Oregon Employee Monitoring Laws (2026): Workplace Surveillance Rights

Oregon employers can generally monitor company phone lines and computer systems under the federal wiretap law's business-use exception, but Oregon's own recording statute adds a wrinkle most states in this cluster do not have: recording an in-person workplace conversation, even by the employer, generally requires telling everyone in the room first. State law also gives Oregon employees a dedicated social-media-password protection and one of the country's more detailed vehicle-tracking statutes.

This article provides general legal information about Oregon employee monitoring law as of July 9, 2026. It is not legal advice and does not create an attorney-client relationship. Consult an Oregon-licensed attorney about your specific situation.

Scope: This article covers Oregon law on an employer's authority to monitor employees, access personal social media, and conduct workplace video, GPS, and biometric monitoring. It does not re-derive Oregon's hybrid consent recording rules in full (see our Oregon recording laws guide) or GPS law generally outside the employment context (see our Oregon GPS tracking laws guide).

The Federal Baseline: the "Ordinary Course of Business" Exception

Oregon's starting point for any workplace monitoring question is federal, not state, law. Title I of the Electronic Communications Privacy Act makes it unlawful to intentionally intercept wire, oral, or electronic communications without consent under 18 U.S.C. section 2511 (part of Title I's broader 18 U.S.C. sections 2510 to 2523), but the statute carves out a broad exception for the owner of a communications system. Under the business-extension exemption in 18 U.S.C. section 2510(5)(a), which excludes employer-provided communications equipment used in the ordinary course of business from the Wiretap Act's definition of an interception device, an employer that owns the phone, email, and computer systems its staff use may intercept communications on that system in the ordinary course of business.

The leading case applying this exception is Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983): once a monitored call is identified as personal rather than business-related, the employer's ordinary-course exception generally ends, and continued listening can create liability. Oregon has not enacted a state monitoring statute that displaces this federal baseline; instead, Oregon's own recording law layers an extra requirement on top of it for in-person conversations, covered below.

Does Oregon Require Notice Before Electronic Monitoring?

No, not in the sense Connecticut, Delaware, New York, and (starting in 2026) Maine require it. Those four states have enacted dedicated statutes requiring written or posted notice before monitoring phone, email, or internet use on the job. Oregon has not.

This is worth clarifying because an inaccurate claim circulates in compliance guides: that Oregon has a pending "SB 621 workplace technology accountability act" requiring impact assessments before deploying AI-based monitoring tools. That does not match any real Oregon bill. The actual Oregon Senate Bill 621 (2025) is titled "Relating to approval of state agency fees" and has nothing to do with workplace monitoring. A similarly named Workplace Technology Accountability Act was introduced in California as Assembly Bill 1651 in the 2021-2022 session, but it died in committee in November 2022 and was never enacted; the compliance-guide claim appears to conflate the two states. Oregon has no pending legislation matching the CT/DE/NY/ME model, and Oregon employers rely on the federal ordinary-course exception above.

Oregon's Social Media Privacy Law for Employees

Oregon's dedicated employee-monitoring statute is O.R.S. section 659A.330, part of the same chapter that governs unlawful employment discrimination. It prohibits an employer from requiring or requesting that an employee or applicant establish a personal social media account, disclose a password or other means of accessing one, or log in to a personal account in the employer's presence. Employers also cannot compel an employee to add a supervisor as a contact or use a personal account to promote the business.

The exceptions are narrower than they might first appear. An employer may still require credentials for an account it provided or that the employee uses on its behalf, may investigate suspected misconduct without demanding a password, and may require an employee to share content already reported to the employer when necessary for a factual determination. An employer that inadvertently receives login information through routine network monitoring is not liable for having it, so long as it does not use it to access the account.

Because section 659A.330 sits in ORS Chapter 659A, "Unlawful Discrimination in Employment," a violation is enforced the same way other Chapter 659A violations are: a complaint with the Oregon Bureau of Labor and Industries (BOLI) Civil Rights Division, which investigates and can refer a substantiated case for prosecution, or a private civil action. Remedies can include back pay, other equitable relief, and civil penalties. See BOLI's social media guidance for the complaint process.

Video and Audio Surveillance in Oregon Workplaces

Oregon's hybrid recording rule matters more in the workplace than almost anywhere else in this cluster. Under ORS 165.540(1)(a), telephone and electronic communications are one-party consent, so an employer that is a party to a call is on solid ground without notice. In-person conversations are different: under ORS 165.540(1)(c), every participant must be specifically informed before recording begins, and that applies to an employer recording a meeting exactly as it applies to anyone else; owning the building does not exempt it. Our Oregon workplace recording guide covers the consent question in more depth.

