Virginia flag

Virginia

Virginia Employee Monitoring Laws: Workplace Surveillance and Social Media (2026)

Virginia Employee Monitoring Laws: Workplace Surveillance and Social Media (2026)

Frequently Asked Questions

Can my employer read my work email in Virginia?

Generally yes, once the email is on an employer-owned system. Virginia has no state notice statute, so employers typically rely on the federal ordinary-course-of-business exception in 18 U.S.C. section 2510(5)(a).

Can my employer ask for my Facebook or Instagram password in Virginia?

No, not for personal accounts. Va. Code section 40.1-28.7:5 prohibits requiring a social media username or password, except when the account is reasonably believed relevant to a formal misconduct investigation or is already publicly available.

Does Virginia law require my employer to tell me I'm being monitored?

Not by a dedicated statute. Unlike Connecticut, Delaware, New York, and Maine, Virginia has no general electronic-monitoring notice law, so no state-mandated notice is required before monitoring employer-owned systems.

Can my employer GPS track a company vehicle I drive in Virginia?

Generally yes. Va. Code section 18.2-60.5 expressly exempts 'the owner of fleet vehicles, when tracking such vehicles,' and an employer that owns the vehicle typically qualifies. No statute requires special notice for company-vehicle GPS tracking.

Can my employer put a camera in a Virginia workplace restroom or locker room?

No. Va. Code section 18.2-386.1 makes it a crime to create a nude or partially nude image of someone without consent in a restroom, locker room, or similar private space, including via an employer-installed camera. Victims can also sue civilly under Va. Code section 8.01-40.4.

Can my Virginia employer require a fingerprint scan for the time clock?

There is no Illinois-style biometric consent statute in Virginia. The VCDPA excludes employment-context individuals from its 'consumer' definition, Va. Code section 59.1-575, and separately exempts employment-context data, Va. Code section 59.1-576(C)(14), so its biometric consent requirement does not reach a workplace time clock.

Is Virginia a one-party consent state for recording conversations?

Yes. Under Va. Code section 19.2-62, only one participant needs to consent. See our Virginia recording laws guide for the full framework.

What can I do if my Virginia employer violates the social media password law?

An employee or applicant whose rights under Va. Code section 40.1-28.7:5 were violated should document what happened and consult a Virginia-licensed employment attorney, since the statute does not spell out a specific damages cap or claims procedure.

Updates

Independently fact-checked against the cited primary sources; governing law re-checked for recent changes

Governing law re-checked for recent changes

Corrected the fleet-vehicle GPS exemption to require ownership (not leasing), narrowed the Va. Code 18.2-130 description to viewing only (it does not cover recording), and re-anchored the employer 'ordinary course of business' monitoring exception from 18 U.S.C. 2511(2)(a)(i) to the correct business-extension exemption at 18 U.S.C. 2510(5)(a).

Governing law re-checked for recent changes

Reviewed and approved by an editor

The Law Behind This Article

This article rests on 10 statutory provisions held in our own legal record, each retrieved from the official source. Tap a section to read the operative text.

United States Code Title 18

§ 2510DefinitionsIn forcecited in 120 of our articles
As used in this chapter— “wire communication” means any aural transfer made in whole or in part through the use of facilities for the transmission of communications by the aid of wire, cable, or other like connection between the point of origin and the point of reception (including the use of such connection in a switching station) furnished or operated by any person engaged in providing or operating such facilities for the transmission of interstate or foreign communications or communications affecting interstate or foreign commerce; “oral communication” means any oral communication uttered by a person exhibiting an expectation that such communication is not subject to interception under circumstances justifying such expectation, but such term does not include any electronic communication; “State” means any State of the United States, the District of Columbia, the Commonwealth of Puerto Rico, and any territory or possession of the United States; “intercept” means the aural or other acquisition of the contents of any wire, electronic, or oral communication through the use of any electronic, mechanical, or other device.1  So in original. The period probably should be a semicolon.

Official text (excerpt) · as of 2026-07-28 · Read the full section at uscode.house.gov

Cited in 2,382 court opinions1960s: 21970s: 3941980s: 3271990s: 4102000s: 4302010s: 4682020s: 351Most recently applied by a court: 2026

Leading cases: Forsyth v. Barr (Court of Appeals for the Fifth Circuit 1994, 19 F.3d 1527) · Nixon v. Administrator of General Services (Supreme Court of the United States 1977, 433 U.S. 425) · Gannett Co. v. DePasquale (Supreme Court of the United States 1979, 443 U.S. 368)

Identified automatically from the court opinions citing this section — not a ranking of which case controls.

