Workplace Privacy in California
California employers must obtain all-party consent before recording confidential communications and cannot demand access to employees' personal social media accounts. The state provides broader workplace privacy protections than federal law, including specific prohibitions on recording in restrooms and locker rooms, restrictions on conviction history inquiries until after a conditional offer, and protections for off-duty cannabis use.
Can my employer monitor my work emails or computer use?
Yes, but with significant restrictions. California law requires all-party consent to record confidential communications (Cal. Penal Code § 632), which is stricter than federal one-party consent. For monitoring on employer-provided devices, employers must provide a Notice at Collection under the CCPA before collecting personal information, detailing what is collected and why (Cal. Civ. Code § 1798.100(a)).
Can my employer track my location?
Yes, but with CCPA notice requirements. Tracking an employee's location qualifies as "systematic observation" of sensitive personal information (11 C.C.R. § 7001(eee)). Before collecting precise geolocation data, employers must provide a Notice at Collection.
Can my employer record my phone calls or conversations?
Under California Penal Code § 632, employers cannot intentionally record a "confidential communication" without the consent of all parties. This all-party consent requirement is stricter than federal law, which generally permits one-party consent (18 U.S.C. § 2511(2)(d)).
A "confidential communication" means any conversation where parties reasonably expect privacy—not including public gatherings or open proceedings (Cal. Penal Code § 632(c)). Individual supervisors and managers qualify as "persons" subject to criminal penalties: fines up to $2,500 for first violations, up to $10,000 for repeat violations, and potential imprisonment (Cal. Penal Code § 632(a)).
Evidence obtained in violation is inadmissible in any proceeding (Cal. Penal Code § 632(d)). Employees may also sue for $5,000 per violation or three times actual damages, whichever is greater, plus injunctive relief—without needing to prove actual damages (Cal. Penal Code § 637.2).
Can my employer record me in restrooms or changing areas?
No. California Labor Code § 435(a) explicitly prohibits employers from making audio or video recordings of employees in restrooms, locker rooms, or employer-designated changing rooms unless authorized by court order.
Can my employer demand my social media passwords?
No. Under Labor Code § 980, employers cannot: - Require disclosure of usernames or passwords for personal social media accounts - Require employees to access personal social media in the employer's presence - Require employees to divulge any personal social media content
Employers also cannot retaliate against employees or applicants for refusing such requests (Cal. Labor Code § 980(e)).
Exceptions: Employers may require access credentials for employer-issued electronic devices and may request social media content reasonably believed relevant to an investigation of employee misconduct or legal violations—provided the information is used solely for that investigation (Cal. Labor Code § 980(c), (d)).
Can my employer use AI to make hiring or employment decisions?
Yes, but with new regulations. The California Civil Rights Council approved AI regulations effective October 1, 2025, requiring employers to maintain automated-decision data for four years. Starting January 1, 2027, the CCPA grants specific rights regarding Automated Decisionmaking Technology (ADMT) for "significant decisions" like hiring, promotion, or termination (Cal. Code Regs. tit. 11, § 7004). Employees and applicants will have the right to: - Opt-out of ADMT use for significant employment decisions - Access information about how ADMT was used in a decision affecting them - A human appeal alternative if the employer provides a reviewer with authority to overturn the decision
Businesses must also conduct a risk assessment before using ADMT for significant decisions (11 C.C.R. § 7004).
Can my employer ask about my criminal history?
California restricts criminal history inquiries more than federal law:
| Rule | California | Federal Baseline |
|---|---|---|
| Timing of conviction inquiry | After conditional offer of employment only (Gov. Code § 12952) | No federal timing restriction |
| Arrests not resulting in conviction | Prohibited from inquiry or consideration (Cal. Labor Code § 432.7(a)(1)) | Permitted with FCRA disclosure |
| Sealed/expunged convictions | Prohibited from inquiry (Gov. Code § 12952(a)(3)) | Permitted |
| Juvenile court matters | Prohibited from inquiry (Cal. Labor Code § 432.7(a)(2)) | Permitted |
| Seven-year reporting limit | Yes—convictions older than 7 years from disposition/parole start (Cal. Civ. Code § 1786.18(a)(7)) | No—convictions reportable indefinitely |
| Statutory damages for violations | $10,000 minimum per violation (Cal. Civ. Code § 1786.50(a)) | $100–$1,000 for willful FCRA violations (15 U.S.C. § 1681n) |
The Fair Chance Act (Gov. Code § 12952) applies to employers with five or more employees. Before final denial based on conviction history, employers must conduct an individualized assessment and provide at least five business days for applicant response (Gov. Code § 12952(c)(3)).
Can my employer use my credit report?
Only for specific positions. Labor Code § 1024.5 restricts credit report use to eight categories: managerial positions; sworn peace officers; positions where credit information is legally required; positions with regular access to bank account information, Social Security numbers, or credit card information; positions involving $10,000+ daily cash access; positions with access to confidential proprietary information; positions with access to specified financial assets; and positions with access to national security information.
This is stricter than federal law, which permits credit reports for employment purposes broadly with disclosure and authorization (15 U.S.C. § 1681b(b)(2)(A)).
