Are there federal laws that also apply to employee monitoring in New York?

Yes. The federal Electronic Communications Privacy Act (ECPA) of 1986 permits employer monitoring when it serves a legitimate business purpose or when employees consent. The Stored Communications Act also applies to stored electronic data. New York employers must comply with both federal rules and New York Section 203-c, applying whichever standard is stricter.

Compliance Guide

New York Employee Monitoring Laws: Disclosure Requirements & Compliance

New York employee monitoring law, codified as NY Labor Law Section 203-c, requires every private-sector employer to notify employees in writing before monitoring their electronic communications. This guide covers the statute's disclosure mandate, posting obligations, penalty structure ($500 to $3,000 per offense), and practical compliance steps, including sample notice language that satisfies the legal requirements.

Start Free Trial Book a Demo

eMonitor includes built-in compliance tools for NY disclosure requirements.

What Is NY Labor Law Section 203-c?

New York Labor Law Section 203-c is a state statute that mandates prior written disclosure before an employer monitors employee telephone calls, email, or internet usage. Signed into law in 2021 and effective since May 7, 2022, Section 203-c made New York one of only three U.S. states (alongside Connecticut and Delaware) with an explicit electronic monitoring disclosure requirement.

The statute applies to all private-sector employers in New York, regardless of company size. A sole proprietor with one W-2 employee and a Fortune 500 corporation with 40,000 New York-based staff face the same obligation: tell your people what you monitor, put it in writing, and post it where they can see it.

Why does this law exist? Before Section 203-c, New York employers operated under a patchwork of federal rules. The Electronic Communications Privacy Act (ECPA) of 1986 allowed monitoring with consent or for a legitimate business purpose, but it set no specific disclosure format. A 2021 survey by the American Management Association found that 78% of major U.S. companies monitored employees electronically, yet only 53% informed workers about the specific methods used. New York's legislature addressed that gap directly.

Scope of the Law: What Counts as "Electronic Monitoring"

Section 203-c defines electronic monitoring broadly. It covers any monitoring or interception of telephone conversations, email, or internet access or usage by an electronic device or system. In practical terms for employers using workforce visibility tools, the following activities fall within scope:

Email monitoring: scanning, logging, or reviewing employee email content or metadata
Internet and website tracking: recording which sites employees visit, how long they spend on each, or blocking specific domains
Application usage logging: tracking which desktop or web applications an employee uses during work hours
Screenshot and screen capture: periodic or triggered captures of an employee's screen during work
Keystroke logging: recording keyboard activity intensity or patterns
Telephone call monitoring: recording, listening to, or logging business phone calls

The statute does not explicitly cover GPS location tracking, video-only recording (without audio), or physical badge-based access logs. However, New York employers using GPS or video monitoring face separate requirements under New York Civil Rights Law and federal wiretapping statutes, so disclosure remains a best practice for those activities as well.

NY Employee Monitoring Disclosure Requirements

New York Labor Law Section 203-c imposes two distinct disclosure obligations on employers. Both must be met to achieve compliance. Missing either one triggers the penalty framework.

Obligation 1: Written Notice to Each Employee

Every employer that monitors employee electronic communications must provide prior written notice to each employee upon hiring. The notice must advise employees that their telephone conversations, email, or internet usage may be subject to monitoring. The statute does not prescribe a specific format, but the notice must be in writing and delivered before monitoring begins.

For existing employees at the time of the law's enactment, the notice obligation applied immediately. Employers had to deliver written notice to their entire New York workforce by the effective date of May 7, 2022. Any employee hired after that date must receive notice during onboarding.

Obligation 2: Conspicuous Workplace Posting

In addition to individual written notice, employers must post the monitoring disclosure in a conspicuous place readily available for viewing by employees. The posting requirement mirrors the approach New York uses for wage and hour notices, safety posters, and other labor law disclosures. The notice must be visible in a common area such as a break room, lobby, or HR bulletin board.