Also relied on in: US Recording Laws by State (2026): All 50 States Explained, District of Columbia Recording Laws (2026): One-Party Consent Rules, Kentucky Phone Call Recording Laws: What You Need to Know

§ 2511Interception and disclosure of wire, oral, or electronic communications prohibitedIn forcecited in 397 of our articles
Except as otherwise specifically provided in this chapter any person who— intentionally intercepts, endeavors to intercept, or procures any other person to intercept or endeavor to intercept, any wire, oral, or electronic communication; intentionally uses, endeavors to use, or procures any other person to use or endeavor to use any electronic, mechanical, or other device to intercept any oral communication when— such device is affixed to, or otherwise transmits a signal through, a wire, cable, or other like connection used in wire communication; or such device transmits communications by radio, or interferes with the transmission of such communication; or such person knows, or has reason to know, that such device or any component thereof has been sent through the mail or transported in interstate or foreign commerce; or such use or endeavor to use (A) takes place on the premises of any business or other commercial establishment the operations of which affect interstate or foreign commerce; or (B) obtains or is for the purpose of obtaining information relating to the operations of any business or other commercial establishment the operations of which affect interstate or foreign…

Official text (excerpt) · as of 2026-08-12 · Read the full section at uscode.house.gov

Cited in 2,045 court opinions1960s: 51970s: 2581980s: 2991990s: 3792000s: 4272010s: 2972020s: 380Most recently applied by a court: 2026

Leading cases: Mitchell v. Forsyth (Supreme Court of the United States 1985, 472 U.S. 511) · United States v. United States District Court for the Eastern District of Michigan (Supreme Court of the United States 1972, 407 U.S. 297) · Forsyth v. Barr (Court of Appeals for the Fifth Circuit 1994, 19 F.3d 1527)

Identified automatically from the court opinions citing this section — not a ranking of which case controls.

Also relied on in: Alabama Audio Recording Laws: Consent Rules and Penalties, Alabama Dashcam Laws: Legality, Mounting Rules, and Evidence Use, Alabama Medical Recording Laws: Patient Rights and HIPAA Rules

Code of Virginia, Title 18.2: Crimes and Offenses Generally

§ 18.2-130Peeping or spying into dwelling or enclosureIn forcecited in 9 of our articles
A. It shall be unlawful for any person to enter upon the property of another and secretly or furtively peep, spy or attempt to peep or spy into or through a window, door or other aperture of any building, structure, or other enclosure of any nature occupied or intended for occupancy as a dwelling, whether or not such building, structure or enclosure is permanently situated or transportable and whether or not such occupancy is permanent or temporary, or to do the same, without just cause, upon property owned by him and leased or rented to another under circumstances that would violate the occupant's reasonable expectation of privacy. B.

Official text (excerpt) · as of 2026-07-29 · Read the full section at law.lis.virginia.gov

Cited in 1 court opinionsMost recently applied by a court: 2026

Leading cases: United States v. Watkins (Court of Appeals for the Tenth Circuit 2026)

Identified automatically from the court opinions citing this section — not a ranking of which case controls.

Also relied on in: Virginia Landlord-Tenant Recording Laws: Surveillance and Privacy Rights, Virginia Security Camera Laws: Home, Business, and HOA Rules, Virginia Video Recording Laws: Surveillance Rules and Privacy Limits

§ 18.2-386.1Unlawful creation of image of another; penaltyIn forcecited in 16 of our articles
A. It is unlawful for any person to knowingly and intentionally create any videographic or still image by any means whatsoever of any nonconsenting person if (i) that person is (a) totally nude; (b) clad in undergarments; (c) in a state of undress so as to expose the genitals, pubic area, buttocks, or female breast; or (d) not exposed to show the genitals, pubic area, buttocks, or female breast but such videographic or still image is obscene, as defined in § 18.2-372, when such nonconsenting person is in a restroom, dressing room, locker room, hotel room, motel room, tanning bed, tanning booth, bedroom, or other location; or (ii) the videographic or still image is created by placing the lens or image-gathering component of the recording device in a position directly beneath or between a person's legs for the purpose of capturing an image of the person's intimate parts or undergarments covering those intimate parts when the intimate parts or undergarments would not otherwise be visible to the general public; and when the circumstances set forth in clause (i) or (ii) are otherwise such that the person being recorded would have a reasonable expectation of privacy. B.

