Michigan
Michigan Employee Monitoring Laws (2026): Social Media, GPS & Cameras
Michigan employees have a real statutory shield most states lack: the Internet Privacy Protection Act, MCL 37.271-37.278, bars employers from demanding access to a personal social media account. Outside that specific protection, Michigan has no dedicated electronic-monitoring notice law, so email, internet, and video surveillance are governed by narrower criminal statutes and the state's one-party consent recording rule.
This guide is part of our Employee Monitoring Laws by State series. It covers social media privacy, electronic-monitoring notice, workplace video and audio surveillance, GPS tracking, and biometric time clocks under Michigan law.
Information last verified on 2026-07-09. This article has not yet been reviewed by a licensed lawyer.
Jurisdiction scope: This article addresses Michigan state law governing an employer's monitoring of employees: the Internet Privacy Protection Act, electronic-monitoring notice (or the lack of it), hidden-camera restrictions, GPS tracking, and biometric monitoring. It does not re-derive Michigan's one-party consent recording framework in depth; for that, see the Michigan recording laws guide and its workplace recording page. For general GPS law, see the Michigan GPS tracking laws guide.
Michigan's Internet Privacy Protection Act protects employees' social media accounts
Michigan is one of at least 27 states with a social media password protection law, and its version, the Internet Privacy Protection Act (2012 PA 478, MCL 37.271-37.278), is one of the more detailed in the country. Under MCL 37.273, an employer may not request or require an employee or applicant to grant access to, allow observation of, or disclose information that allows access to or observation of a personal internet account, and an employer may not discharge, discipline, fail to hire, or otherwise penalize someone for refusing. The law covers both public and private employers and reaches personal social media, email, and similar accounts, not just employer-issued ones.
The act is not absolute. MCL 37.275 lists five categories of employer conduct that remain lawful: requiring access to employer-paid devices or accounts used for business; disciplining an employee for transferring proprietary or confidential company data to a personal account without authorization; investigating a personal account when the employer has specific information suggesting a compliance violation or unauthorized data transfer; restricting access to certain websites on employer-owned devices or networks; and monitoring, reviewing, or accessing electronic data on employer-paid devices or the employer's own network. An employer can also comply with federal screening requirements and view information an applicant has made publicly available without needing credentials.
What happens if a Michigan employer violates the Internet Privacy Protection Act?
MCL 37.278 makes a violation of the employer or educational-institution provisions a misdemeanor punishable by a fine of up to $1,000. An employee or applicant who is the subject of a violation can also bring a civil action to enjoin the conduct and recover up to $1,000 in damages plus reasonable attorney fees and court costs, but only after giving the employer written notice at least 60 days before filing suit, with reasonable documentation of the violation. An employer or educational institution can raise an affirmative defense by showing it complied with a federal or state legal requirement.
Does Michigan require notice before other electronic monitoring?
No. Outside the social-media-specific protections above, Michigan has no statute comparable to Connecticut's, Delaware's, New York's, or Maine's laws requiring an employer to give written notice before monitoring work email, internet browsing, or general computer activity. An employer that reviews activity on its own network or employer-issued devices, which the Internet Privacy Protection Act's own exceptions already permit, does not trigger a separate notice duty under Michigan law. As with the other states in this cluster that lack a dedicated notice statute, the practical floor comes from federal law: the Electronic Communications Privacy Act's business-use exception, 18 U.S.C. section 2511(2)(a)(i), lets an employer that owns the communication system monitor it in the ordinary course of business, though the leading case, Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983), found that monitoring should generally stop once a call is identified as personal.
How does Michigan's one-party consent recording law interact with employer monitoring?
Michigan's eavesdropping statute, MCL 750.539c, and the participant exception recognized in Sullivan v. Gray, 117 Mich. App. 476 (1982), mean an employee who is a party to a workplace conversation may record it without telling anyone else involved, even a supervisor. That rule governs whether recording a conversation is a crime; it does not control whether an employer can discipline an employee for violating a company no-recording policy, which remains a separate employment question. Employer-side monitoring, by contrast, generally does not implicate the eavesdropping statute at all when the employer is itself a party to the communication (a phone call routed through the company system) or is observing employer-owned equipment, which is why the Internet Privacy Protection Act and the private-place surveillance statute below, not the eavesdropping law, do most of the real work regulating employer conduct. For the full recording-consent picture, see the Michigan recording laws guide.
Are hidden cameras legal in a Michigan workplace?
Not in private areas. MCL 750.539d makes it a felony to install or use a device to observe, photograph, record, transmit, or eavesdrop on someone in a private place without consent, or to distribute the resulting images. A first offense carries up to two years in prison and a $2,000 fine; a repeat offense or a distribution violation carries up to five years and a $5,000 fine. The statute's main carve-out covers security cameras in a residence used by or at the direction of the owner or occupant, which is not the relevant exception for a workplace. A bathroom, locker room, or changing area at work generally qualifies as a private place under this statute, so an employer that installs a hidden camera there is exposed to felony liability regardless of any company monitoring policy. Cameras that are disclosed and cover general work areas, rather than spaces with a reasonable expectation of privacy, are evaluated differently and are addressed on the Michigan workplace recording page.
GPS and vehicle tracking of Michigan employees
MCL 750.539l makes it a misdemeanor, punishable by up to a year in jail and a $1,000 fine, to install or place a tracking device on a motor vehicle without the knowledge and consent of the vehicle's owner or lessee, and the statute makes the violator liable for the owner's resulting damages. Because the law turns on the owner's or lessee's consent, an employer that owns or leases the vehicle it wants to track is generally exempt from the prohibition when tracking its own fleet, the same owner-consent structure found in most states' general tracking-device laws. The statute does carry a detailed list of other exceptions, including for parents tracking a minor child's vehicle and licensed private investigators, and it covers motor vehicles only; tracking a person's bag, coat, or phone instead falls under Michigan's stalking statutes. For the complete picture, including the private investigator exception's limits, see the Michigan GPS tracking laws guide.