For companies with fully remote New York employees, the posting obligation creates a practical challenge. The New York Department of Labor has not issued formal guidance on digital-only postings, but employment law practitioners widely recommend posting the notice on the company intranet, internal wiki, or HR portal where all remote employees can access it. Maintaining a record of when the digital posting went live adds a layer of protection.

What the Notice Must Contain

Section 203-c requires the notice to state that the employer "monitors or otherwise intercepts telephone conversations or transmissions, electronic mail or transmissions, or internet access or usage of or by an employee." The statute's language is deliberately broad. A compliant notice does not need to list every monitoring tool by name, but it must clearly inform employees that monitoring occurs across the relevant communication channels.

Employment attorneys in New York generally recommend including more detail than the statutory minimum. A notice that specifies the types of monitoring (email scanning, website tracking, screenshot capture, productivity analytics) and explains the business purpose builds stronger legal footing and reduces the likelihood of employee complaints or attorney general investigations.

Sample Monitoring Disclosure Notice for New York Employers

New York employers often struggle with the practical question: what exactly does the notice say? Below is sample language that addresses the Section 203-c requirements. This template is a starting point. We recommend having your legal counsel review any notice before distribution to confirm it reflects your specific monitoring practices.

EMPLOYEE ELECTRONIC MONITORING NOTICE

Pursuant to New York Labor Law Section 203-c

[Company Name] hereby notifies you that the company monitors or may monitor the following electronic communications and activities of employees during the course of employment:

Email transmissions sent to, from, or through company-provided email accounts
Internet access and website usage on company networks and company-provided devices
Application usage and desktop activity during scheduled work hours
Telephone conversations conducted through company telephone systems
Periodic screen captures of work activity on company-assigned computers

This monitoring is conducted for the following business purposes: ensuring quality of service, protecting company and client data, verifying compliance with company policies, managing employee productivity, and maintaining accurate records of work activity.

Monitoring is limited to work hours and work-related activities on company systems. [Company Name] respects employee privacy and conducts monitoring in accordance with all applicable federal and state laws.

By acknowledging receipt of this notice, you confirm that you have been informed of the company's electronic monitoring practices as required by New York Labor Law Section 203-c.

Employee Signature: _________________ Date: _________________

Printed Name: _________________

This sample covers the five most common monitoring categories. If your organization uses additional monitoring methods (audio recording on calls, for example), add those to the list. The acknowledgment signature is not required by Section 203-c, but collecting one creates evidence that the notice was delivered, which is valuable if the Attorney General investigates.

Workplace Posting Template

The workplace posting can use the same language as the individual notice, formatted as a printed poster. Many New York employers print the notice on company letterhead, laminate it, and display it alongside their existing labor law posters. For digital postings (intranets or HR portals), save the notice as a dated PDF and link to it from the main HR page.

Penalties for Non-Compliance with New York Monitoring Laws

New York Section 203-c establishes a tiered civil penalty structure enforced by the New York Attorney General. The penalties escalate with each subsequent violation:

Offense	Civil Penalty	Notes
First offense	$500	Per violation; each employee without notice may constitute a separate violation
Second offense	$1,000	Assessed if a prior violation was found and the employer did not cure
Third and subsequent offenses	$3,000	Maximum per-offense penalty; repeated non-compliance triggers heightened scrutiny

At first glance, a $500 fine appears manageable. But consider scale. An employer with 200 New York employees who never distributed the Section 203-c notice faces potential exposure of $100,000 (200 employees x $500) for a first offense. The New York Attorney General's office has authority to investigate complaints and initiate enforcement actions. While published enforcement data is limited in the statute's early years, the risk increases as employee awareness grows.

Beyond statutory penalties, non-compliance with Section 203-c weakens an employer's legal position in related disputes. If an employee sues for invasion of privacy or wrongful termination based on monitored data, the absence of a Section 203-c notice undermines the employer's defense that the monitoring was transparent and conducted in good faith.

How the Attorney General Enforces Section 203-c

The New York Attorney General has exclusive authority to enforce Section 203-c. Employees cannot file private lawsuits under this specific statute. However, the AG's office accepts complaints from employees and conducts investigations. An employee who discovers undisclosed monitoring can file a complaint with the AG, triggering a review of the employer's compliance practices. If the AG finds a pattern of non-disclosure, penalties are assessed cumulatively.

