Michigan Employee Monitoring Laws (2026): Social Media, GPS & Cameras

Michigan employees have a real statutory shield most states lack: the Internet Privacy Protection Act, MCL 37.271-37.278, bars employers from demanding access to a personal social media account. A second employment statute, the Bullard-Plawecki Employee Right to Know Act, separately bars an employer from building a file on an employee's off-duty associations, political activity, or communications. Michigan still has no dedicated electronic-monitoring notice law, though, so email, internet, and video surveillance are governed by narrower criminal statutes and the state's one-party consent recording rule.

This guide is part of our Employee Monitoring Laws by State series. It covers social media privacy, electronic-monitoring notice, workplace video and audio surveillance, GPS tracking, and biometric time clocks under Michigan law.

Information last verified on 2026-08-31. This article has not yet been reviewed by a licensed lawyer.

Jurisdiction scope: This article addresses Michigan state law governing an employer's monitoring of employees: the Internet Privacy Protection Act, the Bullard-Plawecki Employee Right to Know Act, electronic-monitoring notice (or the lack of it), hidden-camera restrictions, GPS tracking, and biometric monitoring. It does not re-derive Michigan's one-party consent recording framework in depth; for that, see the Michigan recording laws guide and its workplace recording page. For general GPS law, see the Michigan GPS tracking laws guide.

Michigan's Internet Privacy Protection Act protects employees' social media accounts

Michigan is one of at least 27 states with a social media password protection law, and its version, the Internet Privacy Protection Act (2012 PA 478, MCL 37.271-37.278), is one of the more detailed in the country. Under MCL 37.273, an employer may not request or require an employee or applicant to grant access to, allow observation of, or disclose information that allows access to or observation of a personal internet account, and an employer may not discharge, discipline, fail to hire, or otherwise penalize someone for refusing. The law covers both public and private employers and reaches personal social media, email, and similar accounts, not just employer-issued ones.

The act is not absolute. MCL 37.275 lists five categories of employer conduct that remain lawful: requiring access to employer-paid devices or accounts used for business; disciplining an employee for transferring proprietary or confidential company data to a personal account without authorization; investigating a personal account when the employer has specific information suggesting a compliance violation or unauthorized data transfer; restricting access to certain websites on employer-owned devices or networks; and monitoring, reviewing, or accessing electronic data on employer-paid devices or the employer's own network. An employer can also comply with federal screening requirements and view information an applicant has made publicly available without needing credentials.

What happens if a Michigan employer violates the Internet Privacy Protection Act?

MCL 37.278 makes a violation of the employer or educational-institution provisions a misdemeanor punishable by a fine of up to $1,000. An employee or applicant who is the subject of a violation can also bring a civil action to enjoin the conduct and recover up to $1,000 in damages plus reasonable attorney fees and court costs, but only after giving the employer written notice at least 60 days before filing suit, with reasonable documentation of the violation. An employer or educational institution can raise an affirmative defense by showing it complied with a federal or state legal requirement.

What an employer may keep a record of: the Bullard-Plawecki Act

Michigan's limits on employer monitoring do not stop at the Internet Privacy Protection Act. The Bullard-Plawecki Employee Right to Know Act (1978 PA 397, MCL 423.501 to 423.512) regulates the output of monitoring rather than the watching itself. Under MCL 423.508(1), an employer may not gather or keep a record of an employee's associations, political activities, publications, or communications of nonemployment activities, unless the employee submitted that information in writing or authorized it in writing. The single carve-out covers activities that occur on the employer's premises or during the employee's working hours and that interfere with the performance of that employee's or another employee's duties. Any record kept under that section becomes part of the employee's personnel file. MCL 423.501 defines an employer as an entity with 4 or more employees, so the smallest workplaces fall outside the act.

That restriction does its real work in the gap the Internet Privacy Protection Act leaves open. An employer may lawfully view whatever an employee has made public on social media, because MCL 37.275(3) permits viewing publicly available information without credentials. Bullard-Plawecki is the statute that stops the employer from compiling and retaining a file on the off-duty political activity, associations, or communications it finds there.

MCL 423.509 governs the related investigation scenario. An employer with reasonable cause to believe an employee is engaged in criminal activity that might cause loss or damage to its property or disrupt its business may keep a separate investigative file, but it must notify the employee when the investigation is complete or after two years, whichever comes first. If no disciplinary action is taken, the investigative file and all copies of the material in it must be destroyed.

Enforcement runs through MCL 423.511, which lets an employee sue in circuit court to compel compliance and recover actual damages plus costs. For a violation that is willful and knowing, the employee may recover $200 plus costs, reasonable attorney fees, and actual damages.

Does Michigan require notice before other electronic monitoring?

No. Neither statute above is a monitoring-notice law, and Michigan has nothing comparable to Connecticut's, Delaware's, New York's, or Maine's laws requiring an employer to give written notice before monitoring work email, internet browsing, or general computer activity. An employer that reviews activity on its own network or employer-issued devices, which the Internet Privacy Protection Act's own exceptions already permit, does not trigger a separate notice duty under Michigan law. As with the other states in this cluster that lack a dedicated notice statute, the practical floor comes from federal law: the Electronic Communications Privacy Act's business-extension exemption, 18 U.S.C. section 2510(5)(a), excludes employer-furnished communications equipment used in the ordinary course of business from the Wiretap Act's definition of an interception device, a category that reaches an employer that owns the communication system, though the leading case, Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983), found that monitoring should generally stop once a call is identified as personal.

