The law on reading and passing on staff messages
3 of 13 US and UK laws we read ask an employer for written notice before monitoring or recording messages, read 28 October 2026.
What it asks of an employer first
Where it applies
The ground it covers
The statute's own wording on staff messages
The full board, one law per row
Each row is one law. Click an answer to see the sentence behind it, quoted from the page with the date we read it. Where it says "not stated", the page we read is silent on that question.
| Law | Where it applies | The ground it covers | What it asks of an employer first | The statute's own wording on staff messages |
|---|---|---|---|---|
| California Civil Code 1798.145 (CCPA) | a US state | personal data about workers | not statedNot addressed in Civil Code 1798.145, CCPA exemptions | Subdivisions (m) and (n) inoperative January 1, 2023, by their own provisions. |
| Connecticut General Statutes s31-48d | a US state | notice of workplace monitoring | written notice | “Electronic monitoring” means the collection of information on an employer's premises… |
| Data Protection Act 2018, s170 | the United Kingdom | personal data about workers | not statedNot addressed in Section 170, unlawful obtaining etc of personal data | It is an offence for a person to offer to sell personal data if the person… |
| FCA Handbook, SYSC 10A | the United Kingdom | a duty to record and keep communications | keeping the records | must take all reasonable steps to record telephone conversations, and keep a copy of… |
| GOV.UK, Data protection and your business | the United Kingdom | personal data about workers | written notice | When you collect someone’s personal data you must tell them who you are and how you’ll… |
| Human Rights Act 1998, Sch 1, art. 8 | the United Kingdom | personal data about workers | a lawful basis | There shall be no interference by a public authority with the exercise of this right… |
| Investigatory Powers Act 2016, s3 | the United Kingdom | intercepting messages in transit | a lawful basis | But it is not an offence under subsection (1) for a person to intercept a communication…… |
| Investigatory Powers Act 2016, s46 | the United Kingdom | intercepting messages in transit | a business purpose the law names | Conduct is authorised by this section if it is authorised by regulations made under… |
| National Labor Relations Act s7, 29 U.S.C. 157 | US federal law | employees acting together | not statedNot addressed in 29 U.S.C. 157, right of employees as to organization, collective bargaining, etc. | Employees shall have the right to self-organization, to form, join, or assist labor… |
| New York Civil Rights Law s52-c | a US state | notice of workplace monitoring | written notice | The notice required by this subdivision shall be in writing, in an electronic record, or… |
| SEC Rule 17a-4, 17 CFR 240.17a-4 | US federal law | a duty to record and keep communications | keeping the records | (4) Originals of all communications received and copies of all communications sent (and… |
| Stored Communications Act, 18 U.S.C. 2701 | US federal law | access to stored messages | consent | (1)intentionally accesses without authorization a facility through which an electronic… |
| Wiretap Act, 18 U.S.C. 2511 | US federal law | intercepting messages in transit | consent | It shall not be unlawful under this chapter for an operator of a switchboard, or an… |
The source sentence behind every answer (52)
- California Civil Code 1798.145 (CCPA), Civil Code 1798.145, CCPA exemptions, read 2026-10-28, Where it applies:
or the California Financial Information Privacy Act (Division 1.4 (commencing with Section 4050) of the Financial Code)
- California Civil Code 1798.145 (CCPA), Civil Code 1798.145, CCPA exemptions, read 2026-10-28, The ground it covers:
Personal information that is collected by a business about a natural person in the course of the natural person acting as a job applicant to, an employee of, owner of, director of, officer of, medical staff member of, or independent contractor of, that business
- California Civil Code 1798.145 (CCPA), Civil Code 1798.145, CCPA exemptions, read 2026-10-28, What it asks of an employer first: Left open by the page (27,800 characters, read in full 2026-10-28).
- California Civil Code 1798.145 (CCPA), Civil Code 1798.145, CCPA exemptions, read 2026-10-28, The statute's own wording on staff messages:
Subdivisions (m) and (n) inoperative January 1, 2023, by their own provisions.
- Connecticut General Statutes s31-48d, Chapter 557, Sec. 31-48d, electronic monitoring of employees, read 2026-10-24, Where it applies:
The Governor shall appoint thirteen members to the Connecticut State Apprenticeship Council
- Connecticut General Statutes s31-48d, Chapter 557, Sec. 31-48d, electronic monitoring of employees, read 2026-10-24, The ground it covers:
Sec. 31-48d. Employers engaged in electronic monitoring required to give prior notice to employees. Exceptions. Civil penalty.
