Michigan
Michigan Employee Monitoring Laws (2026): Social Media, GPS & Cameras

Michigan employees have a real statutory shield most states lack: the Internet Privacy Protection Act, MCL 37.271-37.278, bars employers from demanding access to a personal social media account. Outside that specific protection, Michigan has no dedicated electronic-monitoring notice law, so email, internet, and video surveillance are governed by narrower criminal statutes and the state's one-party consent recording rule.
This guide is part of our Employee Monitoring Laws by State series. It covers social media privacy, electronic-monitoring notice, workplace video and audio surveillance, GPS tracking, and biometric time clocks under Michigan law.
Information last verified on 2026-07-09. This article has not yet been reviewed by a licensed lawyer.
Jurisdiction scope: This article addresses Michigan state law governing an employer's monitoring of employees: the Internet Privacy Protection Act, electronic-monitoring notice (or the lack of it), hidden-camera restrictions, GPS tracking, and biometric monitoring. It does not re-derive Michigan's one-party consent recording framework in depth; for that, see the Michigan recording laws guide and its workplace recording page. For general GPS law, see the Michigan GPS tracking laws guide.
Michigan's Internet Privacy Protection Act protects employees' social media accounts
Michigan is one of at least 27 states with a social media password protection law, and its version, the Internet Privacy Protection Act (2012 PA 478, MCL 37.271-37.278), is one of the more detailed in the country. Under MCL 37.273, an employer may not request or require an employee or applicant to grant access to, allow observation of, or disclose information that allows access to or observation of a personal internet account, and an employer may not discharge, discipline, fail to hire, or otherwise penalize someone for refusing. The law covers both public and private employers and reaches personal social media, email, and similar accounts, not just employer-issued ones.
The act is not absolute. MCL 37.275 lists five categories of employer conduct that remain lawful: requiring access to employer-paid devices or accounts used for business; disciplining an employee for transferring proprietary or confidential company data to a personal account without authorization; investigating a personal account when the employer has specific information suggesting a compliance violation or unauthorized data transfer; restricting access to certain websites on employer-owned devices or networks; and monitoring, reviewing, or accessing electronic data on employer-paid devices or the employer's own network. An employer can also comply with federal screening requirements and view information an applicant has made publicly available without needing credentials.
What happens if a Michigan employer violates the Internet Privacy Protection Act?
MCL 37.278 makes a violation of the employer or educational-institution provisions a misdemeanor punishable by a fine of up to $1,000. An employee or applicant who is the subject of a violation can also bring a civil action to enjoin the conduct and recover up to $1,000 in damages plus reasonable attorney fees and court costs, but only after giving the employer written notice at least 60 days before filing suit, with reasonable documentation of the violation. An employer or educational institution can raise an affirmative defense by showing it complied with a federal or state legal requirement.
Does Michigan require notice before other electronic monitoring?
No. Outside the social-media-specific protections above, Michigan has no statute comparable to Connecticut's, Delaware's, New York's, or Maine's laws requiring an employer to give written notice before monitoring work email, internet browsing, or general computer activity. An employer that reviews activity on its own network or employer-issued devices, which the Internet Privacy Protection Act's own exceptions already permit, does not trigger a separate notice duty under Michigan law. As with the other states in this cluster that lack a dedicated notice statute, the practical floor comes from federal law: the Electronic Communications Privacy Act's business-extension exemption, (5)(a), excludes employer-furnished communications equipment used in the ordinary course of business from the Wiretap Act's definition of an interception device, a category that reaches an employer that owns the communication system, though the leading case, Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983), found that monitoring should generally stop once a call is identified as personal.

How does Michigan's one-party consent recording law interact with employer monitoring?
Michigan's eavesdropping statute, MCL 750.539c, and the participant exception recognized in Sullivan v. Gray, 117 Mich. App. 476 (1982), mean an employee who is a party to a workplace conversation may record it without telling anyone else involved, even a supervisor. That rule governs whether recording a conversation is a crime; it does not control whether an employer can discipline an employee for violating a company no-recording policy, which remains a separate employment question. Employer-side monitoring, by contrast, generally does not implicate the eavesdropping statute at all when the employer is itself a party to the communication (a phone call routed through the company system) or is observing employer-owned equipment, which is why the Internet Privacy Protection Act and the private-place surveillance statute below, not the eavesdropping law, do most of the real work regulating employer conduct. For the full recording-consent picture, see the Michigan recording laws guide.
