Virginia Employee Monitoring Laws: Workplace Surveillance and Social Media (2026)

Virginia employers can generally read work email and review activity on company systems under the business-use exception that appears in both the federal wiretap law and Virginia's own wiretap act, since Virginia has no state monitoring-notice statute layered on top. State law also does its work in narrower places: social media accounts, vehicle tracking, and cameras in private spaces.

This article provides general legal information about Virginia employee monitoring law as of July 9, 2026. It is not legal advice and does not create an attorney-client relationship. Consult a Virginia-licensed attorney about your specific situation.

Scope: This article covers Virginia law on an employer's authority to monitor employees, access personal social media, and conduct workplace video, GPS, and biometric monitoring. It does not re-derive Virginia's general recording-consent rules (see our Virginia recording laws guide) or GPS law outside employment (see our Virginia GPS tracking laws guide).

Federal and Virginia Wiretap Law: the "Ordinary Course of Business" Exception

Two wiretap statutes govern an employer's interception of employee communications in Virginia: the federal Electronic Communications Privacy Act and Virginia's own wiretap act at Va. Code sections 19.2-61 through 19.2-62. They are built the same way, and both matter, because the state penalty is the harsher of the two. Title I of the Electronic Communications Privacy Act makes it unlawful to intentionally intercept wire, oral, or electronic communications without consent (18 U.S.C. § 2511, part of the Title I scheme at sections 2510-2523), but it carves out a broad exception for the owner of a communications system. Under the 'business extension' exemption in 18 U.S.C. section 2510(5)(a), equipment an employer furnishes and uses in the ordinary course of its business, a category extended to the phone, email, and computer systems its staff use, falls outside the Act's definition of a regulated interception device, letting employers intercept communications on that system in the ordinary course of business.

Virginia's wiretap act is not a bystander here. Va. Code section 19.2-62(A)(1) makes it a Class 6 felony to intentionally intercept, endeavor to intercept, or procure another person to intercept "any wire, electronic or oral communication," so an employer that intercepts employee communications is squarely inside the state chapter rather than outside it, and Va. Code section 19.2-69 lets the person intercepted sue for actual damages (with a statutory floor of $400 per day of violation or $4,000, whichever is higher), punitive damages, and attorney fees. Routine monitoring of company systems is still lawful in Virginia because the state act carries its own version of the same carve-out: Va. Code section 19.2-61 defines "electronic, mechanical or other device" to exclude a telephone or telegraph instrument, equipment, or facility "furnished to the subscriber or user by a provider of wire or electronic communication service in the ordinary course of its business and being used by the subscriber or user in the ordinary course of its business," language materially identical to the federal business-extension exemption. Va. Code section 19.2-62(B)(2) supplies a second, independent route: it is not an offense to intercept a communication where the person intercepting "is a party to the communication or one of the parties to the communication has given prior consent to such interception." The practical point for a Virginia employer is that monitoring falling outside those exclusions is not only a federal problem, it is a state felony with its own civil damages exposure.

The leading case applying the federal exception is Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983): once a monitored call is determined to be personal rather than business-related, the employer's ordinary-course exception generally ends, and continued listening can create liability. Virginia has not enacted a state electronic-monitoring notice statute for phone, email, or internet monitoring; beyond the wiretap act described above, state law fills the gap only in the areas covered below.

Virginia is a one-party consent state for recording conversations under Va. Code section 19.2-62(B)(2): only one participant needs to agree for a recording to be lawful. That consent route and the ordinary-course exclusion in section 19.2-61 are two independent ways out of the same state prohibition; see our Virginia recording laws guide for the full rules, exceptions, and penalties.

Does Virginia Require Notice Before Electronic Monitoring?