- Connecticut General Statutes s31-48d, Chapter 557, Sec. 31-48d, electronic monitoring of employees, read 2026-10-24, What it asks of an employer first:
each employer who engages in any type of electronic monitoring shall give prior written notice to all employees who may be affected, informing them of the types of monitoring which may occur.
- Connecticut General Statutes s31-48d, Chapter 557, Sec. 31-48d, electronic monitoring of employees, read 2026-10-24, The statute's own wording on staff messages:
“Electronic monitoring” means the collection of information on an employer's premises concerning employees' activities or communications by any means other than direct observation, including the use of a computer, telephone, wire, radio, camera, electromagnetic, photoelectronic or photo-optical systems
- Data Protection Act 2018, s170, Section 170, unlawful obtaining etc of personal data, read 2026-10-08, Where it applies:
Data Protection Act 2018, Section 170 is up to date with all changes known to be in force on or before 07 October 2026.
- Data Protection Act 2018, s170, Section 170, unlawful obtaining etc of personal data, read 2026-10-08, The ground it covers:
It is an offence for a person to sell personal data if the person obtained the data in circumstances in which an offence under subsection (1) was committed.
- Data Protection Act 2018, s170, Section 170, unlawful obtaining etc of personal data, read 2026-10-08, What it asks of an employer first: Left open by the page (16,007 characters, read in full 2026-10-08).
- Data Protection Act 2018, s170, Section 170, unlawful obtaining etc of personal data, read 2026-10-08, The statute's own wording on staff messages:
It is an offence for a person to offer to sell personal data if the person— (a) has obtained the data in circumstances in which an offence under subsection (1) was committed, or (b) subsequently obtains the data in such circumstances.
- FCA Handbook, SYSC 10A, SYSC 10A.1, recording telephone conversations and electronic communications, read 2026-10-08, Where it applies:
FCA Handbook - SYSC 10A.1 Application
- FCA Handbook, SYSC 10A, SYSC 10A.1, recording telephone conversations and electronic communications, read 2026-10-08, The ground it covers:
must take all reasonable steps to record telephone conversations, and keep a copy of electronic communications, that relate to the activities in
- FCA Handbook, SYSC 10A, SYSC 10A.1, recording telephone conversations and electronic communications, read 2026-10-08, What it asks of an employer first:
The records kept in accordance with this chapter must be:
- FCA Handbook, SYSC 10A, SYSC 10A.1, recording telephone conversations and electronic communications, read 2026-10-08, The statute's own wording on staff messages:
must take all reasonable steps to record telephone conversations, and keep a copy of electronic communications, that relate to the activities in
- GOV.UK, Data protection and your business, Data protection and your business, read 2026-10-28, Where it applies:
tell the Information Commissioner’s Office (ICO) how your business uses personal information
- GOV.UK, Data protection and your business, Data protection and your business, read 2026-10-28, The ground it covers:
You must follow rules on data protection if your business stores or uses personal information.
- GOV.UK, Data protection and your business, Data protection and your business, read 2026-10-28, What it asks of an employer first:
When you collect someone’s personal data you must tell them who you are and how you’ll use their information, including if it’s being shared with other organisations.
- GOV.UK, Data protection and your business, Data protection and your business, read 2026-10-28, The statute's own wording on staff messages:
When you collect someone’s personal data you must tell them who you are and how you’ll use their information, including if it’s being shared with other organisations.
- Human Rights Act 1998, Sch 1, art. 8, Schedule 1, Article 8, right to respect for private and family life, read 2026-10-28, Where it applies:
There are currently no known outstanding effects for the Human Rights Act 1998, SCHEDULE 1.
- Human Rights Act 1998, Sch 1, art. 8, Schedule 1, Article 8, right to respect for private and family life, read 2026-10-28, The ground it covers:
Everyone has the right to respect for his private and family life, his home and his correspondence.
- Human Rights Act 1998, Sch 1, art. 8, Schedule 1, Article 8, right to respect for private and family life, read 2026-10-28, What it asks of an employer first:
There shall be no interference by a public authority with the exercise of this right except such as is in accordance with the law and is necessary in a democratic society
- Human Rights Act 1998, Sch 1, art. 8, Schedule 1, Article 8, right to respect for private and family life, read 2026-10-28, The statute's own wording on staff messages:
There shall be no interference by a public authority with the exercise of this right except such as is in accordance with the law and is necessary in a democratic society in the interests of national security, public safety or the economic well-being of the country, for the prevention of disorder or crime, for the protection of health or morals, or for the protection of the rights and freedoms of others.