Are hidden cameras legal in a Michigan workplace?
Not in private areas. MCL 750.539d makes it a felony to install or use a device to observe, photograph, record, transmit, or eavesdrop on someone in a private place without consent, or to distribute the resulting images. A first offense carries up to two years in prison and a $2,000 fine; a repeat offense or a distribution violation carries up to five years and a $5,000 fine. The statute's main carve-out covers security cameras in a residence used by or at the direction of the owner or occupant, which is not the relevant exception for a workplace. A bathroom, locker room, or changing area at work generally qualifies as a private place under this statute, so an employer that installs a hidden camera there is exposed to felony liability regardless of any company monitoring policy. Cameras that are disclosed and cover general work areas, rather than spaces with a reasonable expectation of privacy, are evaluated differently and are addressed on the Michigan workplace recording page.
GPS and vehicle tracking of Michigan employees
MCL 750.539l makes it a misdemeanor, punishable by up to a year in jail and a $1,000 fine, to install or place a tracking device on a motor vehicle without the knowledge and consent of the vehicle's owner or lessee, and the statute makes the violator liable for the owner's resulting damages. Because the law turns on the owner's or lessee's consent, an employer that owns or leases the vehicle it wants to track is generally exempt from the prohibition when tracking its own fleet, the same owner-consent structure found in most states' general tracking-device laws. The statute does carry a detailed list of other exceptions, including for parents tracking a minor child's vehicle and licensed private investigators, and it covers motor vehicles only; tracking a person's bag, coat, or phone instead falls under Michigan's stalking statutes. For the complete picture, including the private investigator exception's limits, see the Michigan GPS tracking laws guide.
Biometric time clocks and facial recognition
Michigan has not enacted a biometric privacy statute with the private right of action found in Illinois's Biometric Information Privacy Act (BIPA), 740 ILCS 14. A comprehensive Michigan consumer privacy bill, the Personal Data Privacy Act (Senate Bill 359 of 2025), would create Michigan's first general consumer privacy framework and remained in the Senate Committee of the Whole as of mid-2026, not yet enacted. Illinois employers and timeclock vendors have faced very large BIPA settlements in recent years, including a $228 million jury verdict against BNSF Railway and multiple settlements involving fingerprint timeclocks and driver-facing cameras, but that specific exposure does not currently extend to Michigan employers using similar biometric technology. For more on how Michigan treats sensitive personal data generally, see the Michigan data privacy laws guide.

What Michigan employees should do if they are concerned about monitoring
An employee who is asked for a personal social media password should know that request itself likely violates MCL 37.273, and documenting the request in writing strengthens a later complaint or civil claim. Because Michigan employees may lawfully record their own workplace conversations under the Sullivan v. Gray participant exception, that tool remains available for documenting a problematic monitoring request, though an employee should weigh the separate risk that a company no-recording policy could still support discipline even where the recording itself is legal. Anyone who discovers a hidden camera in a bathroom or similar private space should preserve evidence and consider contacting law enforcement, since MCL 750.539d makes that conduct a felony independent of any workplace complaint.
Disclaimer
This article provides general legal information about Michigan law governing employer monitoring of employees, as verified on 2026-07-09. It does not constitute legal advice and does not create an attorney-client relationship. Readers should consult a lawyer licensed in Michigan for advice about a specific workplace situation.

Related articles
- Employee Monitoring Laws by State: the complete hub
- Michigan Recording Laws
- Michigan Workplace Recording Laws
- Michigan GPS Tracking Laws
- Michigan Data Privacy Laws
Last updated: 2026-07-09. Statutes cited reflect their in-force version as of 2026-07-09.
More Michigan Laws
Frequently Asked Questions
Can my employer make me give up my Facebook password in Michigan?
No. MCL 37.273 of the Internet Privacy Protection Act bars an employer from requesting or requiring access to a personal internet account, and from disciplining or firing an employee who refuses.
What can a Michigan employer still do under the Internet Privacy Protection Act?
An employer can still require access to employer-paid devices or accounts, discipline employees for transferring company data to a personal account, investigate a personal account when it has specific evidence of misconduct, restrict websites on company devices, and monitor its own network, under the exceptions in MCL 37.275.