Official text (excerpt) · as of 2026-07-29 · Read the full section at law.lis.virginia.gov

Also relied on in: Virginia Voyeurism and Hidden Camera Laws: Penalties and Protections, Virginia Workplace Recording Laws: Employee Rights and Employer Rules, Is It Illegal to Video Record Someone Without Their Consent? (2026)

§ 18.2-60.5Unauthorized use of electronic tracking device; penaltyIn forcecited in 3 of our articles
A. Any person who installs or places an electronic tracking device through intentionally deceptive means and without consent, or causes an electronic tracking device to be installed or placed through intentionally deceptive means and without consent, and uses such device to track the location of any person is guilty of a Class 1 misdemeanor. B. The provisions of this section shall not apply to the installation, placement, or use of an electronic tracking device by: 1. A law-enforcement officer, judicial officer, probation or parole officer, or employee of the Department of Corrections when any such person is engaged in the lawful performance of official duties and in accordance with other state or federal law; 2. The parent or legal guardian of a minor when tracking (i) the minor or (ii) any person authorized by the parent or legal guardian as a caretaker of the minor at any time when the minor is under the person's sole care; 3. A legally authorized representative of a vulnerable adult, as defined in § 18.2-369; 4. The owner of fleet vehicles, when tracking such vehicles; 5.

Official text (excerpt) · as of 2026-07-29 · Read the full section at law.lis.virginia.gov

Also relied on in: Virginia GPS Tracking Laws: Is It Legal to Put a Tracker on a Car? (2026), GPS Tracking Laws by State: Is It Legal to Put a Tracker on a Car? (2026)

Code of Virginia, Title 19.2: Criminal Procedure

§ 19.2-62Interception, disclosure, etc., of wire, electronic or oral communications unlawful; penalties; exceptionsIn forcecited in 21 of our articles
A. Except as otherwise specifically provided in this chapter any person who: 1. Intentionally intercepts, endeavors to intercept or procures any other person to intercept or endeavor to intercept, any wire, electronic or oral communication; 2. Intentionally uses, endeavors to use, or procures any other person to use or endeavor to use any electronic, mechanical or other device to intercept any oral communication; 3. Intentionally discloses, or endeavors to disclose, to any other person the contents of any wire, electronic or oral communication knowing or having reason to know that the information was obtained through the interception of a wire, electronic or oral communication; or 4. Intentionally uses, or endeavors to use, the contents of any wire, electronic or oral communication, knowing or having reason to know that the information was obtained through the interception of a wire, electronic or oral communication; shall be guilty of a Class 6 felony. B. 1.

Official text (excerpt) · as of 2026-07-29 · Read the full section at law.lis.virginia.gov

Cited in 11 court opinions1970s: 11980s: 11990s: 22000s: 42010s: 02020s: 3Most recently applied by a court: 2025

Leading cases: Belmer v. Commonwealth (Court of Appeals of Virginia 2001, 36 Va. App. 448) · Wilks v. Commonwealth (Supreme Court of Virginia 1977, 217 Va. 885) · Bartnicki v. Vopper (Supreme Court of the United States 2001, 532 U.S. 514)

Identified automatically from the court opinions citing this section — not a ranking of which case controls.

Also relied on in: District of Columbia Phone Call Recording Laws: Consent Rules and Interstate Calls, Virginia Audio Recording Laws: One-Party Consent Rules and Penalties, Virginia Phone Call Recording Laws: What You Need to Know

Code of Virginia, Title 40.1: Labor and Employment

§ 40.1-28.7:5Social media accounts of current and prospective employeesIn force
A. As used in this section: "Employer" includes, in addition to the persons enumerated in the definition of employer in § 40.1-2, (i) any unit of state or local government and (ii) any agent, representative, or designee of a person or unit of government that constitutes an employer. "Social media account" means a personal account with an electronic medium or service where users may create, share, or view user-generated content, including, without limitation, videos, photographs, blogs, podcasts, messages, emails, or website profiles or locations. "Social media account" does not include an account (i) opened by an employee at the request of an employer; (ii) provided to an employee by an employer such as the employer's email account or other software program owned or operated exclusively by an employer; (iii) set up by an employee on behalf of an employer; or (iv) set up by an employee to impersonate an employer through the use of the employer's name, logos, or trademarks. B. An employer shall not require a current or prospective employee to: 1. Disclose the username and password to the current or prospective employee's social media account; or 2.

Official text (excerpt) · as of 2026-07-29 · Read the full section at law.lis.virginia.gov

Code of Virginia, Title 59.1: Trade and Commerce

§ 59.1-575DefinitionsIn forcecited in 8 of our articles
As used in this chapter, unless the context requires a different meaning: "Affiliate" means a legal entity that controls, is controlled by, or is under common control with another legal entity or shares common branding with another legal entity. For the purposes of this definition, "control" or "controlled" means (i) ownership of, or the power to vote, more than 50 percent of the outstanding shares of any class of voting security of a company; (ii) control in any manner over the election of a majority of the directors or of individuals exercising similar functions; or (iii) the power to exercise controlling influence over the management of a company. "Authenticate" means verifying through reasonable means that the consumer, entitled to exercise his consumer rights in § 59.1-577, is the same consumer exercising such consumer rights with respect to the personal data at issue. "Biometric data" means data generated by automatic measurements of an individual's biological characteristics, such as a fingerprint, voiceprint, eye retinas, irises, or other unique biological patterns or characteristics that is used to identify a specific individual.