Biometric time clocks and facial recognition
Michigan has not enacted a biometric privacy statute with the private right of action found in Illinois's Biometric Information Privacy Act (BIPA), 740 ILCS 14. A comprehensive Michigan consumer privacy bill, the Personal Data Privacy Act (Senate Bill 359 of 2025), would create Michigan's first general consumer privacy framework and remained in the Senate Committee of the Whole as of mid-2026, not yet enacted. Illinois employers and timeclock vendors have faced very large BIPA settlements in recent years, including a $228 million jury verdict against BNSF Railway and multiple settlements involving fingerprint timeclocks and driver-facing cameras, but that specific exposure does not currently extend to Michigan employers using similar biometric technology. For more on how Michigan treats sensitive personal data generally, see the Michigan data privacy laws guide.
What Michigan employees should do if they are concerned about monitoring
An employee who is asked for a personal social media password should know that request itself likely violates MCL 37.273, and documenting the request in writing strengthens a later complaint or civil claim. Because Michigan employees may lawfully record their own workplace conversations under the Sullivan v. Gray participant exception, that tool remains available for documenting a problematic monitoring request, though an employee should weigh the separate risk that a company no-recording policy could still support discipline even where the recording itself is legal. Anyone who discovers a hidden camera in a bathroom or similar private space should preserve evidence and consider contacting law enforcement, since MCL 750.539d makes that conduct a felony independent of any workplace complaint.
Frequently asked questions
More Michigan Laws
- Michigan AI Meeting Recording Laws
- Michigan Alimony Laws
- Michigan At-Will Employment Laws
- Michigan Car Accident Laws
- Michigan Car Seat Laws
- Michigan Child Custody Laws
- Michigan Child Support Laws
- Michigan Common Law Marriage Laws
- Michigan Dashcam Laws
- Michigan Data Privacy Laws
- Michigan Deepfake Laws
- Michigan Divorce Laws
- Michigan Dog Bite Laws
- Michigan Drone Laws
- Michigan Emancipation Laws
- Michigan Expungement Laws
Disclaimer
This article provides general legal information about Michigan law governing employer monitoring of employees, as verified on 2026-07-09. It does not constitute legal advice and does not create an attorney-client relationship. Readers should consult a lawyer licensed in Michigan for advice about a specific workplace situation.
Related articles
- Employee Monitoring Laws by State: the complete hub
- Michigan Recording Laws
- Michigan Workplace Recording Laws
- Michigan GPS Tracking Laws
- Michigan Data Privacy Laws
Last updated: 2026-07-09. Statutes cited reflect their in-force version as of 2026-07-09.
Frequently Asked Questions
Can my employer make me give up my Facebook password in Michigan?
No. MCL 37.273 of the Internet Privacy Protection Act bars an employer from requesting or requiring access to a personal internet account, and from disciplining or firing an employee who refuses.
What can a Michigan employer still do under the Internet Privacy Protection Act?
An employer can still require access to employer-paid devices or accounts, discipline employees for transferring company data to a personal account, investigate a personal account when it has specific evidence of misconduct, restrict websites on company devices, and monitor its own network, under the exceptions in MCL 37.275.
Does Michigan require my employer to tell me if it's monitoring my email?
Not under a dedicated notice statute. Michigan has no CT/DE/NY/ME-style electronic-monitoring notice law, so notice depends on company policy rather than a specific statutory requirement.
Can I record my boss in Michigan without telling them?
Generally yes, if you are a participant in the conversation. Michigan is a one-party consent state under MCL 750.539c, and the participant exception recognized in Sullivan v. Gray allows a party to a conversation to record it without the other participants' permission.
Can my employer put a hidden camera in the workplace bathroom?
No. MCL 750.539d makes it a felony to install a camera or recording device in a bathroom, locker room, or other private place without consent, regardless of any company monitoring policy.
Can my employer track my location with GPS in Michigan?
An employer can generally track a vehicle it owns or leases without violating MCL 750.539l, because that statute turns on the owner's or lessee's consent. Tracking an employee's personal vehicle without consent is a misdemeanor.
What happens if my Michigan employer violates the social media privacy law?
A violation is a misdemeanor with a fine of up to $1,000 under MCL 37.278, and the affected employee can also sue for an injunction and up to $1,000 in damages plus attorney fees, after giving the employer 60 days' written notice.
Sources and References
- Internet Privacy Protection Act, 2012 PA 478, MCL 37.271-37.278 (full act)(legislature.mi.gov).gov
- MCL 37.273, Duties of employer (prohibited requests and retaliation)(legislature.mi.gov).gov
- MCL 37.275, Acts by employer not prohibited (exceptions)(legislature.mi.gov).gov
- MCL 37.278, Violations; misdemeanor; civil action; damages; notice requirement(legislature.mi.gov).gov
- MCL 750.539d, Installing or using device to observe, photograph, or record person in private place; penalties(legislature.mi.gov).gov
- Sullivan v. Gray, 117 Mich. App. 476 (1982) (participant exception to eavesdropping statute)(courtlistener.com)
- Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983) (federal ordinary-course-of-business monitoring exception)(law.resource.org)
- 18 U.S.C. section 2511 (Electronic Communications Privacy Act, Title I wiretap provisions and business-use exception)(law.cornell.edu)
- NCSL, Privacy of Employee and Student Social Media Accounts (50-state tracker)(ncsl.org)