Texas Employee Monitoring Laws: Workplace Surveillance, Tracking, and Biometrics (2026)

Texas employers can generally monitor company email, phone lines, and computer systems under the federal wiretap law's business-use exception, and Texas leaves that baseline largely undisturbed: no state electronic-monitoring notice statute and no social media password law. Where Texas regulates more precisely than most states is a cluster of criminal and civil statutes aimed at tracking devices, invasive recording, and, notably, its own biometric privacy law with real enforcement teeth.

This article provides general legal information about Texas employee monitoring law as of July 9, 2026. It is not legal advice and does not create an attorney-client relationship. Consult a Texas-licensed attorney about your specific situation.

Scope: This article covers Texas law on an employer's authority to monitor employees, access personal social media, and conduct workplace video, GPS, and biometric monitoring. It does not re-derive Texas's general one-party consent recording rules (see our Texas recording laws guide) or GPS law generally outside the employment context (see our Texas GPS tracking laws guide).

The Federal Baseline: the "Ordinary Course of Business" Exception

Texas's starting point for any workplace monitoring question is federal, not state, law. Title I of the Electronic Communications Privacy Act makes it unlawful to intentionally intercept wire, oral, or electronic communications without consent (18 U.S.C. § 2511, part of the Title I scheme at sections 2510-2523), but the business-extension exemption in 18 U.S.C. section 2510(5)(a) excludes communications equipment used in the ordinary course of business, a category extended to employers who own the phone, email, and computer systems their staff use, from the Act's definition of a covered interception device, so employers are generally not liable for intercepting communications on that system in the ordinary course of business.

The leading case applying this exception is Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983): once a monitored call is determined to be personal rather than business-related, the employer's ordinary-course exception generally ends. Texas has not enacted a state monitoring statute that narrows or expands this federal baseline; state law fills the gap only in the areas covered below.

Does Texas Require Notice Before Electronic Monitoring?

No. A small group of states, Connecticut, Delaware, New York, and (in effect since mid-2026) Maine, require employers to give employees written or posted notice before monitoring phone, email, or internet use on the job. Texas has not enacted a comparable statute, and two specific claims circulating online deserve correction. First, there is no "Texas Government Code Chapter 542A" governing employee monitoring; Chapter 542A of the Texas Insurance Code exists, but it addresses litigation over property-damage insurance claims and has nothing to do with workplace surveillance. Second, there is no statute formally named the "Texas Privacy Protection Act." That phrase appears to be a garbled reference to the Texas Data Privacy and Security Act, a consumer privacy law effective July 1, 2024, which expressly excludes data processed in a commercial or employment context, so it does not create an employee-monitoring notice duty either.

That leaves Texas employers relying on the federal ordinary-course exception for email, internet, and phone monitoring, with no state-mandated notice step. Many still post signage or a written policy as a practical, evidentiary matter, since courts weighing an employee's reasonable expectation of privacy look at whether a policy existed, but that is a risk-management choice, not a legal requirement.

Does Texas Restrict Employer Access to Employee Social Media?

No. Texas is not among the 27 states that bar employers from requesting an employee's or applicant's social media username or password. A 2013 bill, House Bill 318, would have prohibited this, but it did not pass, and no successor has become law since. A Texas employer can lawfully make a password request a condition of employment. That does not mean accessing the account carries no risk: an employer that logs into an employee's personal account without authorization, rather than merely asking for credentials, can face separate exposure under the federal Stored Communications Act, 18 U.S.C. section 2701, which criminalizes unauthorized access to stored electronic communications.

Video and Audio Surveillance in Texas Workplaces

Texas's key video-surveillance statute has a notable recent history. Tex. Penal Code section 21.15 originally criminalized "improper photography or visual recording," but in Ex parte Thompson, 442 S.W.3d 325 (Tex. Crim. App. 2014), the Texas Court of Criminal Appeals struck down part of it as unconstitutionally overbroad under the First Amendment. The legislature responded in 2015 by narrowing the law to an enumerated list of private places, such as a bathroom, bedroom, or changing room, and retitling the offense "Invasive Visual Recording." Effective September 1, 2025, House Bill 1465 of the 89th Legislature broadened the offense again to reach any place where a person has a reasonable expectation of privacy, not just the previously listed locations, and added sex-offender registration, a default 10-year registration duty under Texas's tiered scheme, for offenses committed on or after that date. It is a state jail felony, punishable by 180 days to two years and a fine of up to $10,000. An employer camera in a restroom, locker room, or similar space, even one installed for loss-prevention reasons, risks prosecution regardless of a posted monitoring policy.

Audio recording is governed separately. Texas is a one-party consent state under Tex. Penal Code section 16.02: a person who is a party to a communication, or who has a party's consent, may record it. Intercepting one without being a party or consent is a second-degree felony carrying two to twenty years. Texas also gives the intercepted party an unusually strong civil remedy: under Tex. Civ. Prac. & Rem. Code chapter 123, that person can sue for an injunction and statutory damages of $10,000 per occurrence, plus actual and punitive damages and attorney's fees, well above what most one-party consent states provide. Our Texas workplace recording guide covers that consent question, including an employee's own right to record at work, in depth.