Does Michigan require my employer to tell me if it's monitoring my email?
Not under a dedicated notice statute. Michigan has no CT/DE/NY/ME-style electronic-monitoring notice law, so notice depends on company policy rather than a specific statutory requirement.
Can I record my boss in Michigan without telling them?
Generally yes, if you are a participant in the conversation. Michigan is a one-party consent state under MCL 750.539c, and the participant exception recognized in Sullivan v. Gray allows a party to a conversation to record it without the other participants' permission.
Can my employer put a hidden camera in the workplace bathroom?
No. MCL 750.539d makes it a felony to install a camera or recording device in a bathroom, locker room, or other private place without consent, regardless of any company monitoring policy.
Can my employer track my location with GPS in Michigan?
An employer can generally track a vehicle it owns or leases without violating MCL 750.539l, because that statute turns on the owner's or lessee's consent. Tracking an employee's personal vehicle without consent is a misdemeanor.
What happens if my Michigan employer violates the social media privacy law?
A violation is a misdemeanor with a fine of up to $1,000 under MCL 37.278, and the affected employee can also sue for an injunction and up to $1,000 in damages plus attorney fees, after giving the employer 60 days' written notice.
Updates
Independently fact-checked against the cited primary sources; governing law re-checked for recent changes
Governing law re-checked for recent changes
Corrected the source of the employer 'ordinary course of business' monitoring exception from 18 U.S.C. 2511(2)(a)(i) (the service-provider exception) to the business-extension exemption at 18 U.S.C. 2510(5)(a), which is the provision employers actually rely on.
Governing law re-checked for recent changes
Reviewed and approved by an editor
The Law Behind This Article
This article rests on 8 statutory provisions held in our own legal record, each retrieved from the official source. Tap a section to read the operative text.
United States Code Title 18
§ 2510DefinitionsIn forcecited in 120 of our articles
As used in this chapter— “wire communication” means any aural transfer made in whole or in part through the use of facilities for the transmission of communications by the aid of wire, cable, or other like connection between the point of origin and the point of reception (including the use of such connection in a switching station) furnished or operated by any person engaged in providing or operating such facilities for the transmission of interstate or foreign communications or communications affecting interstate or foreign commerce; “oral communication” means any oral communication uttered by a person exhibiting an expectation that such communication is not subject to interception under circumstances justifying such expectation, but such term does not include any electronic communication; “State” means any State of the United States, the District of Columbia, the Commonwealth of Puerto Rico, and any territory or possession of the United States; “intercept” means the aural or other acquisition of the contents of any wire, electronic, or oral communication through the use of any electronic, mechanical, or other device.1 So in original. The period probably should be a semicolon.
Official text (excerpt) · as of 2026-07-28 · Read the full section at uscode.house.gov
Cited in 2,382 court opinionsMost recently applied by a court: 2026
Leading cases: Forsyth v. Barr (Court of Appeals for the Fifth Circuit 1994, 19 F.3d 1527) · Nixon v. Administrator of General Services (Supreme Court of the United States 1977, 433 U.S. 425) · Gannett Co. v. DePasquale (Supreme Court of the United States 1979, 443 U.S. 368)
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: US Recording Laws by State (2026): All 50 States Explained, District of Columbia Recording Laws (2026): One-Party Consent Rules, Kentucky Phone Call Recording Laws: What You Need to Know
Michigan Compiled Laws
§ 37.271Short titleIn force
This act shall be known and may be cited as the "internet privacy protection act".
Official text (excerpt) · as of 2026-07-30 · Read the full section at legislature.mi.gov
§ 37.273Duties of employerIn force
An employer shall not do any of the following: (a) Request an employee or an applicant for employment to grant access to, allow observation of, or disclose information that allows access to or observation of the employee's or applicant's personal internet account. (b) Discharge, discipline, fail to hire, or otherwise penalize an employee or applicant for employment for failure to grant access to, allow observation of, or disclose information that allows access to or observation of the employee's or applicant's personal internet account.
