CIPP/US study materials
CIPP/US study resources

CIPP/US: Workplace Privacy

CIPP/US · Work through your exam, one topic at a time.

All guide sections

Workplace Privacy

Public versus private employers

The Fourth Amendment applies to public employers, where courts assess whether an employee had a reasonable expectation of privacy and whether the search was reasonable; City of Ontario v. Quon illustrates this balancing. Private employers are governed instead by torts, contract, and statutes.

Monitoring and employee communications

Employers monitor email, internet use, video, GPS, and BYOD devices. ECPA's provider exception and consent, often through an explicit policy, generally permit monitoring of company systems. The NLRA Section 7 protects concerted activity, including discussions about wages and working conditions, and can limit monitoring of those discussions. Several states, such as Connecticut and Delaware, require notice of electronic monitoring. Personal accounts raise Stored Communications Act issues.

Background checks and testing

FCRA requires a standalone disclosure, written authorization, a pre-adverse action notice with a copy of the report and summary of rights, and an adverse action notice. Drug testing and polygraph testing are governed by state law and the Employee Polygraph Protection Act.

Traps

Do not apply the Fourth Amendment to private employers, assume a policy eliminates every privacy expectation, overlook NLRA protections, or miss FCRA's separate-disclosure requirement.

Worked example

A private employer reviews company email under a policy stating no personal use and reserving the right to monitor. The ECPA business-use exception and policy-based consent make the review lawful. Rule of thumb: a private employer needs a clear policy and business justification, not a warrant.