No. A small group of states, Connecticut, Delaware, New York, and (starting in 2026) Maine, require employers to give written or posted notice before monitoring phone, email, or internet use. Virginia has not enacted a comparable statute; Title 40.1, Chapter 3 (Protection of Employees) contains no general electronic-monitoring notice duty. A Virginia employer can generally monitor company email, internet, or phone lines relying on the ordinary-course exclusions in the federal and Virginia wiretap acts described above, without a state-mandated notice step.

Readers should be careful here: some online compliance guides cite a Virginia statute requiring electronic-monitoring notice and a ban on restroom or locker-room cameras. That description tracks Connecticut's notice law almost word for word, not anything in the Code of Virginia, and the section numbers cited do not correspond to any employee-monitoring statute on Virginia's official code site. Virginia's real protection against restroom and locker-room cameras comes from a different, criminal-law source, covered below.

That does not mean notice is legally irrelevant. Courts weighing an employee's reasonable expectation of privacy, relevant to common-law invasion-of-privacy claims, often look at whether the employer published a monitoring policy, even though no statute requires one.

Virginia's Social Media Privacy Law for Employees

Virginia's clearest state-specific employee monitoring statute is Va. Code section 40.1-28.7:5, enacted in 2015. It prohibits an employer from requiring a current or prospective employee to disclose the username and password to a personal social media account, or from requiring the employee to add a supervisor to the account's contact list. "Social media account" means a personal account for user-generated content, excluding an account the employer itself created or provided for work use.

The statute has real exceptions. An employer's existing right to request credentials is preserved when the account activity is reasonably believed relevant to a formal investigation of an alleged violation of law or the employer's own written policies, and credentials obtained that way may only be used for that investigation. The law also does not stop an employer from viewing publicly available information, and an employer that inadvertently receives login information through an employer-issued device is not liable so long as it does not use the credentials.

Virginia's law bars retaliation: an employer cannot discipline or discharge a current employee for exercising these rights, or refuse to hire an applicant for doing the same. Unlike Montana's parallel law, Virginia's statute does not spell out a specific private civil remedy or damages cap.

Video and Audio Surveillance in Virginia Workplaces

Virginia has no employment-specific video-surveillance statute, but general criminal law limits where a camera, employer-owned or not, can point. Va. Code section 18.2-386.1 makes it unlawful to knowingly create a videographic or still image of a nonconsenting person who is nude, in undergarments, or otherwise undressed in a restroom, dressing room, locker room, or similar location carrying a reasonable expectation of privacy. A violation is a Class 1 misdemeanor, or a Class 6 felony if the person is under 18. A related statute, Va. Code section 18.2-130, separately criminalizes using a peephole or aperture to secretly view someone in those same spaces; unlike section 18.2-386.1, it addresses viewing only, not recording. An employer that installs a camera in a restroom, locker room, or changing area, even for loss-prevention reasons, is exposed to criminal liability regardless of a posted policy. Virginia also gives victims a civil remedy: Va. Code section 8.01-40.4 lets anyone injured by conduct prohibited under section 18.2-386.1 sue for compensatory and punitive damages plus attorney fees, whether or not the conduct was criminally charged.

Cameras in common work areas, sales floors, warehouses, and entrances are generally permissible without a state-specific notice requirement. Audio recording of employees is governed separately by Virginia's wiretap act and its one-party consent rule discussed above; an employer that wants to record conversations, rather than merely reviewing stored business communications, needs that consent. Our Virginia workplace recording guide covers that question in depth, including an employee's own right to record at work.

GPS and Vehicle Tracking of Virginia Employees

Virginia has not enacted a dedicated employer vehicle-tracking notice statute comparable to New Jersey's N.J. Stat. section 34:6B-22. The relevant general-purpose law is Va. Code section 18.2-60.5, a Class 1 misdemeanor for installing an electronic tracking device through intentionally deceptive means and without consent, then using it to track a person's location. One of its express exemptions applies directly to employers: it does not apply to "the owner of fleet vehicles, when tracking such vehicles," a fleet vehicle being one owned by a single entity and operated by that entity's employees for business purposes.