Official text (excerpt) · as of 2026-07-30 · Read the full section at legislature.mi.gov
§ 37.275Certain acts by employer not prohibited or restrictedIn force
(1) This act does not prohibit an employer from doing any of the following: (a) Requesting or requiring an employee to disclose access information to the employer to gain access to or operate any of the following: (i) An electronic communications device paid for in whole or in part by the employer. (ii) An account or service provided by the employer, obtained by virtue of the employee's employment relationship with the employer, or used for the employer's business purposes. (b) Disciplining or discharging an employee for transferring the employer's proprietary or confidential information or financial data to an employee's personal internet account without the employer's authorization. (c) Conducting an investigation or requiring an employee to cooperate in an investigation in any of the following circumstances: (i) If there is specific information about activity on the employee's personal internet account, for the purpose of ensuring compliance with applicable laws, regulatory requirements, or prohibitions against work-related employee misconduct.
Official text (excerpt) · as of 2026-07-30 · Read the full section at legislature.mi.gov
§ 37.278Violation of provisions of act as misdemeanor; civil action; injunction; damages; written demand and documentation; jurisdiction; affirmative defenseIn force
(1) A person who violates section 3 or 4 is guilty of a misdemeanor punishable by a fine of not more than $1,000.00. (2) An individual who is the subject of a violation of this act may bring a civil action to enjoin a violation of section 3 or 4 and may recover not more than $1,000.00 in damages plus reasonable attorney fees and court costs. Not later than 60 days before filing a civil action for damages or 60 days before adding a claim for damages to an action seeking injunctive relief, the individual shall make a written demand of the alleged violator for not more than $1,000.00. The written demand shall include reasonable documentation of the violation. The written demand and documentation shall either be served in the manner provided by law for service of process in civil actions or mailed by certified mail with sufficient postage affixed and addressed to the alleged violator at his or her residence, principal office, or place of business.
Official text (excerpt) · as of 2026-07-30 · Read the full section at legislature.mi.gov
§ 750.539cEavesdropping upon private conversationIn forcecited in 41 of our articles
Any person who is present or who is not present during a private conversation and who wilfully uses any device to eavesdrop upon the conversation without the consent of all parties thereto, or who knowingly aids, employs or procures another person to do the same in violation of this section, is guilty of a felony punishable by imprisonment in a state prison for not more than 2 years or by a fine of not more than $2,000.00, or both.
Official text (excerpt) · as of 2026-07-30 · Read the full section at legislature.mi.gov
Cited in 32 court opinionsMost recently applied by a court: 2025
Leading cases: People v. Lucas (Michigan Court of Appeals 1991, 188 Mich. App. 554) · Sullivan v. Gray (Michigan Court of Appeals 1982, 117 Mich. App. 476) · People v. Warner (Michigan Supreme Court 1977, 401 Mich. 186)
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: Michigan Smart Glasses Recording Laws (2026), Michigan Recording Laws (2026): Consent Rules and Participant Exception, Michigan Audio Recording Laws: Consent Rules, Statutes, and Penalties (2026)
§ 750.539dInstallation, placement, or use of device for observing, recording, transmitting, photographing or eavesdropping in private placeIn forcecited in 30 of our articles
(1) Except as otherwise provided in this section, a person shall not do either of the following: (a) Install, place, or use in any private place, without the consent of the person or persons entitled to privacy in that place, any device for observing, recording, transmitting, photographing, or eavesdropping upon the sounds or events in that place. (b) Distribute, disseminate, or transmit for access by any other person a recording, photograph, or visual image the person knows or has reason to know was obtained in violation of this section. (2) This section does not prohibit security monitoring in a residence if conducted by or at the direction of the owner or principal occupant of that residence unless conducted for a lewd or lascivious purpose. (3) A person who violates or attempts to violate this section is guilty of a crime as follows: (a) For a violation or attempted violation of subsection (1)(a): (i) Except as provided in subparagraph (ii), the person is guilty of a felony punishable by imprisonment for not more than 2 years or a fine of not more than $2,000.00, or both.