Official text (excerpt) · as of 2026-07-29 · Read the full section at law.lis.virginia.gov

Also relied on in: Virginia Smart Glasses Recording Laws, Virginia Data Privacy Laws: VCDPA Consumer Rights Guide (2026), Virginia Biometric Privacy Laws: Collection, Consent & Penalties (2026)

§ 59.1-576Scope; exemptionsIn forcecited in 5 of our articles
A. This chapter applies to persons that conduct business in the Commonwealth or produce products or services that are targeted to residents of the Commonwealth and that (i) during a calendar year, control or process personal data of at least 100,000 consumers or (ii) control or process personal data of at least 25,000 consumers and derive over 50 percent of gross revenue from the sale of personal data. B. This chapter shall not apply to any (i) body, authority, board, bureau, commission, district, or agency of the Commonwealth or of any political subdivision of the Commonwealth; (ii) financial institution or data subject to Title V of the federal Gramm-Leach-Bliley Act (15 U.S.C. § 6801 et seq.); (iii) covered entity or business associate governed by the privacy, security, and breach notification rules issued by the U.S. Department of Health and Human Services, 45 C.F.R. Parts 160 and 164 established pursuant to HIPAA, and the Health Information Technology for Economic and Clinical Health Act (P.L. 111-5); (iv) nonprofit organization; or (v) institution of higher education. C. The following information and data is exempt from this chapter: 1.

Official text (excerpt) · as of 2026-07-29 · Read the full section at law.lis.virginia.gov

Also relied on in: VCDPA Compliance Checklist for Businesses (2026), What Is the VCDPA? Virginia's Data Privacy Law Explained

Code of Virginia, Title 8.01: Civil Remedies and Procedure

§ 8.01-40.4Civil action for unlawful creation of image of another or unlawful dissemination or sale of images of anotherIn forcecited in 8 of our articles
A. Any person injured by an individual who engaged in conduct that is prohibited under § 18.2-386.1 or 18.2-386.2, whether or not the individual has been charged with or convicted of the alleged violation, may sue therefor and recover compensatory damages, punitive damages, and reasonable attorney fees and costs. B. No action shall be commenced under this section more than two years after the later of (i) the date of the last act in violation of § 18.2-386.1 or 18.2-386.2, (ii) the date on which such person attained 18 years of age, or (iii) the date on which such person discovered or reasonably should have discovered the prohibited conduct. C. Nothing in this section shall be construed to impose liability on an interactive computer service, as defined in 47 U.S.C. § 230(f), for content provided by another person.

Official text (excerpt) · as of 2026-07-29 · Read the full section at law.lis.virginia.gov

Also relied on in: Virginia Surveillance Camera Laws (2026 Guide)

Search our full record of US law — 2.1 million sections, every state + federal

Sources and References

  1. Va. Code section 40.1-28.7:5, Social media accounts of current and prospective employees(law.lis.virginia.gov).gov
  2. 18 U.S.C. section 2510(5)(a), business-extension exemption for employer-furnished equipment used in the ordinary course of business(law.cornell.edu).gov
  3. Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983)(law.resource.org)
  4. Va. Code section 18.2-60.5, Unauthorized use of electronic tracking device; penalty (fleet-vehicle exemption)(law.lis.virginia.gov).gov
  5. Va. Code section 18.2-386.1, Unlawful creation of image of another; penalty(law.lis.virginia.gov).gov
  6. Va. Code section 18.2-130, Peeping or spying into dwelling or enclosure(law.lis.virginia.gov).gov
  7. Va. Code section 8.01-40.4, Civil action for unlawful creation of image of another(law.lis.virginia.gov).gov
  8. Va. Code section 19.2-62, Interception, disclosure, etc., of wire, electronic or oral communications unlawful; penalties; exceptions(law.lis.virginia.gov).gov
  9. Va. Code section 59.1-575, Definitions (Virginia Consumer Data Protection Act, 'consumer' excludes employment context)(law.lis.virginia.gov).gov
  10. Va. Code section 59.1-576, Scope; exemptions (Virginia Consumer Data Protection Act, employment-context data exemption)(law.lis.virginia.gov).gov
  11. 18 U.S.C. § 2511 – Interception and disclosure of wire, oral, or electronic communications prohibited(uscode.house.gov).gov
Share: