According to recent estimates, upwards of 90 percent of employers monitor employee workplace activity in some way or another. The appeal is obvious. When done properly, monitoring can help companies increase productivity and efficiency, protect assets and proprietary information, and identify and hopefully prevent harassing conduct, libel, employee theft, vandalism, hacking, and other inappropriate behavior. But when companies overstep permissible boundaries, their monitoring efforts can have severe legal and financial consequences. There are a substantial number of cases, including several recent decisions, where companies have learned the hard way that their right to monitor employees’ work activities has limits.

For example, in Hernandez v. Hillsides, Inc., 47 Cal.4th 272 (2009), the employer, in a legitimate effort to determine who may have been viewing pornography on a work computer late at night, placed surveillance cameras in certain employees’ offices without the employees’ knowledge. Instead of catching the offender, the employer captured images of employees changing their clothes for post-work workouts, female employees viewing their pregnancy scars, and other private activities. In ruling against the employer, the California Supreme Court held that although employees’ right to privacy in work offices is not absolute, they have “a reasonable expectation of privacy under widely held social norms that the employer would not install video equipment capable of monitoring and recording their activities – personal and work-related – behind closed doors without their knowledge or consent.”

In a recent New Jersey case, Pietrylo v. Hillstone Restaurant Group, 2009 WL 3128420 (D.N.J. 2009) and Pietrylo v. Hillstone Restaurant Group, 2008 WL 6085437 (D.N.J. 2008), two restaurant servers created a password protected MySpace page where they and certain fellow co-workers could go to vent about the trials and tribulations of working in a restaurant. A supervisor learned of the MySpace page and pressured an employee with access to give him the password. Once on the site, the supervisor found messages that included sexual remarks about members of management and customers and references to violence and illegal drugs. The two servers who created the page were terminated and subsequently sued under stored communications laws that limit which individuals may access stored electronic communications. The trial court denied summary judgment to the employer holding that the restaurant’s employee monitoring authority did not include private online communications on a social network outside of work. The two employees subsequently won a small jury verdict.