Oregon Employee Monitoring Laws (2026): Workplace Surveillance Rights

Oregon employers can generally monitor company phone lines and computer systems under the federal wiretap law's business-use exception, but Oregon's own recording statute adds a wrinkle most states in this cluster do not have: recording an in-person workplace conversation, even by the employer, generally requires telling everyone in the room first. State law also gives Oregon employees a dedicated social-media-password protection, one of the country's more detailed vehicle-tracking statutes, and, since January 1, 2025, a right at large warehouse distribution centers to see the productivity quota they are held to and the work speed data behind it.

This article provides general legal information about Oregon employee monitoring law as of July 9, 2026. It is not legal advice and does not create an attorney-client relationship. Consult an Oregon-licensed attorney about your specific situation.

Scope: This article covers Oregon law on an employer's authority to monitor employees, access personal social media, and conduct workplace video, GPS, and biometric monitoring. It does not re-derive Oregon's hybrid consent recording rules in full (see our Oregon recording laws guide) or GPS law generally outside the employment context (see our Oregon GPS tracking laws guide).

The Federal Baseline: the "Ordinary Course of Business" Exception

Oregon's starting point for any workplace monitoring question is federal, not state, law. Title I of the Electronic Communications Privacy Act makes it unlawful to intentionally intercept wire, oral, or electronic communications without consent under 18 U.S.C. section 2511 (part of Title I's broader 18 U.S.C. sections 2510 to 2523), but the statute carves out a broad exception for the owner of a communications system. Under the business-extension exemption in 18 U.S.C. section 2510(5)(a), which excludes employer-provided communications equipment used in the ordinary course of business from the Wiretap Act's definition of an interception device, an employer that owns the phone, email, and computer systems its staff use may intercept communications on that system in the ordinary course of business.

The leading case applying this exception is Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983): once a monitored call is identified as personal rather than business-related, the employer's ordinary-course exception generally ends, and continued listening can create liability. Oregon has not enacted a general state monitoring statute that displaces this federal baseline; instead, Oregon's own recording law layers an extra requirement on top of it for in-person conversations, and a 2024 warehouse law adds disclosure duties in one sector. Both are covered below.

Does Oregon Require Notice Before Electronic Monitoring?

Not as a general rule, at least not in the sense Connecticut, Delaware, New York, and (starting in 2026) Maine require it. Those four states have enacted dedicated statutes requiring written or posted notice before monitoring phone, email, or internet use on the job across the workforce generally. Oregon has not, though it does regulate quota disclosure and work speed data at large warehouse distribution centers, covered in the next section.

This is worth clarifying because an inaccurate claim circulates in compliance guides: that Oregon has a pending "SB 621 workplace technology accountability act" requiring impact assessments before deploying AI-based monitoring tools. That does not match any real Oregon bill. The actual Oregon Senate Bill 621 (2025) is titled "Relating to approval of state agency fees" and has nothing to do with workplace monitoring. A similarly named Workplace Technology Accountability Act was introduced in California as Assembly Bill 1651 in the 2021-2022 session, but it died in committee in November 2022 and was never enacted; the compliance-guide claim appears to conflate the two states. Oregon has no pending legislation matching the CT/DE/NY/ME model, and outside the warehouse rules Oregon employers rely on the federal ordinary-course exception above.

Warehouse Quotas and Work Speed Data: Oregon's Sector-Specific Monitoring Law

Oregon does have one monitoring-disclosure regime, and it is easy to miss because it sits in the wage-and-hour chapter rather than the employment-discrimination chapter. Oregon Laws 2024 chapter 36 (House Bill 4127), codified at ORS 653.555 to 653.559 and effective January 1, 2025, governs productivity quotas and the work speed data employers collect to enforce them.

It is narrow by design. Under the definitions in ORS 653.555, it reaches only an employer with 100 or more employees at a single warehouse distribution center, or 1,000 or more employees across warehouse distribution centers in Oregon, and drivers and couriers to or from a center are excluded from the definition of employee. Several categories of facility, including farm-product and refrigerated storage and courier and express delivery services, are excluded from the definition of warehouse distribution center outright.