GPS and Vehicle Tracking of Texas Employees

Texas has not enacted a dedicated employer vehicle-tracking notice statute comparable to New Jersey's N.J. Stat. section 34:6B-22. The relevant general-purpose law is Tex. Penal Code section 16.06, Unlawful Installation of Tracking Device, a Class A misdemeanor for knowingly installing an electronic or mechanical tracking device on a motor vehicle owned or leased by another person. The scope is worth reading precisely: the offense is defined around installing a device on a vehicle owned by someone other than the installer. A Texas employer installing GPS tracking on a vehicle titled in the company's own name is not tracking a vehicle "owned by another person," so it falls outside section 16.06 entirely, without needing any exception.

The analysis changes for a vehicle the employer does not own, such as an employee's personal car used for work. There, section 16.06 provides an affirmative defense where the installer obtained the owner's or lessee's effective consent before installing the device, plus separate exceptions for peace officers and licensed private investigators with written consent. For the general framework, see our Texas GPS tracking laws guide.

Biometric Monitoring: Texas's Own Law, CUBI

Employers increasingly use fingerprint or facial-recognition time clocks. Illinois' Biometric Information Privacy Act, 740 ILCS 14, is the best-known law of this kind, requiring written consent and creating a private right of action with statutory damages; it does not apply outside Illinois. Texas, however, is not simply a state with no biometric law. It has its own biometric statute with a materially different structure: the Capture or Use of Biometric Identifier Act (CUBI), Tex. Bus. & Com. Code section 503.001, enacted in 2009, one year after Illinois's BIPA, making Texas the second state in the country to pass a dedicated biometric privacy law.

CUBI prohibits capturing a person's biometric identifier, defined as a retina or iris scan, fingerprint, voiceprint, or record of hand or face geometry, for a commercial purpose unless the person is informed beforehand and gives consent. Unlike BIPA, CUBI does not require that consent be in writing, giving Texas employers more flexibility in how they document it, though the consent still has to be affirmative and precede collection. CUBI also restricts selling, leasing, or disclosing a captured identifier, with limited exceptions, and requires destruction within a reasonable time after the collection purpose ends. Section 503.001(c-2) is directly relevant to workplace time clocks and access-control systems: when a biometric identifier is captured for a security purpose, the statute presumes that purpose expires when the employment relationship ends, which shapes how long an employer can retain a former employee's fingerprint or face-geometry record.

CUBI has no private right of action; individuals cannot sue under it directly. It is enforced exclusively by the Texas Attorney General, with civil penalties of up to $25,000 per violation, and that authority is not theoretical. In July 2024, the Texas Attorney General secured a $1.4 billion settlement with Meta, the largest privacy settlement ever obtained by a single state, over Facebook's use of facial recognition on photographs without the consent CUBI requires, the first lawsuit and settlement brought under the statute. That case involved consumer-facing facial recognition rather than employment, but it shows Texas's biometric law carries real enforcement risk that employers using biometric time clocks should take seriously. See our Texas biometric privacy guide for more on how CUBI works outside employment.

What Texas Employees Can Do About Monitoring Concerns

The right response depends on what happened. A camera in a restroom or locker room can support a law enforcement report under the invasive visual recording statute plus a civil claim. An intercepted conversation supports both a criminal complaint and a civil suit for the $10,000 statutory damages under Tex. Civ. Prac. & Rem. Code chapter 123. A biometric time clock used without CUBI consent is not something an employee sues over directly, but it can be reported to the Texas Attorney General's consumer protection division.

Monitoring tied to a protected characteristic, a workers' compensation claim, or an AI-driven decision made with intent to discriminate may fall under the Texas Workforce Commission, the NLRB, or a TRAIGA complaint to the Attorney General instead. Because Texas's rules are split across criminal law, civil remedies, a biometric statute, and federal law, keep records and consult a Texas-licensed employment attorney. For the broader picture, see our Employee Monitoring Laws by State hub and our general US recording laws guide.

Disclaimer

This article provides general legal information about Texas employee monitoring law as of July 9, 2026. It is not a substitute for individualized legal advice. Employment monitoring disputes often involve overlapping statutes, employer policy, and federal law, and outcomes depend on specific facts. Readers should consult an attorney licensed in Texas for advice about a particular situation.

Related articles

• Employee Monitoring Laws by State
• Texas Recording Laws
• Texas Workplace Recording Laws
• Texas GPS Tracking Laws
• Texas Biometric Privacy Laws
• US Recording Laws by State

---

Last updated: July 9, 2026. Statutes cited reflect their in-force version as of that date.

More Texas Laws

• Texas AI Meeting Recording Laws
• Texas At-Will Employment Laws
• Texas Data Privacy Laws
• Texas GPS Tracking Laws
• Texas Recording Laws
• Texas Whistleblower Laws