That exemption means a Virginia employer that owns the vehicles its employees drive for work is generally exempt from this statute's consent requirement, without needing the looser "owner consent" reading employers in some other states must rely on. An employer that leases, rather than owns, its work vehicles from a third party does not clearly fall within the fleet-vehicle definition, which is built around vehicles owned by the entity operating them, so a lessee-employer should not assume the same exemption applies. It does not resolve every question, particularly personal driving in a company vehicle or a tracker that also logs an employee's personal phone. For the general legal framework governing tracking devices in Virginia, see our Virginia GPS tracking laws guide.

Biometric Monitoring: Time Clocks and the Virginia Consumer Data Protection Act

Employers increasingly use fingerprint or facial-recognition time clocks, and in trucking, driver-facing cameras that capture biometric identifiers. Illinois' Biometric Information Privacy Act, 740 ILCS 14, is the strongest law of this kind, requiring written consent before collection and creating a private right of action; it does not apply outside Illinois. Virginia has no Illinois-style biometric consent statute.

Virginia does have a comprehensive privacy statute, the Virginia Consumer Data Protection Act (VCDPA), Va. Code section 59.1-575 et seq., effective January 1, 2023. The VCDPA classifies biometric data used to uniquely identify a person as "sensitive data" and generally requires a consumer's consent before processing it, Va. Code section 59.1-578(A)(5). But the Act defines "consumer" as a Virginia resident "acting only in an individual or household context," expressly excluding anyone "acting in a commercial or employment context," Va. Code section 59.1-575, and section 59.1-576(C)(14) separately exempts data collected in the context of an employment role. An employee's fingerprint or face scan collected for a workplace time clock therefore falls outside both the VCDPA's protections and its scope. Virginia employees are protected mainly by employer policy and common-law privacy claims, not a dedicated biometric statute. See our Virginia biometric privacy guide for how the VCDPA's rules work outside employment.

What Virginia Employees Can Do About Monitoring Concerns

An employee who believes an employer crossed a legal line has a few concrete options. A demand for a social media password, or retaliation for refusing one, can support a claim under Va. Code section 40.1-28.7:5. A camera in a restroom or locker room can support both a law enforcement report under Va. Code section 18.2-386.1 and a civil suit for damages under Va. Code section 8.01-40.4. Interception of a call or message that falls outside the ordinary-course exclusion in Va. Code section 19.2-61 and had no party's prior consent can support both a criminal complaint under Va. Code section 19.2-62 and a civil suit under Va. Code section 19.2-69, on top of any federal ECPA claim. Monitoring tied to a protected characteristic or concerted activity under the National Labor Relations Act may instead fall to the Virginia Division of Human Rights or the NLRB.

Because Virginia's monitoring rules are split across criminal privacy law, the social media statute, the VCDPA, the state and federal wiretap acts, and federal labor law, an employee should keep records and consult a Virginia-licensed employment attorney rather than assume one statute covers the situation. For the broader 50-state picture, see our Employee Monitoring Laws by State hub and our general US recording laws guide.

Disclaimer

This article provides general legal information about Virginia employee monitoring law as of July 9, 2026. It is not a substitute for individualized legal advice. Employment monitoring disputes often involve overlapping statutes, employer policy, and federal law, and outcomes depend on specific facts. Readers should consult an attorney licensed in Virginia for advice about a particular situation.

Related articles

• Employee Monitoring Laws by State
• Virginia Recording Laws
• Virginia Workplace Recording Laws
• Virginia GPS Tracking Laws
• Virginia Biometric Privacy Laws
• US Recording Laws by State

---

Last updated: July 9, 2026. Statutes cited reflect their in-force version as of that date.

More Virginia Laws

• Virginia AI Meeting Recording Laws
• Virginia At-Will Employment Laws
• Virginia Data Privacy Laws
• Virginia GPS Tracking Laws
• Virginia Recording Laws
• Virginia Whistleblower Laws