Within that scope, ORS 653.556 requires the employer to give each covered employee written documentation summarizing any quota: the quantified number of tasks to be performed or materials to be produced or handled within a defined time period, and a description of the adverse employment actions the employee may face for failing to meet it. The documentation is due at the time of hire, within two business days after any change to the quota, and again when the employer takes an adverse action for failing to meet it, in the language the employer regularly uses with that employee. An employer may not take an adverse action against an employee for missing a quota the employee never received in writing.

ORS 653.557 is the monitoring-transparency half. A current or former employee who believes they were disciplined for failing to meet a quota may request their work speed data, which ORS 653.555 defines to include the quantity of tasks performed, the quantity of items or materials handled or produced, the rate or speed at which assigned tasks were performed, performance metrics measured against the quota, and time categorized as performing or not performing tasks. The employer must produce the records free of charge and no later than 21 calendar days after the request, covering the 90 days before the request, or the 90 days before separation for a former employee, who has three years from separation to ask. Failure to comply subjects the employer to a civil penalty under ORS 653.256, and complaints go to the Bureau of Labor and Industries. Under ORS 653.558, the documentation and records duties do not apply to an employer under a collective bargaining agreement that both subjects employees to a negotiated performance evaluation metric and provides substantially equivalent record-request rights.

Oregon's Social Media Privacy Law for Employees

Oregon's dedicated employee social media privacy statute is O.R.S. section 659A.330, part of the same chapter that governs unlawful employment discrimination. It prohibits an employer from requiring or requesting that an employee or applicant establish a personal social media account, disclose a password or other means of accessing one, or log in to a personal account in the employer's presence. Employers also cannot compel an employee to add a supervisor as a contact or use a personal account to promote the business.

The exceptions are narrower than they might first appear. An employer may still require credentials for an account it provided or that the employee uses on its behalf, may investigate suspected misconduct without demanding a password, and may require an employee to share content already reported to the employer when necessary for a factual determination. An employer that inadvertently receives login information through routine network monitoring is not liable for having it, so long as it does not use it to access the account.

Because section 659A.330 sits in ORS Chapter 659A, "Unlawful Discrimination in Employment," a violation is enforced the same way other Chapter 659A violations are: a complaint with the Oregon Bureau of Labor and Industries (BOLI) Civil Rights Division, which investigates and can refer a substantiated case for prosecution, or a private civil action. Remedies can include back pay, other equitable relief, and civil penalties. See BOLI's social media guidance for the complaint process.

Video and Audio Surveillance in Oregon Workplaces

Oregon's hybrid recording rule matters more in the workplace than almost anywhere else in this cluster. Under ORS 165.540(1)(a), telephone and electronic communications are one-party consent, so an employer that is a party to a call is on solid ground without notice. In-person conversations are different: under ORS 165.540(1)(c), every participant must be specifically informed before recording begins, and that applies to an employer recording a meeting exactly as it applies to anyone else; owning the building does not exempt it. Our Oregon workplace recording guide covers the consent question in more depth.

Oregon has no employment-specific video-surveillance statute, but its voyeurism laws limit where any camera can point. ORS 163.700 makes it a Class A misdemeanor to knowingly record a person's intimate areas without consent in a place with a reasonable expectation of privacy, and ORS 163.701 elevates the offense to a Class C felony when the recording captures nudity without consent. An employer installing a camera in those spaces, even for a stated security reason, is exposed to both criminal and civil liability.

Employer no-recording policies are not automatically enforceable either. Under NLRB Stericycle, Inc., 372 NLRB No. 113 (2023), a blanket recording ban is presumptively unlawful if it could chill wage or working-condition discussions, and GC Memorandum 25-07 (2025) treats undisclosed recording of bargaining sessions as a per se bad-faith bargaining violation.

GPS and Vehicle Tracking of Oregon Employees

Unlike most states in this cluster, Oregon has a dedicated statute aimed squarely at vehicle trackers. Under ORS 163.715, it is a Class A misdemeanor to knowingly affix a GPS device to a motor vehicle without the vehicle owner's consent, up to 364 days in jail and a $6,250 fine, escalating to a Class C felony, up to 5 years and a $125,000 fine, if the person has a prior stalking conviction or is subject to a no-contact order.

The statute maps cleanly onto the employment relationship. If an employee drives a company-owned vehicle, the employer is the owner and can consent to its own tracker; if the vehicle qualifies as a "motor carrier" vehicle under ORS 825.005, tracking is exempt outright, which is why commercial fleets track vehicles as a matter of course. If an employee drives a personal vehicle for work, attaching a tracker without the employee's consent violates ORS 163.715 the same as for any private citizen. Oregon has no statute requiring written notice before tracking a company vehicle; it runs on ownership and consent instead. For the fuller framework, see our Oregon GPS tracking laws guide.