Step-by-Step Compliance Guide for NY Employers

New York employee monitoring compliance is not complex, but it requires deliberate execution. The following steps cover the full compliance lifecycle from initial audit through ongoing maintenance.

Step 1: Audit Your Current Monitoring Practices

Before drafting any notice, catalog every form of electronic monitoring your organization conducts. Include email monitoring, website tracking, application usage logging, screenshot capture, keystroke activity measurement, phone call recording, and any other digital activity tracking. Many employers discover monitoring they forgot about, such as firewall logs that record web traffic or email archiving tools that retain all messages. A thorough audit prevents the embarrassing scenario of disclosing some monitoring but not all of it.

Step 2: Draft Your Section 203-c Notice

Using the sample notice template above as a starting point, customize the disclosure to match your audit findings. List every monitoring category. Describe the business purpose. Keep the language clear and direct. Avoid legal jargon that employees cannot understand. Have employment counsel licensed in New York review the final version. The cost of a legal review ($500 to $1,500 depending on firm size) is trivial compared to the per-employee penalties for a deficient notice.

Step 3: Distribute Written Notice to All NY Employees

Deliver the notice to every current employee based in New York. For in-office employees, include it in a printed packet or deliver it during a team meeting with sign-off sheets. For remote employees, send it via your HR onboarding platform or email with a required electronic acknowledgment. Collect a signed or digitally acknowledged copy from each employee. Store acknowledgments in a central, searchable system.

Step 4: Post the Notice in a Conspicuous Location

Print the notice and display it alongside your other labor law posters. For organizations with multiple New York offices, post it in every location. For fully remote workforces, publish the notice on your company intranet or HR portal and email the link to all NY employees. Document the posting date and location.

Step 5: Integrate Notice into Your Onboarding Process

Add the Section 203-c notice to your standard new-hire onboarding checklist. Every employee whose work location is in New York must receive the notice before any monitoring begins. eMonitor's consent form templates include Section 203-c language that integrates directly into digital onboarding workflows.

Step 6: Review and Update Annually

Monitoring practices change over time. If you add a new tool, expand monitoring to include screen recording, or change the frequency of screenshot captures, your Section 203-c notice must be updated. Schedule an annual review of your disclosure notice alongside your monitoring audit. Redistribute the updated notice to all NY employees and collect fresh acknowledgments whenever substantive changes occur.

Does New York's Monitoring Law Apply to Remote Employees?

Yes. New York Labor Law Section 203-c applies based on where the employee works, not where the employer is headquartered. A company based in Texas with 30 remote employees working from their homes in New York must comply with Section 203-c for those 30 employees.

The rise of remote work has made this question critical. According to a 2024 report by the U.S. Bureau of Labor Statistics, 27.6% of employed persons in the U.S. worked remotely at least part of the time. In the New York metropolitan area, that figure is higher due to the concentration of technology, finance, and professional services employers. Any company with remote workers in New York, even one remote worker, triggers the Section 203-c obligations.

Multi-State Compliance Considerations

Employers with employees across multiple states face overlapping requirements. Connecticut (Conn. Gen. Stat. Section 31-48d) and Delaware (Del. Code Title 19, Section 705) have their own monitoring disclosure laws with different requirements. Companies operating in all three states often create a master disclosure notice that meets the strictest standard across all applicable jurisdictions. eMonitor supports configurable monitoring policies by employee location, allowing different monitoring levels and different disclosure notices per state. For a broader view of employee monitoring laws across all U.S. states, see our comprehensive state-by-state guide.

How Federal Law Interacts with New York Section 203-c

New York's monitoring law does not exist in isolation. Federal statutes create the baseline, and New York adds stricter requirements on top. Employers must comply with both layers.

