Ridgeline Logistics: Dashcams, Slack, and a Personal iCloud
Ridgeline Logistics runs 40 delivery vans out of Sacramento and Fresno. In one month it has: (a) installed dashcams that continuously record audio inside the cab; (b) required drivers to install an app on their personal phones that logs GPS even off-shift and reads the contact list; (c) enabled keyword monitoring on the company Slack workspace, which includes a #drivers-united channel where employees discuss pay and an upcoming union election; and (d) asked IT to pull a driver's personal iCloud backup after he emailed a customer list to his own Gmail. Ridgeline has a signed 'no expectation of privacy' policy, an arbitration agreement, 300 California drivers, and a union election in ten business days.
1. Evaluate the audio dashcams and the off-shift phone app under California and federal wiretap law.
Read the worked answer
The federal one-party rule and the business-extension exception (18 U.S.C. §2511(2)(d)) will not carry continuous in-cab audio: the employer is not a party to drivers' conversations with passengers, family, or dispatchers, and continuous ambient recording is not 'ordinary course of business' interception.
California is stricter. Penal Code §632 requires all-party consent for confidential communications, and Kearney v. Salomon Smith Barney applies California law to recording that occurs in California. Continuous audio captures confidential communications without consent, exposing Ridgeline to §637.2 civil actions - $5,000 per violation or three times actual damages - plus criminal exposure. Labor Code §435 separately bars audio recording in restrooms and locker rooms; vans used for changing or breaks raise that risk. The signed 'no expectation of privacy' policy reduces a reasonable-expectation argument but cannot manufacture statutory consent.
Fixed answer: disable continuous audio, use event-triggered recording with visible indicators and signed, separately acknowledged consent language, or remove audio entirely.
For the phone app: off-shift GPS and contact-list access on a personal device needs standalone opt-in (not bundled into an employment condition where practicable), data minimization, and a deletion schedule.
2. What should Ridgeline do about the Slack monitoring and the iCloud/Gmail request, given the election in ten days?
Read the worked answer
Slack: keyword monitoring of #drivers-united is surveillance of protected concerted activity under NLRA §8(a)(1). The General Counsel's 2022 memo on electronic monitoring treats pervasive surveillance and algorithmic flagging of organizing activity as a coercive tendency even absent discipline. Any discipline traceable to that channel in the days before the election hands the union a strong objection and possible set-aside. Ridgeline should suspend monitoring of that channel immediately, instruct managers not to review or act on captures, preserve the data (do not delete), and if monitoring is genuinely necessary for data-loss reasons, narrow it, disclose it in advance, and exclude channels used for pay or working conditions.
iCloud/Gmail: the personal iCloud account belongs to a third-party provider; pulling it without valid authorization risks Stored Communications Act §2701 liability, and consent obtained under threat of discipline is unlikely to be voluntary. The company can preserve and image its own devices, servers, and mail gateway, and can request voluntary cooperation with written consent after Weingarten rights are honored for the unionized driver. Treat the customer-list exfiltration as a separate investigation with a litigation hold, not a pretext to sweep the personal account.