Oregon has no employment-specific video-surveillance statute, but its voyeurism laws limit where any camera can point. ORS 163.700 makes it a Class A misdemeanor to knowingly record a person's intimate areas without consent in a place with a reasonable expectation of privacy, and ORS 163.701 elevates the offense to a Class C felony when the recording captures nudity without consent. An employer installing a camera in those spaces, even for a stated security reason, is exposed to both criminal and civil liability.

Employer no-recording policies are not automatically enforceable either. Under NLRB Stericycle, Inc., 372 NLRB No. 113 (2023), a blanket recording ban is presumptively unlawful if it could chill wage or working-condition discussions, and GC Memorandum 25-07 (2025) treats undisclosed recording of bargaining sessions as a per se bad-faith bargaining violation.

GPS and Vehicle Tracking of Oregon Employees

Unlike most states in this cluster, Oregon has a dedicated statute aimed squarely at vehicle trackers. Under ORS 163.715, it is a Class A misdemeanor to knowingly affix a GPS device to a motor vehicle without the vehicle owner's consent, up to 364 days in jail and a $6,250 fine, escalating to a Class C felony, up to 5 years and a $125,000 fine, if the person has a prior stalking conviction or is subject to a no-contact order.

The statute maps cleanly onto the employment relationship. If an employee drives a company-owned vehicle, the employer is the owner and can consent to its own tracker; if the vehicle qualifies as a "motor carrier" vehicle under ORS 825.005, tracking is exempt outright, which is why commercial fleets track vehicles as a matter of course. If an employee drives a personal vehicle for work, attaching a tracker without the employee's consent violates ORS 163.715 the same as for any private citizen. Oregon has no statute requiring written notice before tracking a company vehicle; it runs on ownership and consent instead. For the fuller framework, see our Oregon GPS tracking laws guide.

Biometric Monitoring: Time Clocks in Oregon

Employers increasingly use fingerprint or facial-recognition time clocks, and trucking fleets use driver-facing cameras that can capture biometric identifiers. Illinois' Biometric Information Privacy Act, 740 ILCS 14, is the strongest law of this kind nationally, requiring written consent and creating a private right of action; it does not apply outside Illinois. Oregon has no Illinois-style statute of its own, but the Oregon Consumer Privacy Act (OCPA), ORS 646A.570 et seq., effective July 1, 2024, classifies biometric data such as fingerprints and retinal or iris patterns as sensitive data requiring a consumer's opt-in consent.

That consent duty does not reach the workplace, however. The OCPA exempts data an employer maintains for employment-records purposes, so an employee is not a "consumer" for data processed in that role, and its consent and access rights do not apply if an Oregon employer collects fingerprints for a timekeeping system.

Oregon's separate breach-notification law reaches further. Under the Oregon Consumer Information Protection Act, ORS 646A.600 through 646A.628, "personal information" explicitly includes biometric data from a fingerprint, retina, or iris image, without the OCPA's employment carve-out. An employer whose stored employee biometric data is exposed in a breach must still notify affected employees within 45 days. Employees inside Portland also benefit from its facial recognition ban, City Code Chapter 34.10, which exempts unlocking your own personal or employer-issued device. See our Oregon biometric privacy guide for the consumer-facing rules.

What Oregon Employees Can Do About Monitoring Concerns

An employee who believes an employer crossed a legal line has several options. A social media password demand, or retaliation for refusing one, can support a BOLI complaint or civil action under ORS 659A.330. A meeting secretly recorded without the notice ORS 165.540(1)(c) requires can support a criminal complaint and a civil suit under ORS 133.739. A camera in a restroom or locker room can support a law enforcement report and an invasion-of-privacy claim. Monitoring tied to a protected characteristic or concerted activity may fall under BOLI or the NLRB instead.

Because Oregon's monitoring rules are split across several distinct sources, an employee with a specific fact pattern should keep records (dates, what was monitored, any written policy) and consult an Oregon-licensed employment attorney rather than assume a single statute covers the situation. For the broader picture, see our Employee Monitoring Laws by State hub and our general US recording laws guide.

Disclaimer

This article provides general legal information about Oregon employee monitoring law as of July 9, 2026. It is not a substitute for individualized legal advice. Employment monitoring disputes often involve overlapping statutes, employer policy, and federal law, and outcomes depend on specific facts. Readers should consult an attorney licensed in Oregon for advice about a particular situation.

Related articles

• Employee Monitoring Laws by State
• Oregon Recording Laws
• Oregon Workplace Recording Laws
• Oregon GPS Tracking Laws
• Oregon Biometric Privacy Laws
• US Recording Laws by State

---

Last updated: July 9, 2026. Statutes cited reflect their in-force version as of that date.

More Oregon Laws

• Oregon AI Meeting Recording Laws
• Oregon At-Will Employment Laws
• Oregon Data Privacy Laws
• Oregon GPS Tracking Laws
• Oregon Recording Laws
• Oregon Whistleblower Laws