The Electronic Communications Privacy Act (ECPA)

The federal ECPA of 1986, specifically Title I (the Wiretap Act) and Title II (the Stored Communications Act), governs employer access to employee electronic communications nationwide. Under the ECPA, employer monitoring is lawful when:

Business purpose exception: monitoring serves a legitimate business purpose (quality assurance, security, productivity management)
Consent exception: the employee has provided prior consent, either express or implied through a written policy
Provider exception: the employer provides the communication service (company email, company phone system) and monitoring occurs on that system

The ECPA does not require written notice. New York Section 203-c fills that gap by mandating a specific written disclosure. An employer who satisfies the ECPA's consent exception through a signed acknowledgment simultaneously satisfies Section 203-c's written notice requirement, as long as the notice covers all the communication types the statute specifies.

The National Labor Relations Act (NLRA)

For employers with unionized workforces, the NLRA adds another consideration. The National Labor Relations Board has ruled that electronic monitoring of employees may be a mandatory subject of bargaining under certain circumstances. If monitoring practices change, unionized employers may need to bargain over the changes before implementation. This applies to New York employers with collective bargaining agreements.

Common Compliance Mistakes New York Employers Make

After reviewing hundreds of employer monitoring policies, employment attorneys have identified recurring compliance failures. Avoiding these mistakes protects your organization from penalties and litigation.

Mistake 1: Providing Notice After Monitoring Starts

Section 203-c requires prior notice. Monitoring an employee for three months and then providing a disclosure notice does not satisfy the statute. The notice must be delivered before monitoring begins, ideally on the employee's first day. Any monitoring data collected before notice delivery exists in a legal gray area that weakens the employer's position in disputes.

Mistake 2: Using Vague "We May Monitor" Language

A notice stating "the company reserves the right to monitor employee activity" is too vague. Section 203-c specifically references telephone conversations, email, and internet access. A compliant notice must address these communication types by name. Generic language about "reserving the right" does not meet the specificity standard that the Attorney General expects.

Mistake 3: Forgetting the Workplace Posting

Many employers distribute individual notices correctly but skip the conspicuous posting requirement. Section 203-c mandates both. The posting is a separate obligation. Organizations with remote workforces frequently overlook this because they have no physical office, but a digital posting on the company intranet satisfies the requirement when it is accessible to all employees.

Mistake 4: Not Updating the Notice When Monitoring Changes

An employer who deploys a new screenshot monitoring tool but does not update their Section 203-c notice has created a gap. The original notice only disclosed email and internet monitoring. The new screenshot capability is undisclosed. Treat every change to your monitoring stack as a trigger to review and redistribute your notice.

Mistake 5: Ignoring Out-of-State Remote Workers in NY

A California-based employer with five engineers working remotely from Brooklyn is subject to Section 203-c for those five employees. The law applies where the employee works, not where the company is incorporated. Multi-state employers must map their employee locations and apply the correct state-level requirements to each group.

How eMonitor Supports New York Monitoring Compliance

eMonitor is an employee monitoring and productivity platform designed with compliance as a core feature, not an afterthought. For New York employers, eMonitor addresses the Section 203-c requirements directly through its platform architecture.

Work-Hours-Only Monitoring

eMonitor activates monitoring only after an employee clocks in and stops monitoring when they clock out. This work-hours-only approach limits the scope of monitoring to active employment periods, reducing privacy concerns and aligning with the spirit of New York's disclosure requirements. Employees know exactly when monitoring runs and when it does not.

Employee-Facing Dashboards

Every employee monitored through eMonitor has access to their own productivity dashboard, showing the same data that managers see. This transparency goes beyond what Section 203-c requires and builds trust between employers and employees. When an employee can see their own activity data, the monitoring relationship shifts from opaque oversight to shared visibility.

Configurable Monitoring Levels

Not every role requires the same monitoring depth. eMonitor allows administrators to configure monitoring levels per team, department, or individual. A customer support team may have app and website tracking enabled, while a senior engineering team may only have time tracking active. This configurability means your Section 203-c notice can accurately reflect what each employee group actually experiences.

Audit-Ready Records

eMonitor maintains timestamped logs of all monitoring activity, policy changes, and access events. If the New York Attorney General investigates a complaint, eMonitor's reporting system provides the documentation trail that demonstrates when monitoring started, what was monitored, and how employees were notified.