Biometric Monitoring: Time Clocks in Oregon

Employers increasingly use fingerprint or facial-recognition time clocks, and trucking fleets use driver-facing cameras that can capture biometric identifiers. Illinois' Biometric Information Privacy Act, 740 ILCS 14, is the strongest law of this kind nationally, requiring written consent and creating a private right of action; it does not apply outside Illinois. Oregon has no Illinois-style statute of its own, but the Oregon Consumer Privacy Act (OCPA), ORS 646A.570 et seq., effective July 1, 2024, classifies biometric data such as fingerprints and retinal or iris patterns as sensitive data requiring a consumer's opt-in consent.

That consent duty does not reach the workplace, however. The OCPA exempts data an employer maintains for employment-records purposes, so an employee is not a "consumer" for data processed in that role, and its consent and access rights do not apply if an Oregon employer collects fingerprints for a timekeeping system.

Oregon's separate breach-notification law can reach further, but it is narrower than it is often described. Under the Oregon Consumer Information Protection Act, ORS 646A.600 through 646A.628, the definition of "personal information" carries no employment carve-out, and ORS 646A.602(12)(a)(A)(v) does list biometric data among its data elements. It counts only in a qualified form, though: data from automatic measurements of a person's physical characteristics, such as an image of a fingerprint, retina or iris, that are used to authenticate identity in the course of a financial transaction or other transaction. It generally triggers notice only when exposed in combination with the person's first name or initial and last name. Biometric data exposed on its own qualifies only under subparagraph (C), which requires both that encryption or redaction has not rendered it unusable and that it would enable identity theft. Where those conditions are met, notice is due within 45 days. So a breach of employer-held biometric records can require notice, but it does not do so automatically.

Portland's face recognition ordinance, City Code Chapter 34.10, is sometimes described as a workplace protection, but its scope clause is narrower than that. It bars a private entity from using face recognition technologies in places of public accommodation within the city boundaries, and the definition of that term excludes places distinctly private in nature. Employee-only work areas are generally not places of public accommodation, so the ordinance does not squarely reach an employer's face-recognition monitoring of its own workforce. It also exempts using face recognition for user verification to access your own personal or employer-issued device. See our Oregon biometric privacy guide for the consumer-facing rules.

What Oregon Employees Can Do About Monitoring Concerns

An employee who believes an employer crossed a legal line has several options. A social media password demand, or retaliation for refusing one, can support a BOLI complaint or civil action under ORS 659A.330. A meeting secretly recorded without the notice ORS 165.540(1)(c) requires can support a criminal complaint and a civil suit under ORS 133.739. A camera in a restroom or locker room can support a law enforcement report and an invasion-of-privacy claim. A warehouse worker disciplined for missing an undocumented quota, or refused their work speed data, can file a BOLI complaint under ORS 653.556 and 653.557. Monitoring tied to a protected characteristic or concerted activity may fall under BOLI or the NLRB instead.

Because Oregon's monitoring rules are split across several distinct sources, an employee with a specific fact pattern should keep records (dates, what was monitored, any written policy) and consult an Oregon-licensed employment attorney rather than assume a single statute covers the situation. For the broader picture, see our Employee Monitoring Laws by State hub and our general US recording laws guide.

Disclaimer

This article provides general legal information about Oregon employee monitoring law as of July 9, 2026. It is not a substitute for individualized legal advice. Employment monitoring disputes often involve overlapping statutes, employer policy, and federal law, and outcomes depend on specific facts. Readers should consult an attorney licensed in Oregon for advice about a particular situation.

Related articles

• Employee Monitoring Laws by State
• Oregon Recording Laws
• Oregon Workplace Recording Laws
• Oregon GPS Tracking Laws
• Oregon Biometric Privacy Laws
• US Recording Laws by State

---

Last updated: July 9, 2026. Statutes cited reflect their in-force version as of that date.

More Oregon Laws

• Oregon AI Meeting Recording Laws
• Oregon At-Will Employment Laws
• Oregon Data Privacy Laws
• Oregon GPS Tracking Laws
• Oregon Recording Laws
• Oregon Whistleblower Laws