Can my employer drug test me for cannabis?
Yes, but with limitations. Government Code § 12954 (effective January 1, 2024) prohibits discrimination based on: - Off-duty cannabis use away from the workplace - Drug screening that detects only nonpsychoactive cannabis metabolites (indicating past use, not current impairment)
Employers may take adverse action based on scientifically valid tests showing psychoactive THC (current impairment) (Gov. Code § 12954(a)(1)).
Exceptions: Building and construction trade employees, positions requiring federal security clearance, and employers with four or fewer employees are exempt (Gov. Code § 12954(a)(2), (f)).
Can I see my personnel file?
Yes. Under Labor Code § 1198.5, current and former employees have the right to inspect and receive copies of personnel records relating to performance, education, training, or grievances. Employers must comply within 30 calendar days (35 by written agreement) and may charge only actual reproduction costs (Cal. Labor Code § 1198.5(b)(1)).
Employers must retain personnel records for at least three years after termination (Cal. Labor Code § 1198.5(c)(1)). Former employees are limited to one request per year (Cal. Lab. Code § 1198.5(g)).
Failure to comply triggers a $750 penalty, plus injunctive relief, costs, and attorney's fees (Cal. Labor Code § 1198.5(k), (l)).
How does California workplace privacy law compare to federal law?
| Item | California | Federal Baseline |
|---|---|---|
| Recording consent standard | All-party consent required for confidential communications (Cal. Penal Code § 632) | One-party consent generally sufficient (18 U.S.C. § 2511(2)(d)) |
| Restroom/locker room recording | Prohibited by statute (Cal. Labor Code § 435) | No specific federal prohibition |
| Social media password demands | Prohibited by statute (Cal. Labor Code § 980) | No federal prohibition |
| Conviction history inquiry timing | After conditional offer only (Gov. Code § 12952) | No federal timing restriction |
| Arrest record consideration | Prohibited if no conviction resulted (Cal. Labor Code § 432.7) | Permitted with FCRA compliance |
| Seven-year conviction reporting limit | Yes (Cal. Civ. Code § 1786.18(a)(7)) | No—convictions reportable indefinitely |
| Credit report use | Restricted to 8 job categories (Cal. Labor Code § 1024.5) | Broadly permitted for employment |
| Off-duty cannabis use protection | Protected from discrimination (Gov. Code § 12954) | No federal protection (cannabis Schedule I) |
| Personnel file access | 30-day response required; 3-year retention (Cal. Labor Code § 1198.5) | No general federal right |
| Automated hiring regulation | Binding regulations effective 2025–2027 with risk assessments, opt-out rights, 4-year record retention (Cal. Code Regs. tit. 11, § 7004) | Non-binding EEOC guidance only |
| Constitutional privacy right | Explicit text in state constitution (Cal. Const., art. I, § 1) | No explicit federal constitutional right |
Employer size thresholds
Which laws apply depends on how many employees you have.
| Law | Applies to Employers With... | Notes |
|---|---|---|
| Fair Chance Act (conviction history) | 5 or more employees (Gov. Code § 12952) | Counts part-time, seasonal, and out-of-state employees (Cal. Code Regs. tit. 2, § 11008(d)) |
| Cannabis discrimination protections | 5 or more employees (Gov. Code § 12954) | Employers with 4 or fewer are exempt |
| Social media password protections (Lab. Code § 980) | All employers | No employee threshold |
| Arrest inquiry restrictions (Lab. Code § 432.7) | All employers | No employee threshold |
| Credit report restrictions (Lab. Code § 1024.5) | All employers | No employee threshold |
| Personnel record access (Lab. Code § 1198.5) | All employers | No employee threshold |
Because these rules depend on your specific job duties, employer size, and the nature of any monitoring, Ask Sawyer researches federal and state law to answer questions about your facts.
How do I report a workplace privacy violation?
| Violation Type | Agency | Key Steps |
|---|---|---|
| CCPA data breach or violation | California Privacy Protection Agency (CPPA) or private lawsuit | Provide business with 30 days' written notice to cure before filing suit for statutory damages (Cal. Civil Code § 1798.150(b)). The CPPA may impose administrative fines of $2,663–$7,988 per violation. |
| Unauthorized recording (civil) | Private lawsuit | Sue for $5,000 per violation or three times actual damages under Cal. Penal Code § 637.2; fact-specific analysis required. |
Common exceptions
- Employer-issued devices: Password disclosure may be required for employer-provided electronics (Cal. Labor Code § 980(d))
- Safety-sensitive positions: Cannabis protections do not apply to building/construction trades or federal security clearance positions (Gov. Code § 12954(a)(2))
- Small employers: Fair Chance Act (5+ employees) and cannabis discrimination protections (5+ employees) have thresholds; Labor Code § 432.7 arrest restrictions apply to all employers
- Federal contractors: Drug-free workplace requirements may conflict with state cannabis protections
If your employer recorded you illegally, that recording can't be used against you in court. Because these rules are fact-specific, Ask Sawyer researches federal and state law to answer questions about your situation.