AI, workplace monitoring and employee privacy

For HR, managers, IT and employees: monitor work fairly and lawfully under federal, state and California rules, and protect employee rights.

For: HR professionals, managers, IT and security staff, and employees

  • 2 contact hours
  • 8 modules
  • 9 interactives
  • 6 job aids
  • Updated October 11, 2026

What you will be able to do

  • Describe how AI is used to monitor and manage workers and the accuracy, fairness, safety and privacy risks of each type.
  • Explain federal limits on monitoring under ECPA (Wiretap Act and Stored Communications Act) and the NLRA, including union bargaining duties.
  • Apply state electronic monitoring notice laws (NY, CT, DE) and biometric privacy laws (Illinois BIPA, Texas, Washington).
  • Apply California's employee privacy rules, including CCPA rights, ADMT duties and Labor Code limits on surveillance.
  • Design transparent, proportionate monitoring and act on monitoring data fairly, including accommodations and responses to employee concerns.

Learn how AI is used to monitor and manage workers, and the rules that limit it: federal wiretap and stored communications law, labor law protections for concerted activity and union bargaining, New York, Connecticut and Delaware notice laws, Illinois, Texas and Washington biometric laws, and California's employee privacy, ADMT and 2026 AI surveillance rules.

Built for HR teams, managers and supervisors, IT and security staff who configure monitoring tools, and employees who want to understand their rights. Cases follow an Oakland warehouse, a Wilmington bank call center, a unionized Springfield trucking fleet, a remote Omaha claims team and a Houston gym chain.

Monitoring can protect workers and businesses, or it can misread real work, penalize people who need accommodations and chill protected activity. This course gives you a practical, state-aware method for choosing proportionate monitoring, giving the right notices, getting biometric consent and acting on flags fairly.

What you’ll be able to do Monday morning

  1. List every monitoring tool affecting your team and the purpose of each.
  2. Check that monitoring notices and acknowledgments meet the rules of each state where your employees work, including remote staff.
  3. Confirm written biometric consent was obtained before any face, fingerprint or voice scans.
  4. Turn off monitoring features you cannot tie to a specific purpose, such as keystroke logging or mood scoring.
  5. Verify data and context, and check for accommodations, before acting on any monitoring flag.

Curriculum

8 modules · 32 lessons · about 2 contact hours

01How is AI used to monitor and manage workers?Free preview14 min
  1. What kinds of workplace monitoring use AI?
  2. What can go wrong when AI monitors work?
  3. When is monitoring an "employment decision"?
  4. Who is affected, and why should managers care?
  • Sort activity: How risky is this monitoring practice?

Diagram · In practice checklist · 2-question knowledge check

02What does federal communications privacy law allow?14 min
  1. What does the Electronic Communications Privacy Act cover?
  2. Which exceptions let employers monitor?
  3. How should AI communications monitoring be set up?
  4. What other federal rules touch monitoring data?
  • Ethics dilemma: Scan the chats for "negativity"?

Diagram · In practice checklist · 2-question knowledge check

03How does labor law limit AI monitoring, union or not?14 min
  1. What does the National Labor Relations Act protect?
  2. How does this apply to AI monitoring?
  3. What changes when employees have a union?
  4. What about non-union workplaces?
  • Matching activity: Match the law to what it does

Diagram · In practice checklist · 3-question knowledge check

04Which states require notice of electronic monitoring?15 min
  1. Which states have electronic monitoring notice laws?
  2. What other state rules affect monitoring?
  3. What should a compliant notice include?
  4. What happens when monitoring changes?
  • State rules selector: Monitoring and biometric rules by state
  • Decision tree: Notice and consent check for a new monitoring tool

Diagram · In practice checklist · 2-question knowledge check

05What do biometric privacy laws require?15 min
  1. What counts as biometric data?
  2. What does Illinois's Biometric Information Privacy Act require?
  3. What do Texas and Washington require?
  4. How should an employer roll out biometric tools safely?
  • Spot the issue: Spot the problems in a biometric consent form

Diagram · In practice checklist · 2-question knowledge check

06What extra rules apply to employee data in California?14 min
  1. What rights do California employees have under the CCPA?
  2. What do the CCPA regulations on ADMT and risk assessments add?
  3. What does the California Labor Code say about surveillance?
  4. What does this mean for the posture-tracking vest?
  • Spot the issue: Spot the problems in a monitoring policy

Diagram · In practice checklist · 2-question knowledge check

07How do you design transparent, proportionate AI monitoring?14 min
  1. What principles make monitoring proportionate?
  2. Which features should usually be off by default?
  3. What should a monitoring policy say?
  4. How do you document the decision?

Diagram · In practice checklist · 2-question knowledge check

08How should managers handle accommodations, concerns and decisions based on monitoring?15 min
  1. How do accommodations interact with monitoring metrics?
  2. What should happen before acting on a monitoring flag?
  3. How should managers respond to group concerns about monitoring?
  4. How do you keep the program fair over time?
  • Branching scenario: A flag and a group complaint in the same week
  • Self-assessment: Is our monitoring fair and lawful?

Diagram · In practice checklist · 2-question knowledge check

Final assessment: 23 questions, 70% to pass, then your certificate

Try it now, no account needed

A flag and a group complaint in the same week

A branching scenario from this course. Your choices are not saved.

Free sample activity

A flag and a group complaint in the same week

You manage a warehouse shift. On Monday, the system flags a picker for a 15 percent rate drop. On Wednesday, eight pickers send you a joint email saying rates are unsafe in the heat.