How does Michigan's one-party consent recording law interact with employer monitoring?

Michigan's eavesdropping statute, MCL 750.539c, and the participant exception recognized in Sullivan v. Gray, 117 Mich. App. 476 (1982), mean an employee who is a party to a workplace conversation may record it without telling anyone else involved, even a supervisor. That rule governs whether recording a conversation is a crime; it does not control whether an employer can discipline an employee for violating a company no-recording policy, which remains a separate employment question. Employer-side monitoring, by contrast, generally does not implicate the eavesdropping statute at all when the employer is itself a party to the communication (a phone call routed through the company system) or is observing employer-owned equipment, which is why the Internet Privacy Protection Act and the private-place surveillance statute below, not the eavesdropping law, do most of the real work regulating employer conduct. For the full recording-consent picture, see the Michigan recording laws guide.

Are hidden cameras legal in a Michigan workplace?

Not in private areas. MCL 750.539d makes it a felony to install or use a device to observe, photograph, record, transmit, or eavesdrop on someone in a private place without consent, or to distribute the resulting images. A first offense carries up to two years in prison and a $2,000 fine; a repeat offense or a distribution violation carries up to five years and a $5,000 fine. The statute's main carve-out covers security cameras in a residence used by or at the direction of the owner or occupant, which is not the relevant exception for a workplace. A bathroom, locker room, or changing area at work generally qualifies as a private place under this statute, so an employer that installs a hidden camera there is exposed to felony liability regardless of any company monitoring policy. Cameras that are disclosed and cover general work areas, rather than spaces with a reasonable expectation of privacy, are evaluated differently and are addressed on the Michigan workplace recording page.

GPS and vehicle tracking of Michigan employees

MCL 750.539l makes it a misdemeanor, punishable by up to a year in jail and a $1,000 fine, to install or place a tracking device on a motor vehicle without the knowledge and consent of the vehicle's owner or lessee, and the statute makes the violator liable for the owner's resulting damages. Because the law turns on the owner's or lessee's consent, an employer that owns or leases the vehicle it wants to track is generally exempt from the prohibition when tracking its own fleet, the same owner-consent structure found in most states' general tracking-device laws. The statute does carry a detailed list of other exceptions, including for parents tracking a minor child's vehicle and licensed private investigators, and it covers motor vehicles only; tracking a person's bag, coat, or phone instead falls under Michigan's stalking statutes. For the complete picture, including the private investigator exception's limits, see the Michigan GPS tracking laws guide.

Biometric time clocks and facial recognition

Michigan has not enacted a biometric privacy statute with the private right of action found in Illinois's Biometric Information Privacy Act (BIPA), 740 ILCS 14. A comprehensive Michigan consumer privacy bill, the Personal Data Privacy Act (Senate Bill 359 of 2025), would create Michigan's first general consumer privacy framework and remained in the Senate Committee of the Whole as of mid-2026, not yet enacted. Illinois employers and timeclock vendors have faced very large BIPA payouts in recent years, though the figure most often quoted no longer exists. A jury awarded $228 million against BNSF Railway in Rogers v. BNSF Railway Co., but the district court vacated that damages award on June 30, 2023 and ordered a new trial limited to damages, leaving the liability finding standing. The parties then settled for a $75 million fund covering roughly 46,500 class members, which the court estimated at about $1,000 per person, and final judgment was entered on June 18, 2024. Other settlements involving fingerprint timeclocks and driver-facing cameras have followed, but that exposure does not currently extend to Michigan employers using similar biometric technology. For more on how Michigan treats sensitive personal data generally, see the Michigan data privacy laws guide.

What Michigan employees should do if they are concerned about monitoring

An employee who is asked for a personal social media password should know that request itself likely violates MCL 37.273, and documenting the request in writing strengthens a later complaint or civil claim. Because Michigan employees may lawfully record their own workplace conversations under the Sullivan v. Gray participant exception, that tool remains available for documenting a problematic monitoring request, though an employee should weigh the separate risk that a company no-recording policy could still support discipline even where the recording itself is legal. Anyone who discovers a hidden camera in a bathroom or similar private space should preserve evidence and consider contacting law enforcement, since MCL 750.539d makes that conduct a felony independent of any workplace complaint.

Disclaimer

This article provides general legal information about Michigan law governing employer monitoring of employees, as verified on 2026-08-31. It does not constitute legal advice and does not create an attorney-client relationship. Readers should consult a lawyer licensed in Michigan for advice about a specific workplace situation.

Related articles

• Employee Monitoring Laws by State: the complete hub
• Michigan Recording Laws
• Michigan Workplace Recording Laws
• Michigan GPS Tracking Laws
• Michigan Data Privacy Laws

Last updated: 2026-08-31. Statutes cited reflect their in-force version as of 2026-08-31.

More Michigan Laws

• Michigan AI Meeting Recording Laws
• Michigan At-Will Employment Laws
• Michigan Data Privacy Laws
• Michigan GPS Tracking Laws
• Michigan Recording Laws
• Michigan Whistleblower Laws