Virginia Employee Monitoring Laws: Workplace Surveillance and Social Media (2026)

Virginia employers can generally read work email and review activity on company systems under the federal wiretap law's business-use exception, since Virginia has no state notice statute layered on top. State law instead does its work in narrower places: social media accounts, vehicle tracking, and cameras in private spaces.

This article provides general legal information about Virginia employee monitoring law as of July 9, 2026. It is not legal advice and does not create an attorney-client relationship. Consult a Virginia-licensed attorney about your specific situation.

Scope: This article covers Virginia law on an employer's authority to monitor employees, access personal social media, and conduct workplace video, GPS, and biometric monitoring. It does not re-derive Virginia's general recording-consent rules (see our Virginia recording laws guide) or GPS law outside employment (see our Virginia GPS tracking laws guide).

The Federal Baseline: the "Ordinary Course of Business" Exception

Virginia's starting point for any workplace monitoring question is federal, not state, law. Title I of the Electronic Communications Privacy Act makes it unlawful to intentionally intercept wire, oral, or electronic communications without consent, 18 U.S.C. sections 2510-2523, but it carves out a broad exception for the owner of a communications system. Under 18 U.S.C. section 2511(2)(a)(i), a provider of a wire or electronic communication service, a category extended to employers who own the phone, email, and computer systems their staff use, may intercept communications on that system in the ordinary course of business.

The leading case applying this exception is Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983): once a monitored call is determined to be personal rather than business-related, the employer's ordinary-course exception generally ends, and continued listening can create liability. Virginia has not enacted a state monitoring statute that narrows or expands this federal baseline for phone, email, or internet monitoring; state law fills the gap only in the areas covered below.

Virginia is also a one-party consent state for recording conversations under Va. Code section 19.2-62: only one participant needs to agree for a recording to be lawful. That consent rule is separate from an employer's ordinary-course authority over its own systems; see our Virginia recording laws guide for the full rules, exceptions, and penalties.

Does Virginia Require Notice Before Electronic Monitoring?

No. A small group of states, Connecticut, Delaware, New York, and (starting in 2026) Maine, require employers to give written or posted notice before monitoring phone, email, or internet use. Virginia has not enacted a comparable statute; Title 40.1, Chapter 3 (Protection of Employees) contains no general electronic-monitoring notice duty. A Virginia employer can generally monitor company email, internet, or phone lines relying on the federal ordinary-course exception above, without a state-mandated notice step.

Readers should be careful here: some online compliance guides cite a Virginia statute requiring electronic-monitoring notice and a ban on restroom or locker-room cameras. That description tracks Connecticut's notice law almost word for word, not anything in the Code of Virginia, and the section numbers cited do not correspond to any employee-monitoring statute on Virginia's official code site. Virginia's real protection against restroom and locker-room cameras comes from a different, criminal-law source, covered below.

That does not mean notice is legally irrelevant. Courts weighing an employee's reasonable expectation of privacy, relevant to common-law invasion-of-privacy claims, often look at whether the employer published a monitoring policy, even though no statute requires one.

Virginia's Social Media Privacy Law for Employees

Virginia's clearest state-specific employee monitoring statute is Va. Code section 40.1-28.7:5, enacted in 2015. It prohibits an employer from requiring a current or prospective employee to disclose the username and password to a personal social media account, or from requiring the employee to add a supervisor to the account's contact list. "Social media account" means a personal account for user-generated content, excluding an account the employer itself created or provided for work use.

The statute has real exceptions. An employer's existing right to request credentials is preserved when the account activity is reasonably believed relevant to a formal investigation of an alleged violation of law or the employer's own written policies, and credentials obtained that way may only be used for that investigation. The law also does not stop an employer from viewing publicly available information, and an employer that inadvertently receives login information through an employer-issued device is not liable so long as it does not use the credentials.

Virginia's law bars retaliation: an employer cannot discipline or discharge a current employee for exercising these rights, or refuse to hire an applicant for doing the same. Unlike Montana's parallel law, Virginia's statute does not spell out a specific private civil remedy or damages cap.

Video and Audio Surveillance in Virginia Workplaces

Virginia has no employment-specific video-surveillance statute, but general criminal law limits where a camera, employer-owned or not, can point. Va. Code section 18.2-386.1 makes it unlawful to knowingly create a videographic or still image of a nonconsenting person who is nude, in undergarments, or otherwise undressed in a restroom, dressing room, locker room, or similar location carrying a reasonable expectation of privacy. A violation is a Class 1 misdemeanor, or a Class 6 felony if the person is under 18. A related statute, Va. Code section 18.2-130, separately criminalizes using a peephole or aperture to secretly view or record someone in those same spaces. An employer that installs a camera in a restroom, locker room, or changing area, even for loss-prevention reasons, is exposed to criminal liability regardless of a posted policy. Virginia also gives victims a civil remedy: Va. Code section 8.01-40.4 lets anyone injured by conduct prohibited under section 18.2-386.1 sue for compensatory and punitive damages plus attorney fees, whether or not the conduct was criminally charged.