Inside the course

Practice activities

  • Sort activity1
  • Decision tree1
  • Spot the issue2
  • Matching activity1
  • State rules selector1
  • Ethics dilemma1
  • Branching scenario1
  • Self-assessment1

Job aids you keep

  • AI Monitoring Proportionality ChecklistChecklist
  • Employee Monitoring Notice TemplateTemplate
  • Before You Act on a Monitoring FlagChecklist
  • State Monitoring and Biometric Law Quick SheetReference sheet
  • Prompt Sheet for Monitoring CommunicationsReference sheet
  • AI and Workplace Monitoring Policy StarterPolicy starter

Credit and approval status

Certificate of completion

This course awards a certificate of completion for 2 contact hours of instruction. It is not approved or accredited by any licensing board, state agency, HR or privacy certification body, or continuing education accreditor, and it is not a state-specific edition. Check with your certifying body, employer or licensing board whether this course meets your specific requirement.

Pathways we may pursue include HR recertification credit with SHRM and privacy-profession CPE if approved. None of these approvals exists today; the course page will show an approval only after it is granted.

Our full approvals list

State notes

Workplace monitoring and employee privacy law varies widely by state. Federal law (ECPA and the NLRA) sets a floor; states add notice, consent, biometric and AI-specific rules. Rules generally follow where the employee works, which for remote employees is usually their home state. The states below have the most significant specific rules as of 10/11/2026.

  • New York: Civil Rights Law 52-c requires prior written notice of telephone, email and internet monitoring upon hiring, employee acknowledgment and a posted notice (penalties up to $500, $1,000 and $3,000). New York also has an all-employer off-duty conduct law (Labor Law 201-d) and a warehouse worker quota law.
  • Connecticut: Gen. Stat. 31-48d requires prior written notice of the types of electronic monitoring and a conspicuous posting, with a misconduct exception.
  • Delaware: 19 Del. C. 705 requires a one-time acknowledged notice or a daily electronic notice before monitoring telephone, email or internet use ($100 per violation).
  • Illinois: the Biometric Information Privacy Act (740 ILCS 14) requires a written retention policy, written notice and release before collecting biometrics, and allows private lawsuits ($1,000 negligent, $5,000 intentional or reckless per violation; 2024 amendment limits repeated-scan claims). Illinois is also an all-party consent state for recording private conversations, and HB 3773 (from 01/01/2026) requires notice of AI use in employment decisions.
  • Texas: Bus. & Com. Code 503.001 requires notice and consent before capturing biometric identifiers for a commercial purpose and destruction within one year after the purpose expires; Attorney General enforcement up to $25,000 per violation.
  • Washington: RCW 19.375 requires notice and consent (or an opt-out mechanism) before enrolling biometric identifiers for a commercial purpose; Attorney General enforcement. Washington is an all-party consent state for recording.
  • California: the CCPA gives employees rights to know, delete, correct and limit sensitive data; CPPA regulations add ADMT duties for significant employment decisions from 01/01/2027; Labor Code 435 bars recording in restrooms and changing areas; AB 1331 and AB 1883 (effective 01/01/2027) bar surveillance tools in bathrooms and AI emotion recognition and neural data collection; AB 701 regulates warehouse quotas; Penal Code 632 requires all-party consent to record confidential communications.
  • Colorado: SB 26-189 covers automated decision-making in employment decisions from 01/01/2027 (verify status), and the Colorado Privacy Act includes biometric data rules that reach employees.

What to check locally: your state's electronic monitoring notice rules, recording consent rules, biometric law, social media password law, off-duty conduct protections, warehouse quota law, and any AI-in-employment law. Confirm with employment counsel, because several of these laws changed in 2024 to 2026 and more are pending.

Questions about this course

Who should take this course?

HR professionals, managers and supervisors, IT and security staff who configure monitoring tools, and employees who want to understand their rights. It covers productivity tracking, communications monitoring, location and video, biometrics and algorithmic management.

Does it cover my state?

It covers federal law plus the states with the most significant specific rules: New York, Connecticut and Delaware notice laws, Illinois, Texas and Washington biometric laws, and California's employee privacy and AI surveillance rules, with a state lookup tool. Other states may have recording consent, social media or off-duty conduct rules; check with counsel.

Does this course earn SHRM or privacy certification credit?

Not today. You receive a certificate of completion for 2 contact hours of instruction. We may pursue HR and privacy recertification pathways, but no approval exists yet. Check with your certifying body whether it accepts this certificate.

Is it legal advice?

No. It explains how federal and state rules apply to AI monitoring as of 10/11/2026 so you can spot issues and ask the right questions. Several laws covered here took effect or changed in 2024 to 2027. Confirm your obligations with employment counsel.

How long does it take, and how is it assessed?

About 2 hours: eight modules with scenarios, a state lookup, a notice decision tool and knowledge checks, then a 23-question final assessment with a 70 percent pass mark. Spaced reminder questions follow at 3, 10 and 30 days.

What can I download?

A monitoring proportionality checklist, an employee monitoring notice template, a manager checklist for acting on flags, a state law quick sheet, a prompt sheet for monitoring communications, and a monitoring policy starter.

This course is general education and training awareness from CE Courses Hub on AI, workplace monitoring and employee privacy. It is not legal, medical or professional advice and does not replace your employer's policies, your licensing board's rules, or advice from a qualified professional. Completing it earns a certificate of completion for the stated contact hours; it is not approved or accredited by any licensing board, state agency or accreditor unless an approval is shown on the course page. Check with your board, employer or state agency whether this course meets your specific requirement.