- Investigatory Powers Act 2016, s3, Section 3, offence of unlawful interception, read 2026-10-24, Where it applies:
Investigatory Powers Act 2016, Section 3 is up to date with all changes known to be in force on or before 24 October 2026.
- Investigatory Powers Act 2016, s3, Section 3, offence of unlawful interception, read 2026-10-24, The ground it covers:
Offence of unlawful interception
- Investigatory Powers Act 2016, s3, Section 3, offence of unlawful interception, read 2026-10-24, What it asks of an employer first:
the person does not have lawful authority to carry out the interception.
- Investigatory Powers Act 2016, s3, Section 3, offence of unlawful interception, read 2026-10-24, The statute's own wording on staff messages:
But it is not an offence under subsection (1) for a person to intercept a communication in the course of its transmission by means of a private telecommunication system if the person— (a) is a person with a right to control the operation or use of the system, or (b) has the express or implied consent of such a person to carry out the interception.
- Investigatory Powers Act 2016, s46, Section 46, interception by businesses etc. for monitoring and record-keeping purposes, read 2026-10-28, Where it applies:
Investigatory Powers Act 2016, Section 46 is up to date with all changes known to be in force on or before 28 October 2026.
- Investigatory Powers Act 2016, s46, Section 46, interception by businesses etc. for monitoring and record-keeping purposes, read 2026-10-28, The ground it covers:
But nothing in any regulations under subsection (2) may authorise the interception of any communication except in the course of its transmission using apparatus or services provided by or to the person carrying on the relevant activities
- Investigatory Powers Act 2016, s46, Section 46, interception by businesses etc. for monitoring and record-keeping purposes, read 2026-10-28, What it asks of an employer first:
The Secretary of State may by regulations authorise conduct of a description specified in the regulations if that conduct appears to the Secretary of State to constitute a legitimate practice reasonably required for the purpose, in connection with the carrying on of any relevant activities (see subsection (4)), of monitoring or keeping a record of—
- Investigatory Powers Act 2016, s46, Section 46, interception by businesses etc. for monitoring and record-keeping purposes, read 2026-10-28, The statute's own wording on staff messages:
Conduct is authorised by this section if it is authorised by regulations made under subsection (2).
- National Labor Relations Act s7, 29 U.S.C. 157, 29 U.S.C. 157, right of employees as to organization, collective bargaining, etc., read 2026-10-28, Where it applies:
29 U.S. Code § 157 - Right of employees as to organization, collective bargaining, etc.
- National Labor Relations Act s7, 29 U.S.C. 157, 29 U.S.C. 157, right of employees as to organization, collective bargaining, etc., read 2026-10-28, The ground it covers:
Employees shall have the right to self-organization, to form, join, or assist labor organizations, to bargain collectively through representatives of their own choosing, and to engage in other concerted activities for the purpose of collective bargaining or other mutual aid or protection
- National Labor Relations Act s7, 29 U.S.C. 157, 29 U.S.C. 157, right of employees as to organization, collective bargaining, etc., read 2026-10-28, What it asks of an employer first: Left open by the page (1,300 characters, read in full 2026-10-28).
- National Labor Relations Act s7, 29 U.S.C. 157, 29 U.S.C. 157, right of employees as to organization, collective bargaining, etc., read 2026-10-28, The statute's own wording on staff messages:
Employees shall have the right to self-organization, to form, join, or assist labor organizations, to bargain collectively through representatives of their own choosing, and to engage in other concerted activities for the purpose of collective bargaining or other mutual aid or protection
- New York Civil Rights Law s52-c, Civil Rights Law s52-c, employers engaged in electronic monitoring; prior notice required, read 2026-10-28, Where it applies:
The Laws of New York Consolidated Laws of New York CHAPTER 6 Civil Rights ARTICLE 5 Right of Privacy
- New York Civil Rights Law s52-c, Civil Rights Law s52-c, employers engaged in electronic monitoring; prior notice required, read 2026-10-28, The ground it covers:
Any employer who monitors or otherwise intercepts telephone conversations or transmissions, electronic mail or transmissions, or internet access or usage of or by an employee by any electronic device
- New York Civil Rights Law s52-c, Civil Rights Law s52-c, employers engaged in electronic monitoring; prior notice required, read 2026-10-28, What it asks of an employer first:
shall give prior written notice upon hiring to all employees who are subject to electronic monitoring.
