Kentucky Employee Monitoring Laws (2026): Workplace Surveillance Rights

Kentucky considered but never enacted an employee electronic-monitoring notice law; House Bill 585 died in committee in 2020. Kentucky also has no social-media-password statute. Workplace surveillance runs on the federal Electronic Communications Privacy Act's business-use exception and Kentucky's voyeurism, tracking-device, and one-party consent recording statutes.

Information last verified on July 9, 2026. This article has not yet been reviewed by a licensed lawyer.

Jurisdiction scope: This article covers Kentucky state law on an employer's ability to monitor employees: electronic-monitoring notice, social media password protection, GPS and vehicle tracking, and workplace video and audio surveillance. It does not re-derive Kentucky's general one-party consent recording rule (see Kentucky Recording Laws) or Kentucky's general GPS tracking statute (see Kentucky GPS Tracking Laws) in depth. Information current as of July 2026.

Can an Employer Monitor Employees in Kentucky?

Yes. Federal law sets the floor for workplace monitoring, and Kentucky has not adopted additional employment-specific restrictions on top of it. Title I of the Electronic Communications Privacy Act, 18 U.S.C. sections 2510 to 2523, makes it unlawful to intentionally intercept a wire, oral, or electronic communication without consent (18 U.S.C. § 2511), but the business-extension exemption at 18 U.S.C. section 2510(5)(a) excludes employer-provided phone and computer systems used in the ordinary course of business from the Act's definition of an interception device, letting an employer that provides the phone or computer system monitor communications on that system for legitimate business reasons. The Eleventh Circuit's decision in Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983), narrowed that exception in practice: once a monitored call is identified as personal, continued listening can fall outside the exception. An employer can also rely on consent, either because Kentucky is a one-party consent state under KRS 526.010 and KRS 526.020, see Kentucky Recording Laws for the full framework, or through an acknowledged monitoring policy signed at hiring.

Does Kentucky Require Notice Before Electronic Monitoring?

No, and this is worth explaining because it is one of the most commonly miscited points about Kentucky workplace law. In 2020, a Kentucky legislator introduced House Bill 585, "AN ACT relating to employee privacy," which would have created a new section of KRS Chapter 336 defining "electronic monitoring" and requiring covered employers to give notice before monitoring employee activity or communications on the employer's premises, closely tracking Connecticut's notice statute. The bill was introduced March 2, 2020, referred to the House Small Business and Information Technology Committee two days later, and never received a committee vote. It died at the end of the session and was never reintroduced in a form that passed. KRS Chapter 336 today contains no electronic-monitoring section.

Several compliance blogs and vendor sites describe HB 585's language as if it were enacted law. It is not. Kentucky has no statutory duty requiring an employer to notify employees before electronic monitoring. Connecticut, Delaware, New York, and Maine have each enacted a notice statute along the lines HB 585 proposed; Kentucky has not. Kentucky employers are governed by the federal "ordinary course of business" exception and Kentucky's general eavesdropping statute, KRS 526.020, rather than a dedicated notice law.

Social Media Password Protections for Kentucky Employees

Kentucky employees have no state-law protection against an employer demanding a personal social media username or password. Twenty-seven states, including neighboring Illinois and Tennessee, bar employers from requiring an employee or applicant to disclose social media login credentials, log in in front of a supervisor, or add a manager as a "friend" or connection, according to the National Conference of State Legislatures' 50-state tracker. Kentucky is not among them, and no comparable bill has become law. An employer that conditions employment on handing over a personal password is not violating a dedicated Kentucky social-media statute, though other legal theories, such as discrimination law, may apply depending on the facts.

GPS and Vehicle Tracking Rules for Kentucky Employers

KRS 508.152 makes it a Class A misdemeanor to intentionally install or place a tracking device on a motor vehicle, or to track a motor vehicle's location with a tracking device, without the knowledge and consent of the vehicle's owner or, for a leased vehicle, its lessee or authorized operator. The statute defines "tracking device" broadly, as an electronic or mechanical device designed to allow someone to remotely determine or track the position or movement of another person or an object.

The statute lists several exceptions, including vehicle navigation and diagnostic systems, emergency roadside assistance subscriptions, stolen-vehicle recovery services, a lessor's device installed with the lessee's written acknowledgment, and a parent's tracking of a vehicle operated by their minor child. An employer tracking a vehicle it owns generally falls outside the core prohibition, because the statute is built around the owner's or authorized operator's knowledge and consent, and the employer is the owner. Kentucky has not enacted a dedicated employer-notice statute for company-vehicle tracking comparable to New Jersey's. See Kentucky GPS Tracking Laws for the full tracking-device statute.