Official text (excerpt) · as of 2026-07-30 · Read the full section at legislature.mi.gov
Cited in 24 court opinionsMost recently applied by a court: 2026
Leading cases: Lewis v. LeGrow (Michigan Court of Appeals 2003, 258 Mich. App. 175) · People v. Wilkens (Michigan Court of Appeals 2005, 267 Mich. App. 728) · People v. Waltonen (Michigan Court of Appeals 2007, 272 Mich. App. 678)
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: Michigan Landlord-Tenant Recording Laws: Surveillance, Privacy, and Tenant Rights (2026), Michigan Medical Recording Laws: Patient Rights, HIPAA, and Doctor Visits (2026), Michigan Laws on Recording in Public: First Amendment Rights and Limits (2026)
§ 750.539lTracking device; placement or installment on motor vehicle without consent; violation as misdemeanor; penalty; exemptions; inapplicability of subsection (2)(j); liability for damages; definitionsIn forcecited in 6 of our articles
(1) A person who does any of the following is guilty of a misdemeanor punishable by imprisonment for not more than 1 year or a fine of not more than $1,000.00, or both: (a) Installs or places a tracking device, or causes a tracking device to be installed or placed, in or on a motor vehicle without the knowledge and consent of the owner of that motor vehicle or, if the motor vehicle is leased, the lessee of that motor vehicle. (b) Tracks the location of a motor vehicle with a tracking device without the knowledge and consent of either the owner or the authorized operator of that motor vehicle or, if the motor vehicle is leased, either the lessee or the authorized operator of that motor vehicle. (c) While being the restrained party under a protective order, tracks the location of a motor vehicle operated or occupied by an individual protected under that order with a tracking device.
Official text (excerpt) · as of 2026-07-30 · Read the full section at legislature.mi.gov
Cited in 1 court opinionsMost recently applied by a court: 2016
Leading cases: People of Michigan v. Michael Joseph Ouellette (Michigan Court of Appeals 2016)
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: Michigan GPS Tracking Laws: Is It Legal to Put a Tracker on a Car? (2026), Michigan Surveillance Camera Laws (2026 Guide), GPS Tracking Laws by State: Is It Legal to Put a Tracker on a Car? (2026)
Explore the law
The laws cited above reference these related sections in their own text:
- Michigan Compiled Laws § 600.2950 — Personal protection order; restraining or enjoining spouse, former spouse, individual with child in common, individual in dating relationship, or person residing or having resided in same household from certain conduct; respondent required to carry concealed weapon; omitting address of residence from documents; issuance, contents, effectiveness, duration, and service of personal protection order; entering order into law enforcement information network; notice; failure to comply with order; false statement to court; enforcement; respondent less than 18 years of age; ownership interest in animal; definitions view in our statute record · read at the official source
- Michigan Compiled Laws § 600.2950a — Personal protection order restraining or enjoining individual from engaging in conduct prohibited under MCL 750.411h, 750.411i, or 750.411s; facts alleging stalking; conduct; respondent required to carry concealed weapon; omitting address of residence from documents; reasons for issuing or refusing to grant order; mutual order prohibited; effectiveness, issuance, contents, and duration of order; duties of court clerk; entering order into L.E.I.N.; service; notice to law enforcement agency; enforcement; refusal or failure to comply; false statement to court; purchase or possession of firearm; person less than 18 years ; issuance to prisoner prohibited; definitions view in our statute record · read at the official source
- Michigan Compiled Laws § 600.8321 — Civil process; service view in our statute record · read at the official source
Related law for further reading — not part of this article’s citations.
Search our full record of US law — 2.1 million sections, every state + federal →
Sources and References
- Internet Privacy Protection Act, 2012 PA 478, MCL 37.271-37.278 (full act)(legislature.mi.gov).gov
- MCL 37.273, Duties of employer (prohibited requests and retaliation)(legislature.mi.gov).gov
- MCL 37.275, Acts by employer not prohibited (exceptions)(legislature.mi.gov).gov
- MCL 37.278, Violations; misdemeanor; civil action; damages; notice requirement(legislature.mi.gov).gov
- MCL 750.539d, Installing or using device to observe, photograph, or record person in private place; penalties(legislature.mi.gov).gov
- Sullivan v. Gray, 117 Mich. App. 476 (1982) (participant exception to eavesdropping statute)(courtlistener.com)
- Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983) (federal ordinary-course-of-business monitoring exception)(law.resource.org)
- 18 U.S.C. section 2510(5)(a) (Electronic Communications Privacy Act definitions; business-extension exemption)(law.cornell.edu).gov
- NCSL, Privacy of Employee and Student Social Media Accounts (50-state tracker)(ncsl.org)