- New York Civil Rights Law s52-c, Civil Rights Law s52-c, employers engaged in electronic monitoring; prior notice required, read 2026-10-28, The statute's own wording on staff messages:
The notice required by this subdivision shall be in writing, in an electronic record, or in another electronic form and acknowledged by the employee either in writing or electronically.
- SEC Rule 17a-4, 17 CFR 240.17a-4, 17 CFR 240.17a-4, records to be preserved by certain exchange members, brokers and dealers, read 2026-10-28, Where it applies:
Title 17 Chapter II Part 240 Preservation of Records and Reports of Certain Stabilizing Activities § 240.17a-4
- SEC Rule 17a-4, 17 CFR 240.17a-4, 17 CFR 240.17a-4, records to be preserved by certain exchange members, brokers and dealers, read 2026-10-28, The ground it covers:
Preserve the records exclusively in a non-rewriteable, non-erasable format;
- SEC Rule 17a-4, 17 CFR 240.17a-4, 17 CFR 240.17a-4, records to be preserved by certain exchange members, brokers and dealers, read 2026-10-28, What it asks of an employer first:
Preserve a record for the duration of its applicable retention period in a manner that maintains a complete time-stamped audit trail that includes:
- SEC Rule 17a-4, 17 CFR 240.17a-4, 17 CFR 240.17a-4, records to be preserved by certain exchange members, brokers and dealers, read 2026-10-28, The statute's own wording on staff messages:
(4) Originals of all communications received and copies of all communications sent (and any approvals thereof) by the member, broker or dealer (including inter-office memoranda and communications) relating to its business as such, including all communications which are subject to rules of a self-regulatory organization of which the member, broker or dealer is a member regarding communications with the public.
- Stored Communications Act, 18 U.S.C. 2701, 18 U.S.C. 2701, unlawful access to stored communications, read 2026-10-28, Where it applies:
18 U.S. Code § 2701 - Unlawful access to stored communications
- Stored Communications Act, 18 U.S.C. 2701, 18 U.S.C. 2701, unlawful access to stored communications, read 2026-10-28, The ground it covers:
and thereby obtains, alters, or prevents authorized access to a wire or electronic communication while it is in electronic storage in such system shall be punished as provided in subsection (b) of this section.
- Stored Communications Act, 18 U.S.C. 2701, 18 U.S.C. 2701, unlawful access to stored communications, read 2026-10-28, What it asks of an employer first:
(2)by a user of that service with respect to a communication of or intended for that user; or
- Stored Communications Act, 18 U.S.C. 2701, 18 U.S.C. 2701, unlawful access to stored communications, read 2026-10-28, The statute's own wording on staff messages:
(1)intentionally accesses without authorization a facility through which an electronic communication service is provided; or
- Wiretap Act, 18 U.S.C. 2511, 18 U.S.C. 2511, interception and disclosure of communications, read 2026-10-24, Where it applies:
LII U.S. Code Title 18 PART I CHAPTER 119
- Wiretap Act, 18 U.S.C. 2511, 18 U.S.C. 2511, interception and disclosure of communications, read 2026-10-24, The ground it covers:
such use or endeavor to use (A) takes place on the premises of any business or other commercial establishment the operations of which affect interstate or foreign commerce
- Wiretap Act, 18 U.S.C. 2511, 18 U.S.C. 2511, interception and disclosure of communications, read 2026-10-24, What it asks of an employer first:
It shall not be unlawful under this chapter for a person not acting under color of law to intercept a wire, oral, or electronic communication where such person is a party to the communication or where one of the parties to the communication has given prior consent to such interception
- Wiretap Act, 18 U.S.C. 2511, 18 U.S.C. 2511, interception and disclosure of communications, read 2026-10-24, The statute's own wording on staff messages:
It shall not be unlawful under this chapter for an operator of a switchboard, or an officer, employee, or agent of a provider of wire or electronic communication service, whose facilities are used in the transmission of a wire or electronic communication, to intercept, disclose, or use that communication in the normal course of his employment
Not counted on this board
3 named documents fell outside what this board reads once we had read them; their reasons follow. They are tallied, never scored as answers.
