Understanding Employee Privacy Rights in Los Angeles Workplaces
Workers in Los Angeles are protected by some of the strongest employee privacy laws in the country. Under California law, employees have a legally recognized “reasonable expectation of privacy” in the workplace, including protections involving personal information, medical records, biometric data, electronic communications, and sensitive personal information.
California employee privacy laws, along with state and federal laws such as the California Consumer Privacy Act (CCPA), the Health Insurance Portability and Accountability Act (HIPAA), the Genetic Information Nondiscrimination Act (GINA), and other workplace privacy protections, limit how employers may collect, access, monitor, store, and use employee data. Although employers may monitor company equipment, business phone calls, video surveillance systems, and certain employee monitoring practices for legitimate business purposes, California workers still retain important employee privacy rights.
Employers must often provide notice, obtain consent in specific circumstances, and comply with strict legal frameworks governing data collection, background checks, automated decision making systems, medical information, criminal history, biometric information, and employment decisions affecting employees, job applicants, and independent contractors. Understanding how Los Angeles employee privacy laws protect your personal information at work can help workers identify privacy violations, protect sensitive information, and take legal action when employers unlawfully access or misuse private information in California workplaces.
Key Takeaways
- What Employers Can Monitor: Under California employee privacy laws, employers may monitor certain workplace activities and company equipment for legitimate business purposes. Employers can review work emails, electronic communications, business phone calls, internet usage, and activity on company platforms. Employers may also search company-owned property, including desks, lockers, vehicles, computers, phones, and other devices used in the workplace. Video surveillance is generally permitted in work areas, but California law prohibits employers from recording employees in private spaces such as bathrooms, locker rooms, and other areas where workers have a reasonable expectation of privacy. Employers may conduct background checks on employees and job applicants, but must comply with strict state and federal laws regulating the collection, use, and storage of employee information, criminal history, medical information, biometric data, and sensitive personal information. Drug testing may be permitted in specific circumstances, including workplace safety concerns or suspected on-the-job drug use. Employers may also review publicly available social media content. Across California workplaces, employers must provide notice of employee monitoring practices and follow privacy laws designed to protect employee privacy rights and prevent privacy violations.
- What Employers Can’t Monitor: California employee privacy laws protect employee privacy both inside and outside the workplace. Under California law, employers must provide notice to employees before engaging in employee monitoring and must clearly disclose the scope of their monitoring practices involving electronic communications, company equipment, employee data, and workplace activity. Employers are generally prohibited from recording private conversations, including work-related discussions, without consent. California privacy laws also prohibit employers from tracking employees outside work hours, requiring access to private social media accounts, or demanding social media passwords. In addition, employers may not ask employees or job applicants about medical conditions unless directly related to employment or the employee’s ability to perform job duties, and any medical information, medical records, genetic information, or other sensitive personal information must remain confidential under state and federal laws. These workplace privacy protections help California workers safeguard their personal information and protect against unlawful privacy violations.
- Everyone Has The Right To Privacy: Be aware that your coworkers have the same employee privacy rights as you do. Under California law, it is generally illegal to record audio or video of coworkers or track their activities without their knowledge or consent when they have a reasonable expectation of privacy.
California Laws That Govern Employee Personal Information
California employee privacy laws provide broad workplace privacy protections for employees in Los Angeles. Article I, Section 1 of the California Constitution guarantees an inalienable right to privacy, protecting employees against unwarranted surveillance, misuse of personal information, intrusive monitoring practices, and unlawful access to sensitive personal information. Although not limited to employment, California courts have recognized that these privacy rights apply in the workplace where employees have a reasonable expectation of privacy.
Several California laws and legal frameworks build on these constitutional protections:
- The California Privacy Rights Act (CPRA) and California Consumer Privacy Act (CCPA) give employees rights over employee data, including the right to know, access, correct, and delete personal information collected by employers.
- The California Confidentiality of Medical Information Act (CMIA) prohibits employers from disclosing medical records, medical information, genetic information, and other sensitive information without authorization.
- The California Invasion of Privacy Act (CIPA) prohibits employers from recording or eavesdropping on confidential conversations, electronic communications, and business phone calls without consent.
- The California Ban the Box Act limits when employers may ask employees and job applicants about criminal history during background checks and employment decisions.
What Personal Information Employers May Collect—and Where Limits Apply
Employers routinely collect personal information and employee data such as names, social security numbers, addresses, tax and financial records, immigration documents, and emergency contacts. Under California employee privacy laws, employers may collect employee information for legitimate business purposes including payroll, benefits administration, workplace safety, and legal compliance, but California law prohibits employers from collecting unnecessary private information unrelated to employment or job duties. Sensitive personal information, including medical records, medical information, biometric data, genetic information, and background check information, may only be collected in specific circumstances and is subject to strict privacy laws, confidentiality requirements, and state and federal regulations.
The California Privacy Rights Act (CPRA) and California Consumer Privacy Act (CCPA) provide California workers with employee privacy rights over their personal information. Employers must provide notice describing the categories of personal information collected, the purposes for collecting data, and how employee data is used or disclosed. Employees also have the right to access, correct, delete, and limit the use of their personal information, as well as opt out of certain data collection and disclosure practices.