Section 203-c is the most directly relevant statute, but New York employers face additional legal frameworks that intersect with electronic monitoring.

New York Civil Rights Law Section 52-c: Video Monitoring

Section 52-c prohibits employers from video recording employees in restrooms, locker rooms, or other areas designed for changing clothes. While not directly about electronic monitoring, employers deploying video cameras in the workplace must ensure cameras are not placed in protected areas. This statute carries criminal penalties, not just civil fines.

New York Penal Law Section 250: Eavesdropping

New York is a one-party consent state for recording conversations. An employer who is a party to a phone call or whose employee consents to the recording may lawfully record it. However, recording conversations where neither the employer nor an informed employee is a party violates the eavesdropping statute. For call center environments, the standard practice is to announce recording at the beginning of each call and obtain the employee's written consent separately.

NYC Biometric Identifier Information Law

New York City has a separate biometric privacy ordinance that restricts the collection and use of fingerprint, retinal, or facial recognition data. Employers using biometric time clocks or facial recognition for attendance must comply with both the city ordinance and Section 203-c's broader disclosure requirements.

SHIELD Act: Data Security Obligations

The Stop Hacks and Improve Electronic Data Security (SHIELD) Act requires any person or business with private information of New York residents to implement reasonable security safeguards. Monitoring data, including screenshots, keystroke patterns, and activity logs, constitutes private information. Employers using monitoring tools must ensure the collected data is stored securely, access is role-controlled, and breach notification procedures are in place.

Industry-Specific Guidance for New York Employers

Financial Services (Wall Street, Banking, Insurance)

New York's financial services sector faces the strictest monitoring requirements from multiple regulators. FINRA Rule 3110 requires broker-dealers to supervise employee communications, including emails, instant messages, and social media posts. The SEC mandates recordkeeping of all business-related electronic communications under Rule 17a-4. For financial firms, Section 203-c's disclosure requirement actually aligns with existing obligations. The monitoring itself is mandatory; the only new requirement is the written notice and posting.

Healthcare

Healthcare employers in New York must balance monitoring with HIPAA requirements. Monitoring tools that capture screenshots or log application activity may inadvertently record protected health information (PHI) visible on an employee's screen. eMonitor's screenshot blur feature and role-based access controls help healthcare employers monitor productivity without creating a HIPAA liability. The Section 203-c notice for healthcare employers should explicitly mention that monitoring may capture incidental PHI and describe the safeguards in place.

Technology and Startups

New York's tech sector, concentrated in Manhattan and Brooklyn, employs a highly mobile, often fully remote workforce. These companies face Section 203-c challenges when employees move between states frequently. A developer who works from New York three days a week and New Jersey two days a week is subject to Section 203-c for all work performed from New York. Tech companies using eMonitor's location-based policy configuration can apply New York disclosure requirements automatically when an employee's registered work location is within the state.

Professional Services and Law Firms

Law firms and consulting firms monitoring employee activity must navigate attorney-client privilege and work product protections. Screenshot monitoring at a law firm carries the risk of capturing privileged communications. The Section 203-c notice for professional services firms should address how monitoring data is stored, who has access, and what safeguards protect privileged material from unauthorized disclosure.

Sources and Legal References

New York Labor Law Section 203-c (S.2628/A.430, signed into law November 8, 2021, effective May 7, 2022)
Electronic Communications Privacy Act (ECPA), 18 U.S.C. Sections 2510-2522 (Title I) and 2701-2712 (Title II)
American Management Association, 2021 Electronic Monitoring & Surveillance Survey: 78% of major companies use electronic monitoring
U.S. Bureau of Labor Statistics, 2024 American Time Use Survey: 27.6% of employed persons worked remotely at least partially
Connecticut General Statutes Section 31-48d (employee electronic monitoring notification)
Delaware Code Title 19, Section 705 (employee electronic monitoring disclosure)
New York Civil Rights Law Section 52-c (video surveillance in changing areas)
New York SHIELD Act (S.5575-B, data security requirements)
FINRA Rule 3110 (supervision of broker-dealer communications)
SEC Rule 17a-4 (electronic recordkeeping requirements)

Disclaimer: This guide provides general information about New York employee monitoring laws and is not legal advice. Employment law varies by jurisdiction and changes over time. Consult a licensed attorney in New York for advice specific to your organization's situation.