Video and Audio Surveillance in Kentucky Workplaces

Kentucky law draws a sharp line between surveillance of open work areas and surveillance of places where an employee has a reasonable expectation of privacy. KRS 531.090 makes it voyeurism, a Class A misdemeanor, to intentionally use a camera or similar image recording device, without the person's consent, to observe, view, photograph, film, or videotape another person's "sexual conduct, genitals, an undergarment worn without being publicly visible, or nipple of the female breast," where that person is somewhere a reasonable person would believe such imagery would not be recorded without their knowledge. Read the categories carefully: the statute is not a general ban on recording a person's body or face. A hidden camera in a bathroom, changing room, or locker room is the paradigm case because those are the places where the listed imagery is exposed, but a camera in such a room that captured none of the listed categories would fall outside KRS 531.090 on the statute's text. KRS 531.100 escalates the conduct to video voyeurism, a Class D felony, when an image of sexual conduct, genitals, or the nipple of the female breast is used or divulged for consideration, or distributed by any visual medium, email, or online service.

Surveillance of ordinary, non-private work areas is treated differently, as the Kentucky Supreme Court's decision in Stringer v. Wal-Mart Stores, Inc., 151 S.W.3d 781 (Ky. 2004), shows. A Wal-Mart supervisor secretly installed a video camera with audio recording in the store's "claims area," where damaged merchandise pulled from shelves was processed, after suspecting employee theft. The camera ran for roughly 40 hours before two employees were fired for eating candy from damaged bags, and they sued for invasion of privacy, outrage (intentional infliction of emotional distress), and defamation. Read the holding narrowly, because the case is routinely described as more than it is. The employees themselves recharacterized their invasion-of-privacy count as a claim under KRS 446.070 to recover damages for violations of the KRS Chapter 526 eavesdropping offenses. The Court of Appeals had made two holdings: that Wal-Mart's conduct was "not offensive to the eavesdropping statute," and that the employees failed to prove damages. The Kentucky Supreme Court took up only the second: "Although Appellants dispute both of the Court of Appeals's holdings, we address only the second one because it is clear from the record that Appellants failed to demonstrate any cognizable damages from any violation of a KRS Chapter 526 offense that may have occurred in this case." That phrasing leaves the legality question open. The Court separately held the conduct did not clear Kentucky's high threshold for outrage, noting the employees were at-will, and found the evidence sufficient to send the defamation claim to a jury.

So Stringer is not authority that Kentucky law permits secret workplace audio recording. Eavesdropping under KRS 526.020 is a Class D felony, and the camcorder in Stringer was pulled from store stock specifically because it had audio capability, unlike the store's fixed cameras. What the case actually shows is that an employee who cannot tie a concrete injury to the recording itself loses the statutory claim, while claims tied to what the employer did with what it recorded, like defamation, can still succeed.

Kentucky's New Data Privacy Law Does Not Cover Employee Monitoring

The Kentucky Consumer Data Protection Act takes effect January 1, 2026, and gives Kentucky consumers rights over how businesses collect and use their personal data. The Act, however, exempts data about job applicants, employees, agents, and independent contractors that a business collects and uses for employment purposes, benefits administration, or emergency contacts. That exemption means the Act does not give Kentucky employees a right to access, correct, or object to data their employer collects through electronic monitoring, unlike California, where a similar employee exemption in the CCPA expired and consumer privacy rights now extend to employee data.

What Kentucky Employees Can Do About Workplace Monitoring

A Kentucky employee with monitoring concerns has no single dedicated regulator to call, but has practical options. Start with the employee handbook: a written monitoring policy defines what the employer told employees to expect. A hidden camera in a bathroom or locker room can be reported to local police under KRS 531.090 and KRS 531.100 if it captured the imagery those statutes list, and may also support a civil invasion-of-privacy claim, though Stringer is a reminder that a claim built on a statutory violation still requires proof of damages caused by the recording itself. A call or email intercepted after it was clearly personal, inconsistent with Watkins v. L.M. Berry & Co., may support a claim under the federal Electronic Communications Privacy Act. None of this substitutes for advice from a Kentucky-licensed attorney.

See the Employee Monitoring Laws by State hub for how Kentucky's approach compares to states like Connecticut, New York, and New Jersey that have adopted dedicated notice and tracking statutes.

Disclaimer

This article provides general legal information about Kentucky law governing employer monitoring of employees. It is not legal advice and does not create an attorney-client relationship. It reflects Kentucky statutes and case law as verified on July 9, 2026. Readers facing a specific workplace monitoring issue should consult an attorney licensed in Kentucky.

Related articles

• Employee Monitoring Laws by State
• Kentucky Recording Laws
• Kentucky GPS Tracking Laws
• US Recording Laws by State

---

Last updated: July 9, 2026. Statutes and cases cited reflect their status as of that date.

More Kentucky Laws

• Kentucky AI Meeting Recording Laws
• Kentucky At-Will Employment Laws
• Kentucky Data Privacy Laws
• Kentucky GPS Tracking Laws
• Kentucky Recording Laws
• Kentucky Whistleblower Laws