Kentucky Employee Monitoring Laws (2026): Workplace Surveillance Rights

Kentucky considered but never enacted an employee electronic-monitoring notice law; House Bill 585 died in committee in 2020. Kentucky also has no social-media-password statute. Workplace surveillance runs on the federal Electronic Communications Privacy Act's business-use exception and Kentucky's voyeurism, tracking-device, and one-party consent recording statutes.

Information last verified on July 9, 2026. This article has not yet been reviewed by a licensed lawyer.

Jurisdiction scope: This article covers Kentucky state law on an employer's ability to monitor employees: electronic-monitoring notice, social media password protection, GPS and vehicle tracking, and workplace video and audio surveillance. It does not re-derive Kentucky's general one-party consent recording rule (see Kentucky Recording Laws) or Kentucky's general GPS tracking statute (see Kentucky GPS Tracking Laws) in depth. Information current as of July 2026.

Can an Employer Monitor Employees in Kentucky?

Yes. Federal law sets the floor for workplace monitoring, and Kentucky has not adopted additional employment-specific restrictions on top of it. Title I of the Electronic Communications Privacy Act, 18 U.S.C. sections 2510 to 2523, makes it unlawful to intentionally intercept a wire, oral, or electronic communication without consent (18 U.S.C. § 2511), but the business-extension exemption at 18 U.S.C. section 2510(5)(a) excludes employer-provided phone and computer systems used in the ordinary course of business from the Act's definition of an interception device, letting an employer that provides the phone or computer system monitor communications on that system for legitimate business reasons. The Eleventh Circuit's decision in Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983), narrowed that exception in practice: once a monitored call is identified as personal, continued listening can fall outside the exception. An employer can also rely on consent, either because Kentucky is a one-party consent state under KRS 526.010 and KRS 526.020, see Kentucky Recording Laws for the full framework, or through an acknowledged monitoring policy signed at hiring.

Does Kentucky Require Notice Before Electronic Monitoring?

No, and this is worth explaining because it is one of the most commonly miscited points about Kentucky workplace law. In 2020, a Kentucky legislator introduced House Bill 585, "AN ACT relating to employee privacy," which would have created a new section of KRS Chapter 336 defining "electronic monitoring" and requiring covered employers to give notice before monitoring employee activity or communications on the employer's premises, closely tracking Connecticut's notice statute. The bill was introduced March 2, 2020, referred to the House Small Business and Information Technology Committee two days later, and never received a committee vote. It died at the end of the session and was never reintroduced in a form that passed. KRS Chapter 336 today contains no electronic-monitoring section.

Several compliance blogs and vendor sites describe HB 585's language as if it were enacted law. It is not. Kentucky has no statutory duty requiring an employer to notify employees before electronic monitoring. Connecticut, Delaware, New York, and Maine have each enacted a notice statute along the lines HB 585 proposed; Kentucky has not. Kentucky employers are governed by the federal "ordinary course of business" exception and Kentucky's general eavesdropping statute, KRS 526.020, rather than a dedicated notice law.

Social Media Password Protections for Kentucky Employees

Kentucky employees have no state-law protection against an employer demanding a personal social media username or password. Twenty-seven states, including neighboring Illinois and Tennessee, bar employers from requiring an employee or applicant to disclose social media login credentials, log in in front of a supervisor, or add a manager as a "friend" or connection, according to the National Conference of State Legislatures' 50-state tracker. Kentucky is not among them, and no comparable bill has become law. An employer that conditions employment on handing over a personal password is not violating a dedicated Kentucky social-media statute, though other legal theories, such as discrimination law, may apply depending on the facts.

GPS and Vehicle Tracking Rules for Kentucky Employers

KRS 508.152 makes it a Class A misdemeanor to intentionally install or place a tracking device on a motor vehicle, or to track a motor vehicle's location with a tracking device, without the knowledge and consent of the vehicle's owner or, for a leased vehicle, its lessee or authorized operator. The statute defines "tracking device" broadly, as an electronic or mechanical device designed to allow someone to remotely determine or track the position or movement of another person or an object.