Cameras in common work areas, sales floors, warehouses, and entrances are generally permissible without a state-specific notice requirement. Audio recording of employees is governed separately by Virginia's one-party consent rule discussed above; an employer that wants to record conversations, rather than merely reviewing stored business communications, needs that consent. Our Virginia workplace recording guide covers that question in depth, including an employee's own right to record at work.

GPS and Vehicle Tracking of Virginia Employees

Virginia has not enacted a dedicated employer vehicle-tracking notice statute comparable to New Jersey's N.J. Stat. section 34:6B-22. The relevant general-purpose law is Va. Code section 18.2-60.5, a Class 1 misdemeanor for installing an electronic tracking device through intentionally deceptive means and without consent, then using it to track a person's location. One of its express exemptions applies directly to employers: it does not apply to "the owner of fleet vehicles, when tracking such vehicles," a fleet vehicle being one owned by a single entity and operated by that entity's employees for business purposes.

That exemption means a Virginia employer that owns or leases the vehicles its employees drive for work is generally exempt from this statute's consent requirement, without needing the looser "owner consent" reading employers in some other states must rely on. It does not resolve every question, particularly personal driving in a company vehicle or a tracker that also logs an employee's personal phone. For the general legal framework governing tracking devices in Virginia, see our Virginia GPS tracking laws guide.

Biometric Monitoring: Time Clocks and the Virginia Consumer Data Protection Act

Employers increasingly use fingerprint or facial-recognition time clocks, and in trucking, driver-facing cameras that capture biometric identifiers. Illinois' Biometric Information Privacy Act, 740 ILCS 14, is the strongest law of this kind, requiring written consent before collection and creating a private right of action; it does not apply outside Illinois. Virginia has no Illinois-style biometric consent statute.

Virginia does have a comprehensive privacy statute, the Virginia Consumer Data Protection Act (VCDPA), Va. Code section 59.1-575 et seq., effective January 1, 2023. The VCDPA classifies biometric data used to uniquely identify a person as "sensitive data" and generally requires a consumer's consent before processing it, Va. Code section 59.1-578(A)(5). But the Act defines "consumer" as a Virginia resident "acting only in an individual or household context," expressly excluding anyone "acting in a commercial or employment context," Va. Code section 59.1-575, and section 59.1-576(C)(14) separately exempts data collected in the context of an employment role. An employee's fingerprint or face scan collected for a workplace time clock therefore falls outside both the VCDPA's protections and its scope. Virginia employees are protected mainly by employer policy and common-law privacy claims, not a dedicated biometric statute. See our Virginia biometric privacy guide for how the VCDPA's rules work outside employment.

What Virginia Employees Can Do About Monitoring Concerns

An employee who believes an employer crossed a legal line has a few concrete options. A demand for a social media password, or retaliation for refusing one, can support a claim under Va. Code section 40.1-28.7:5. A camera in a restroom or locker room can support both a law enforcement report under Va. Code section 18.2-386.1 and a civil suit for damages under Va. Code section 8.01-40.4. Monitoring tied to a protected characteristic or concerted activity under the National Labor Relations Act may instead fall to the Virginia Division of Human Rights or the NLRB.

Because Virginia's monitoring rules are split across criminal privacy law, the social media statute, the VCDPA, and federal wiretap and labor law, an employee should keep records and consult a Virginia-licensed employment attorney rather than assume one statute covers the situation. For the broader 50-state picture, see our Employee Monitoring Laws by State hub and our general US recording laws guide.

More Virginia Laws

• Virginia AI Meeting Recording Laws
• Virginia Alimony Laws
• Virginia At-Will Employment Laws
• Virginia Car Accident Laws
• Virginia Car Seat Laws
• Virginia Child Custody Laws
• Virginia Child Support Laws
• Virginia Common Law Marriage Laws
• Virginia Dashcam Laws
• Virginia Data Privacy Laws
• Virginia Deepfake Laws
• Virginia Divorce Laws
• Virginia Dog Bite Laws
• Virginia Drone Laws
• Virginia Emancipation Laws
• Virginia Expungement Laws

Disclaimer

This article provides general legal information about Virginia employee monitoring law as of July 9, 2026. It is not a substitute for individualized legal advice. Employment monitoring disputes often involve overlapping statutes, employer policy, and federal law, and outcomes depend on specific facts. Readers should consult an attorney licensed in Virginia for advice about a particular situation.

Related articles

• Employee Monitoring Laws by State
• Virginia Recording Laws
• Virginia Workplace Recording Laws
• Virginia GPS Tracking Laws
• Virginia Biometric Privacy Laws
• US Recording Laws by State

---

Last updated: July 9, 2026. Statutes cited reflect their in-force version as of that date.