Watched at Work: What Your Employer Knows About You—and How to Reclaim Your Digital Boundaries

The Monitoring Revolution Nobody Announced

When you accepted your current job offer, you likely received a benefits packet, an employee handbook, and perhaps a laptop. What you probably did not receive was a detailed disclosure explaining that your employer may be tracking every website you visit, logging every keystroke you type, capturing periodic screenshots of your screen, and monitoring your physical location throughout the workday.

Yet for millions of American workers—both in-office and remote—this is precisely the reality. The workplace surveillance industry has expanded dramatically over the past decade, and the shift to remote work accelerated its growth further. According to research from Gartner, more than 60 percent of large US employers now use some form of employee monitoring technology, a figure that has roughly doubled since 2015.

Understanding what is being collected, why it is legal, and what you can realistically do about it is no longer optional knowledge. It is a matter of personal privacy that every worker deserves to understand.

What Companies Are Actually Tracking

The tools available to employers today fall into several broad categories, and many organizations deploy more than one simultaneously.

Activity monitoring software — Programs such as Teramind, ActivTrak, and Hubstaff operate silently in the background on company devices, recording application usage, website visits, idle time, and in some cases, the actual content of messages sent through corporate communication platforms like Slack or Microsoft Teams.

Keystroke logging — Some enterprise solutions record every key pressed on a company keyboard. This can capture not only work-related content but also personal passwords, private messages drafted during a break, or sensitive health information entered into a personal account on a company machine.

Screenshot capture — Certain platforms take automated screenshots at randomized or fixed intervals, creating a timestamped visual record of everything displayed on an employee's screen throughout the day.

Email and communication scanning — Corporate email servers routinely scan outgoing and incoming messages for policy violations, data exfiltration attempts, or keywords flagged by compliance departments. This scanning is generally disclosed in acceptable-use policies, but the breadth of what is captured often surprises workers.

Location and device tracking — Remote employees using company-issued laptops or mobile devices may have their geographic location logged. GPS tracking through company vehicles or mobile device management (MDM) profiles on personal phones used for work can extend this surveillance beyond the home office.

The Legal Gray Zone

American privacy law, particularly as it applies to the workplace, is notably employer-friendly. The Electronic Communications Privacy Act of 1986 permits employers to monitor communications on company-owned equipment and networks, provided they have notified employees—and in most cases, a single line buried in an employee handbook satisfies that requirement.

Unlike the European Union's General Data Protection Regulation, which imposes strict limits on employee monitoring and requires demonstrable necessity, the United States has no comprehensive federal workplace privacy law. Individual states have begun to address this gap: Connecticut and New York, for example, now require employers to provide written notice of electronic monitoring before it begins. But the majority of states impose no such obligation.

The practical result is a system in which employers hold considerable authority over what they collect, how long they retain it, and how they use it—with employees often unaware of the full scope until a disciplinary situation surfaces the data.

Real-World Overreach: When Monitoring Goes Too Far

Legal permission does not always equate to reasonable practice. Several high-profile cases illustrate where corporate monitoring has crossed into genuinely troubling territory.

In 2021, a financial services firm in the United Kingdom—though the trend is mirrored by US counterparts—was found to have used webcam monitoring software to capture images of remote workers at home every ten minutes. Employees working from bedrooms or shared living spaces had no meaningful way to separate their personal environment from the employer's gaze.

In the United States, warehouse and logistics workers have documented the psychological toll of productivity-tracking systems that monitor the number of seconds between package scans, generating automated warnings when metrics fall below algorithmic thresholds. While this is production monitoring rather than communications surveillance, it reflects the same underlying appetite for granular behavioral data.

For knowledge workers, the concern is often more subtle: the awareness that every browser tab, every pause in typing, and every personal errand conducted during a lunch break may be logged and reviewed creates a persistent pressure that many describe as exhausting.

Practical Strategies for Protecting Your Privacy

Accepting that some level of monitoring is legally permissible on company equipment and networks does not mean surrendering all personal privacy. The following strategies can help establish meaningful boundaries.

Separate your devices. The single most effective step is maintaining a clear division between company-owned equipment and your personal devices. Never conduct personal banking, medical research, or private communications on a work laptop or work phone. Treat company devices as if every action is visible—because, in many cases, it is.

Understand what you agreed to. Locate the acceptable-use policy and any monitoring disclosures in your employment agreement or employee handbook. Knowing what your employer has claimed the right to monitor informs how carefully you need to maintain that device separation.

Use a personal VPN or proxy on personal devices. When working remotely, your home internet connection may route some traffic through corporate infrastructure if you are connected to a company VPN. Any personal browsing conducted on personal devices through your own network connection, however, remains separate from corporate visibility—provided you are not also routing that traffic through an employer-managed system. A personal VPN service or proxy on your personal device adds an additional layer of protection against ISP-level observation and ensures that your personal browsing remains precisely that: personal.

Be cautious with personal accounts on work devices. Even if you believe your employer is not actively reviewing content, logging into personal email, social media, or financial accounts on a work device creates credential exposure and leaves a record of those sessions in system logs.

Know your state's rights. If you work in Connecticut, New York, or another state that has enacted employee monitoring notice requirements, familiarize yourself with what disclosures your employer was obligated to provide. Violations of these statutes may provide legal recourse.

Speak with HR or legal counsel if concerned. If you believe monitoring practices at your organization are crossing legal or ethical lines, documenting your concerns and consulting an employment attorney is a reasonable step before escalating internally.

The Bigger Picture

Workplace surveillance is not inherently malicious. Legitimate security concerns—preventing data breaches, ensuring regulatory compliance, protecting intellectual property—justify some level of oversight. The problem arises when monitoring becomes disproportionate, undisclosed, or extends into spaces and moments that workers reasonably expect to be private.

For American workers navigating this environment, the most important shift is from passive assumption to active awareness. Assume that company equipment is monitored. Treat personal privacy as something to be actively maintained rather than passively hoped for. And when using personal devices and personal networks, employ the privacy tools available to you—including reputable proxy and VPN services—to ensure that your personal life remains your own.

Privacy in the modern workplace is not about hiding wrongdoing. It is about maintaining the fundamental dignity of a boundary between professional obligation and personal life—a boundary that technology has made easier to erase and, with the right knowledge, easier to defend.