The statute lists several exceptions, including vehicle navigation and diagnostic systems, emergency roadside assistance subscriptions, stolen-vehicle recovery services, a lessor's device installed with the lessee's written acknowledgment, and a parent's tracking of a vehicle operated by their minor child. An employer tracking a vehicle it owns generally falls outside the core prohibition, because the statute is built around the owner's or authorized operator's knowledge and consent, and the employer is the owner. Kentucky has not enacted a dedicated employer-notice statute for company-vehicle tracking comparable to New Jersey's. See Kentucky GPS Tracking Laws for the full tracking-device statute.

Video and Audio Surveillance in Kentucky Workplaces

Kentucky law draws a sharp line between surveillance of open work areas and surveillance of places where an employee has a reasonable expectation of privacy. KRS 531.090 makes it voyeurism, a Class A misdemeanor, to intentionally use a camera or similar image recording device, without the person's consent, to observe, view, photograph, film, or videotape another person's "sexual conduct, genitals, an undergarment worn without being publicly visible, or nipple of the female breast," where that person is somewhere a reasonable person would believe such imagery would not be recorded without their knowledge. Read the categories carefully: the statute is not a general ban on recording a person's body or face. A hidden camera in a bathroom, changing room, or locker room is the paradigm case because those are the places where the listed imagery is exposed, but a camera in such a room that captured none of the listed categories would fall outside KRS 531.090 on the statute's text. KRS 531.100 escalates the conduct to video voyeurism, a Class D felony, when an image of sexual conduct, genitals, or the nipple of the female breast is used or divulged for consideration, or distributed by any visual medium, email, or online service.

Surveillance of ordinary, non-private work areas is treated differently, as the Kentucky Supreme Court's decision in Stringer v. Wal-Mart Stores, Inc., 151 S.W.3d 781 (Ky. 2004), shows. A Wal-Mart supervisor secretly installed a video camera with audio recording in the store's "claims area," where damaged merchandise pulled from shelves was processed. The camera ran for roughly 40 hours before four employees were fired for eating candy from damaged bags, and they sued for invasion of privacy, outrage (intentional infliction of emotional distress), and defamation. Read the holding narrowly, because the case is routinely described as more than it is. The employees themselves recharacterized their invasion-of-privacy count as a claim under KRS 446.070 to recover damages for violations of the KRS Chapter 526 eavesdropping offenses. The Court of Appeals had made two holdings: that Wal-Mart's conduct was "not offensive to the eavesdropping statute," and that the employees failed to prove damages. The Kentucky Supreme Court took up only the second: "Although Appellants dispute both of the Court of Appeals's holdings, we address only the second one because it is clear from the record that Appellants failed to demonstrate any cognizable damages from any violation of a KRS Chapter 526 offense that may have occurred in this case." That phrasing leaves the legality question open. The Court separately held the conduct did not clear Kentucky's high threshold for outrage, noting the employees were at-will, and found the evidence sufficient to send the defamation claim to a jury.

So Stringer is not authority that Kentucky law permits secret workplace audio recording. Eavesdropping under KRS 526.020 is a Class D felony, and the camcorder in Stringer was pulled from store stock and had audio capability, unlike the store's fixed cameras. What the case actually shows is that an employee who cannot tie a concrete injury to the recording itself loses the statutory claim, while claims tied to what the employer did with what it recorded, like defamation, can still succeed.

Kentucky's New Data Privacy Law Does Not Cover Employee Monitoring

The Kentucky Consumer Data Protection Act takes effect January 1, 2026, and gives Kentucky consumers rights over how businesses collect and use their personal data. The Act, however, exempts data about job applicants, employees, agents, and independent contractors that a business collects and uses for employment purposes, benefits administration, or emergency contacts. That exemption means the Act does not give Kentucky employees a right to access, correct, or object to data their employer collects through electronic monitoring, unlike California, where a similar employee exemption in the CCPA expired and consumer privacy rights now extend to employee data.

What Kentucky Employees Can Do About Workplace Monitoring

A Kentucky employee with monitoring concerns has no single dedicated regulator to call, but has practical options. Start with the employee handbook: a written monitoring policy defines what the employer told employees to expect. A hidden camera in a bathroom or locker room can be reported to local police under KRS 531.090 and KRS 531.100 if it captured the imagery those statutes list, and may also support a civil invasion-of-privacy claim, though Stringer is a reminder that a claim built on a statutory violation still requires proof of damages caused by the recording itself. A call or email intercepted after it was clearly personal, inconsistent with Watkins v. L.M. Berry & Co., may support a claim under the federal Electronic Communications Privacy Act. None of this substitutes for advice from a Kentucky-licensed attorney.

See the Employee Monitoring Laws by State hub for how Kentucky's approach compares to states like Connecticut, New York, and New Jersey that have adopted dedicated notice and tracking statutes.

Disclaimer

This article provides general legal information about Kentucky law governing employer monitoring of employees. It is not legal advice and does not create an attorney-client relationship. It reflects Kentucky statutes and case law as verified on July 9, 2026. Readers facing a specific workplace monitoring issue should consult an attorney licensed in Kentucky.

Related articles

• Employee Monitoring Laws by State
• Kentucky Recording Laws
• Kentucky GPS Tracking Laws
• US Recording Laws by State

---

Last updated: July 9, 2026. Statutes and cases cited reflect their status as of that date.

More Kentucky Laws

• Kentucky AI Meeting Recording Laws
• Kentucky At-Will Employment Laws
• Kentucky Data Privacy Laws
• Kentucky GPS Tracking Laws
• Kentucky Recording Laws
• Kentucky Whistleblower Laws

Frequently Asked Questions

Did Kentucky pass a law requiring employers to disclose electronic monitoring?

No. Kentucky House Bill 585 (2020) would have created such a notice duty in KRS Chapter 336, but it died in committee and was never enacted. Some compliance guides describe it as if it were current law; it is not.

Can my employer read my work email in Kentucky?

Generally yes, if the employer owns the email system and the review relates to business use, under the federal business-extension exemption at 18 U.S.C. section 2510(5)(a), which excludes employer-provided communications equipment used in the ordinary course of business from the Wiretap Act's definition of an interception device. A written, acknowledged company policy strengthens the employer's position.

Can my employer ask for my personal Facebook or Instagram password in Kentucky?

Kentucky has no statute barring that request, unlike 27 other states. An employer can ask, though no Kentucky law requires an employee to comply, and other legal theories, such as discrimination law, may apply depending on the circumstances.

Can my employer put a GPS tracker on my company car without telling me in Kentucky?

KRS 508.152 is built around the vehicle owner's knowledge and consent, and an employer tracking a vehicle it owns is generally outside the statute's core prohibition. Kentucky has not enacted a dedicated notice statute for company-vehicle tracking.

Is it legal for my employer to put a camera in the employee bathroom or locker room in Kentucky?

Almost always no. KRS 531.090 makes it voyeurism, a Class A misdemeanor, to use a camera without consent to observe or record a person's sexual conduct, genitals, an undergarment worn without being publicly visible, or nipple of the female breast, where the person reasonably believes that imagery will not be recorded. Bathrooms and locker rooms are the classic setting, though the offense turns on those listed categories rather than on body imagery generally. Divulging such footage for consideration or distributing it is video voyeurism, a Class D felony, under KRS 531.100.

Can my employer secretly videotape me in a non-private work area in Kentucky?

No Kentucky court has squarely held that it is lawful. In Stringer v. Wal-Mart Stores, Inc., 151 S.W.3d 781 (Ky. 2004), employees lost their eavesdropping-based privacy claim over roughly 40 hours of secret surveillance in a store work area, but only because they proved no damages caused by the recording; the Kentucky Supreme Court expressly declined to decide whether the surveillance violated the eavesdropping statutes. Eavesdropping under KRS 526.020 remains a Class D felony, and secretly recording audio of conversations carries real risk even in an open work area.

Does the Kentucky Consumer Data Protection Act give me rights over my employer's monitoring data?

No. The Act, effective January 1, 2026, exempts personal data used for employment, benefits administration, or emergency contacts, so it does not extend consumer data rights to employee monitoring records.

What can I do if I think my employer is monitoring me illegally in Kentucky?

Start by reviewing any written monitoring policy, then consider whether the conduct fits a specific Kentucky statute, such as KRS 531.090 for hidden cameras in private spaces. A Kentucky-licensed employment attorney can evaluate a specific situation.