Court's decision in Koeppel v. Speirs, 808 N.W.2d 177 (Iowa 2011), arose after an insurance agent hid a camera inside a bathroom shelf to investigate an employee he suspected of misconduct. One of his two employees, Koeppel, discovered the camera, and both employees sued for invasion of privacy. The court held that the mere placement of an operational camera in a place like a bathroom can support a claim for intrusion on solitude or seclusion, even without proof the camera actually captured or transmitted an image, because the capability to invade privacy is itself part of the injury.

Iowa Code section 709.21 layers a separate criminal charge on top of that civil tort: knowingly viewing, photographing, or filming a nude or partially nude person without consent, for the purpose of sexual arousal or gratification, is an aggravated misdemeanor that triggers mandatory sex-offender registration. Audio recording of workplace conversations is governed by Iowa's one-party consent rule rather than an employment-specific statute; see Iowa Recording Laws for that framework.

Biometric Monitoring and Employee Timeclocks

Iowa has not enacted a biometric-privacy statute comparable to Illinois's Biometric Information Privacy Act, 740 ILCS 14, which requires written consent before an employer collects a fingerprint, hand geometry, or facial scan and creates a private right of action with statutory damages. Illinois employers have paid tens of millions of dollars in BIPA settlements over fingerprint timeclocks and driver-facing cameras that scanned biometric data without consent. An Iowa employer that adopts a fingerprint or facial-recognition timeclock is not subject to an equivalent state law. An Iowa employee's recourse, if any, runs through general tort theories like intrusion on seclusion rather than a dedicated biometric statute.

What Iowa Employees Can Do About Workplace Monitoring

An Iowa employee with monitoring concerns has no single dedicated regulator to call, but has practical options. Start with the employee handbook: a written monitoring policy defines what the employer told employees to expect and can narrow or widen the "ordinary course of business" defense. A hidden camera in a bathroom or locker room can be reported to local police under Iowa Code section 709.21, and may also support a civil claim under the invasion-of-privacy tort recognized in Koeppel v. Speirs. A call or email intercepted after it was clearly personal, inconsistent with Watkins v. L.M. Berry & Co., may support a claim under Iowa Code section 808B.8, which allows recovery of the greater of actual damages, $100 per day of violation, or $1,000, plus attorney fees. None of this substitutes for advice from an Iowa-licensed attorney.

See the Employee Monitoring Laws by State hub for how Iowa's approach compares to states like Connecticut, New York, and New Jersey that have adopted dedicated notice and tracking statutes.

Disclaimer

This article provides general legal information about Iowa law governing employer monitoring of employees. It is not legal advice and does not create an attorney-client relationship. It reflects Iowa statutes and case law as verified on July 9, 2026. Readers facing a specific workplace monitoring issue should consult an attorney licensed in Iowa.

Related articles

• Employee Monitoring Laws by State
• Iowa Recording Laws
• Iowa GPS Tracking Laws
• US Recording Laws by State

---

Last updated: July 9, 2026. Statutes and cases cited reflect their status as of that date.

More Iowa Laws

• Iowa AI Meeting Recording Laws
• Iowa At-Will Employment Laws
• Iowa Data Privacy Laws
• Iowa GPS Tracking Laws
• Iowa Recording Laws
• Iowa Whistleblower Laws

Frequently Asked Questions

Does Iowa law require my employer to tell me if I'm being monitored?

No. Iowa has not passed an electronic-monitoring notice statute like the ones in Connecticut, Delaware, New York, and Maine. Federal law and Iowa's one-party consent recording rule apply instead.

Can my employer read my work email in Iowa?

Generally yes, if the employer owns the email system and the review relates to business use, under the federal business-extension exemption at 18 U.S.C. section 2510(5)(a), which excludes employer-provided communications equipment used in the ordinary course of business from the Wiretap Act's definition of an interception device. A written, acknowledged company policy strengthens the employer's position.

Can my employer ask for my personal Facebook or Instagram password in Iowa?

Iowa has no statute barring that request, unlike 27 other states. An employer can ask, though no Iowa law requires an employee to comply, and other legal theories, such as discrimination law, may apply depending on the circumstances.

Can my employer put a GPS tracker on my company car without telling me in Iowa?

Iowa Code section 708.11A imposes no notice requirement. It makes placing a tracking device an offense only when the device is placed without the tracked person's consent and without a legitimate purpose, and ordinary fleet management is a legitimate purpose, so tracking a company vehicle for business reasons is generally lawful. Owning the vehicle is not itself the exception. Iowa has not adopted a New Jersey-style law requiring written notice for company-vehicle tracking.

Is it legal for my employer to put a camera in the employee bathroom or locker room in Iowa?

No. The Iowa Supreme Court held in Koeppel v. Speirs, 808 N.W.2d 177 (Iowa 2011), that placing an operational camera in a bathroom can support an invasion-of-privacy claim, and Iowa Code section 709.21 makes secretly viewing or filming a nude or partially nude person for sexual gratification an aggravated misdemeanor.

Can my employer record my phone calls without telling me in Iowa?

An employer that is a party to the call, or that has one party's consent, can generally record it under Iowa's one-party consent rule. See Iowa's recording law page for the full framework governing who can record what.

Does Iowa limit fingerprint or facial-recognition timeclocks?

No. Iowa has not enacted a biometric-privacy statute comparable to Illinois's Biometric Information Privacy Act, so an Iowa employer can generally adopt biometric timeclocks without the consent and disclosure duties Illinois law imposes.

What can I do if I think my employer is monitoring me illegally in Iowa?

Start by reviewing any written monitoring policy, then consider whether the conduct fits a specific Iowa statute, such as section 709.21 for hidden cameras in private spaces or section 808B.8 for unlawful interception. An Iowa-licensed employment attorney can evaluate a specific situation.