- The Investigatory Powers (Interception by Businesses etc. for Monitoring and Record-keeping Purposes) Regulations 2018: the stored read is the 2018 Regulations' contents page: a list of regulation headings with no text of the rules
- UK GDPR, art. 88 (processing in the context of employment): UK GDPR art. 88 reads 'Art. 88 omitted (31.12.2020)': the article is no longer UK law and the page carries no rule
- ICO, Employment practices and data protection: monitoring workers: the ICO monitoring-workers guidance landing page: an introduction and a list of the guidance's chapters, with no rule or requirement stated on it
Method
Each law's own statutes, regulations and regulator guidance were read through estate-fetch and stored whole (sha256 on every row).
For every page, four questions were answered from its own words: where it applies, the ground it covers, what it asks of an employer first, the statute's own wording on staff messages.
Every stated answer carries the sentence it rests on, checked against the stored text; 'not stated' means the page read does not address the question.
A law with several pages reads 'varies' where they disagree.
13 laws, 13 pages.
Source list (16)
- The Investigatory Powers (Interception by Businesses etc. for Monitoring and Record-keeping Purposes) Regulations 2018 (read, set aside)
- Investigatory Powers Act 2016, s3 (offence of unlawful interception) (from the publisher's own statutes, regulations and regulator guidance; reproduced for comment)
- Investigatory Powers Act 2016, s46 (interception by businesses for monitoring) (from the publisher's own statutes, regulations and regulator guidance; reproduced for comment)
- UK GDPR, art. 88 (processing in the context of employment) (read, set aside)
- Human Rights Act 1998, Sch 1 (art. 8, respect for private life and correspondence) (from the publisher's own statutes, regulations and regulator guidance; reproduced for comment)
- Data Protection Act 2018, s170 (unlawful obtaining of personal data) (from the publisher's own statutes, regulations and regulator guidance; reproduced for comment)
- ICO, Employment practices and data protection: monitoring workers (read, set aside)
- GOV.UK, Data protection and your business (from the publisher's own statutes, regulations and regulator guidance; reproduced for comment)
- FCA Handbook, SYSC 10A recording telephone conversations and electronic communications (from the publisher's own statutes, regulations and regulator guidance; reproduced for comment)
- 18 U.S.C. 2511, interception and disclosure of communications (Cornell LII) (from the publisher's own statutes, regulations and regulator guidance; reproduced for comment)
- 18 U.S.C. 2701, unlawful access to stored communications (Cornell LII) (from the publisher's own statutes, regulations and regulator guidance; reproduced for comment)
- 29 U.S.C. 157, NLRA s7 rights of employees (Cornell LII) (from the publisher's own statutes, regulations and regulator guidance; reproduced for comment)
- New York Civil Rights Law s52-c, notice of electronic monitoring (from the publisher's own statutes, regulations and regulator guidance; reproduced for comment)
- Connecticut General Statutes ch. 557, s31-48d electronic monitoring of employees (from the publisher's own statutes, regulations and regulator guidance; reproduced for comment)
- California Civil Code 1798.145 (CCPA exemptions) (from the publisher's own statutes, regulations and regulator guidance; reproduced for comment)
- 17 CFR 240.17a-4, records to be preserved by brokers and dealers (business communications) (from the publisher's own statutes, regulations and regulator guidance; reproduced for comment)
Use this figure
3 of 13 US and UK laws we read ask an employer for written notice before monitoring or recording messages, read 28 October 2026.
Where it applies, by law: the United Kingdom 6 of 13, US federal law 4 of 13, a US state 3 of 13 (13 laws, read 28 October 2026).
The ground it covers, by law: personal data about workers 4 of 13, intercepting messages in transit 3 of 13, notice of workplace monitoring 2 of 13, a duty to record and keep communications 2 of 13, employees acting together 1 of 13, access to stored messages 1 of 13 (13 laws, read 28 October 2026).
What it asks of an employer first, by law: not stated 3 of 13, written notice 3 of 13, consent 2 of 13, keeping the records 2 of 13, a lawful basis 2 of 13, a business purpose the law names 1 of 13 (13 laws, read 28 October 2026).
The statute's own wording on staff messages, by law: stated 13 of 13 (13 laws, read 28 October 2026).
Reference: "The law on reading and passing on staff messages", updated 2026-10-28, https://sellworkplacedatatoai.com/datasets/workplace-message-monitoring-law/.
Download as CSV (52 answers, updated 2026-10-28)