Employee Records Privacy and Protection of Workplace Data
Employers are required to keep employee data, including social security numbers, medical records, and other sensitive personal information, confidential. Under California privacy laws, employers generally must maintain financial and medical information in separate secure files to protect employee privacy and prevent unauthorized access. Employers also have both legal and ethical obligations to safeguard personal information from data breaches, cyber threats, and improper disclosure. Physical records should be stored in locked cabinets, while electronic data should be protected through encryption, identity authentication measures, and role-based access controls. Within the workplace, employee information should remain organized, secure, and accessible only to personnel with a legitimate business or administrative need to know.
Workplace Monitoring, Surveillance, and Privacy Limits in Los Angeles
While California employee privacy laws provide strong workplace privacy protections, employee privacy rights are not unlimited. Under California law, employers may monitor employees and company equipment for legitimate business purposes, provided they comply with applicable privacy laws and provide proper notice of monitoring practices.
- Monitoring Computer and Phone Activity: Employers generally may monitor company computers, company phones, internet usage, employee emails, files, electronic communications, and other employee data stored on company equipment. However, employers generally may not access activity occurring on an employee’s private device without consent.
- Email Monitoring: Employers may monitor employee activity on company email accounts and review work-related communications sent through employer systems.
- Call Recording: Employers may record business phone calls made on company phones if employees are informed of the recording policy. California law prohibits employers from secretly recording private conversations or calls occurring on an employee’s private phone.
- Video Surveillance: Employers may use video surveillance and employee monitoring in California workplaces to protect workplace safety and company property, but may not record employees in bathrooms, locker rooms, break rooms, or other areas where employees have a reasonable expectation of privacy. Employers must also provide notice regarding video monitoring practices.
- GPS Tracking: Employers may use GPS tracking on company equipment and work vehicles, particularly for employees who drive as part of their employment, but employers must disclose GPS monitoring practices in advance.
- Drug Testing: Drug testing may be permitted for job applicants, new hires, or employees when workplace safety concerns or observable signs of drug use exist. Employers must apply testing policies consistently and maintain clear written drug testing policies to comply with California labor laws and employee privacy protections.
Medical, Background Check, and Sensitive Information Protections
Some personal information collected by employers, including medical information and background check information, is considered to be highly sensitive and subject to strict regulations and heightened protection. Such sensitive personal information must be stored separately from standard personnel files to preserve confidentiality.
- Medical Information: Federal and California privacy laws strictly limit an employer’s ability to request, collect, use, or disclose employee medical information and genetic information. Under the Americans with Disabilities Act (ADA) and the Genetic Information Nondiscrimination Act (GINA), employers generally may not ask job applicants about health conditions, disabilities, medical records, or genetic information during the hiring process. After employment begins, employers may only request medical information when it is job-related, necessary for workplace safety, or required to evaluate disability accommodations. Medical information and sensitive personal information must be securely stored and kept confidential. The Health Insurance Portability and Accountability Act (HIPAA) and California’s Confidentiality of Medical Information Act (CMIA) prohibit employers from disclosing employee medical information without written consent, except in limited circumstances permitted by law.
- Background Check Information: Under California law, employers may conduct background checks on job applicants, but must comply with strict employee privacy laws and hiring regulations. California’s Fair Chance Act, commonly known as “Ban the Box,” prohibits employers from asking about criminal history or conducting background checks until after a conditional job offer has been made. Employers also must apply background check policies consistently and cannot selectively screen only certain applicants. Before conducting a background check, employers must provide notice and obtain consent from the applicant, and applicants have the right to request a copy of the background check report. Any criminal history, background check information, or other sensitive personal information collected during the hiring process must be securely stored and kept confidential.
What Employees Can Do When Privacy Rights Are Violated
If you believe your employee privacy rights have been violated as a job applicant, employee, or former employee, contact an employment attorney as soon as possible for legal support and guidance. An attorney can help you understand California employee privacy laws, assess the extent of the privacy violation, and evaluate your legal options. Preserve all evidence related to the alleged privacy violations on a non-work device, including written communications, electronic communications, screenshots, witness statements, notes, timelines, and company policies regarding employee monitoring, video surveillance, data collection, or workplace privacy practices. Keeping copies of employer monitoring policies may help show that the employer violated its own written procedures or applicable privacy laws.
You may choose to report the violation internally to Human Resources or management, but always submit complaints in writing and save copies externally to create a clear record. If the issue is not resolved internally, or if you feel unsafe reporting it within the workplace, you may report the conduct to outside agencies such as the Equal Employment Opportunity Commission or the California Civil Rights Department, depending on the nature of the violations. Working with an employment attorney throughout the process can help protect your privacy rights, ensure legal compliance with state and federal laws, and strengthen any potential legal action.
Contact an Avloni Law for a Free Consultation
If you believe your current, former, or prospective employer has violated your workplace privacy rights, contact an employment attorney as soon as possible. Navruz Avloni is an experienced workers’ rights attorney dedicated to protecting employee privacy rights and advocating for fair, safe, and lawful working conditions in California workplaces. If you have concerns about employee monitoring, misuse of personal information, workplace surveillance, or other privacy violations, contact Avloni Law for a consultation to discuss your legal rights and options under California employee privacy laws.