Frequently Asked Questions About New York Employee Monitoring Laws

What is NY Labor Law Section 203-c?

NY Labor Law Section 203-c is a New York state statute that requires employers to provide written notice to employees before monitoring their telephone conversations, email, or internet usage. The law took effect on May 7, 2022, and applies to all private-sector employers operating in New York State, regardless of company size.

Do NY employers have to disclose monitoring to employees?

Yes. New York employers must provide prior written notice to every employee upon hiring that describes the types of electronic monitoring conducted. Employers must also post the notice in a conspicuous location at the workplace. Failure to provide notice carries civil penalties of $500 per first offense and up to $3,000 for third and subsequent offenses.

What are the penalties for non-disclosure in New York?

New York imposes escalating civil penalties for Section 203-c violations: $500 for a first offense, $1,000 for a second offense, and $3,000 for a third or subsequent offense. Penalties are assessed per violation, meaning each employee without proper notice may count as a separate violation. An employer with 200 undisclosed employees faces potential first-offense exposure of $100,000.

Do I need workplace postings about monitoring in New York?

Yes. Section 203-c requires employers to post a notice about electronic monitoring in a conspicuous place readily visible to employees. This posting requirement applies in addition to the individual written notice. Remote-only workplaces typically satisfy this by posting the notice on an internal company portal or intranet accessible to all employees.

Does the New York monitoring law apply to remote employees?

Section 203-c applies to any employee who works in New York State, including remote employees whose primary work location is in New York. Employers with distributed teams that include NY-based remote workers must provide the required written notice, even if the company headquarters is in another state.

What types of monitoring does Section 203-c cover?

Section 203-c covers monitoring or interception of telephone conversations, email, and internet access or usage by any electronic device or system. In practice, this includes screenshot monitoring, app and website tracking, email scanning, keystroke logging, and internet activity logging. Video-only monitoring without audio is generally not covered by this specific statute.

Does Section 203-c apply to personal devices used for work?

Section 203-c applies to employer monitoring of employee communications regardless of device ownership. If an employer monitors email, internet, or phone activity on a personal device used for work through company software, the disclosure requirements still apply. The statute focuses on the act of monitoring, not on who owns the device being monitored.

How should employers deliver the written monitoring notice?

New York law requires employers to provide the monitoring notice in writing upon hiring. Best practice is to include the notice in the onboarding packet and collect a signed acknowledgment. Electronic delivery through onboarding software is acceptable, provided the employee can access and retain a copy of the notice for their records.

Are there federal laws that also apply to monitoring in New York?

Yes. The federal Electronic Communications Privacy Act (ECPA) of 1986 permits employer monitoring for a legitimate business purpose or with employee consent. The Stored Communications Act also applies to stored electronic data. New York employers must comply with both federal rules and Section 203-c, applying whichever standard is stricter on any given point.

Can employees sue employers for monitoring violations in New York?

Section 203-c itself is enforced by the New York Attorney General through civil penalties, not private lawsuits. However, employees may bring claims under other frameworks: common-law invasion of privacy, the federal ECPA, or New York Civil Rights Law Section 52-c. Covert monitoring without disclosure increases litigation risk significantly across all these channels.

Do government employers in New York need to comply with Section 203-c?

No. Section 203-c applies exclusively to private-sector employers. Government agencies and public-sector employers in New York are not subject to this statute. However, public employees in New York have separate constitutional protections against unreasonable searches under the Fourth Amendment, and public employers face their own notification requirements through civil service rules and collective bargaining agreements.

Is there a grace period to comply after hiring an employee in New York?

No. Section 203-c requires prior written notice, meaning the notice must be delivered before monitoring begins. For new hires, this means the notice must be part of the onboarding process, ideally on the first day of employment. There is no statutory grace period that allows employers to begin monitoring and provide notice later.