Yes, companies can track your work laptop, and most do. A 2025 employer survey found roughly three out of four U.S. employers use some form of digital monitoring on work devices, including real-time screen tracking and browsing logs. Federal law gives employers broad authority to monitor their own equipment, and the acceptable-use policy you signed when you received the hardware almost certainly counts as your legal consent to that monitoring.
Why It’s Legal
The federal Electronic Communications Privacy Act of 1986 is the starting point. The law generally prohibits intercepting electronic communications, but it carves out two exceptions that do most of the work here. The consent exception makes interception lawful when at least one party has given prior consent, as long as it isn’t for a criminal or harmful purpose. When you signed an acceptable-use policy or employee handbook acknowledging that your employer monitors company devices, you gave that consent. The provider exception separately allows anyone operating a communication system to intercept traffic on that system as part of normal operations, including protecting the provider’s rights or property.1Office of the Law Revision Counsel. 18 USC 2511 – Interception and Disclosure of Wire, Oral, or Electronic Communications Your employer’s IT department qualifies as the provider of its own network.
Between those two exceptions, courts have consistently found that employees have a diminished expectation of privacy on employer-owned equipment. Ownership of the hardware matters, but it’s the consent buried in company policy that does the heavy legal lifting. That’s why IT can install monitoring software as a condition of receiving the laptop, and why trying to disable or bypass it is treated as a policy violation that can result in termination.
Federal law sets the floor. A handful of states go further by requiring separate written notice before monitoring begins, and where those laws exist, failing to comply can trigger civil penalties. The specifics vary by jurisdiction, so where you work affects the margins.
What Your Employer Can Actually See
Enterprise monitoring software, sometimes called “bossware,” captures far more than most people expect. The categories most common in commercial tools:
- Keystroke logging that records every key you press, measuring active typing time and capturing the content of what you type.
- Periodic screenshots or continuous screen video showing what applications you’re using and what’s on your display.
- Webcam and microphone access on some tools, activated to monitor the physical workspace around the laptop.
- Network traffic logs recording every URL you visit, how long you stay on each site, and which applications send or receive data.
- Idle-time detection through mouse movements and system pings, distinguishing active work from inactivity and flagging gaps for management review.
These tools typically run in the background with no visible icon. Administrators can generate usage breakdowns showing what percentage of your day went to which applications, and automated alerts can fire on specific keywords, unusual file transfers, or connections to unauthorized cloud storage.
Newer platforms go beyond activity logging. Algorithmic tools aggregate data across email, chat, calendars, and application usage to generate productivity scores and predictive risk assessments. Some claim to identify burnout risk by analyzing work patterns, flag attrition risk by comparing individual behavior against team baselines, and surface engagement metrics that reduce your workday to a single number. The raw data behind those predictions comes from the same monitoring infrastructure sitting on your laptop.
Does Monitoring Stop After Hours?
No. Monitoring agents keep running as long as the laptop is powered on and connected to the internet. If you use the company VPN to reach internal systems from home, all traffic routed through that connection is visible to the employer regardless of the time of day. Even without the VPN, locally installed monitoring software continues logging keystrokes, screenshots, and application usage on the device itself, then syncs the data the next time it reconnects to the company network.
Many employers also track the physical location of the laptop through GPS, Wi-Fi positioning, or IP geolocation. The stated business justification is usually recovering lost or stolen equipment and confirming the device isn’t being used in regions that would violate data-handling regulations. Whether that counts as tracking the employee or tracking the company’s property is a distinction courts tend to resolve in the employer’s favor when the hardware belongs to the organization. If you’re using the work laptop on the couch at 10 p.m., assume the software is recording what you do.
Personal Accounts on a Work Laptop
Checking personal email or logging into a bank account on a work laptop creates a real privacy risk, and this is where people tend to underestimate what they expose. Your employer can see through network traffic logs that you visited a webmail site or banking portal. The actual content of your personal messages has a layer of legal protection under the Stored Communications Act, which prohibits intentionally accessing stored electronic communications without authorization.2Office of the Law Revision Counsel. 18 USC 2701 – Unlawful Access to Stored Communications Reaching the substance of a private message takes a higher legal threshold than logging the connection.
That protection erodes fast if you save passwords in the company-managed browser. Once your credentials live on the local machine or sync through a company-administered browser profile, the employer’s IT team may have the technical ability to reach those accounts through administrative tools. If an employer actually logged into your personal accounts without permission, that could support a claim under the Stored Communications Act, which carries minimum statutory damages of $1,000 per violation and allows punitive damages when the access was willful.3Office of the Law Revision Counsel. 18 USC 2707 – Civil Action Proving it happened and litigating against your own employer is a fight most people would rather avoid. The simpler answer is to never enter personal credentials on a work device. Use your phone for personal accounts and keep the two worlds separate.
Does Your Employer Have to Tell You?
Federal law does not explicitly require employers to tell you they’re monitoring your work laptop. The consent exception under the ECPA works through policy acknowledgment, so the notice typically lives inside your employee handbook or IT acceptable-use agreement rather than in a standalone disclosure.1Office of the Law Revision Counsel. 18 USC 2511 – Interception and Disclosure of Wire, Oral, or Electronic Communications If you signed it during onboarding, you consented, even if you don’t remember reading the monitoring paragraph.
A small number of states have enacted laws requiring employers to provide separate written notice before conducting electronic monitoring. Those statutes typically require the notice to describe what types of monitoring will occur and to be provided before or at the start of employment. Several additional states have introduced similar legislation, so this area of law is expanding. Wherever you work, reading your company’s IT policy is the single most useful thing you can do to understand what’s being collected.
How to Protect Yourself
A work laptop is company property running company software that reports to company servers. A few habits make a meaningful difference:
- Read your IT policy. The acceptable-use agreement you signed during onboarding describes what’s monitored and what’s prohibited. If you can’t find it, ask HR for a copy.
- Never save personal passwords on the work device. No browser autofill, no password manager synced with personal credentials. One saved login can give IT administrative access to your private accounts.
- Use your phone for personal business. Personal email, banking, medical portals, social media, job searching—do all of it on your own device over your own cellular connection, not the company Wi-Fi.
- Assume the VPN logs everything. When you’re connected, all your internet traffic passes through employer-controlled servers. Disconnect before doing anything you’d rather keep private, and remember that locally installed monitoring software may still be running.
- Close the laptop when you’re off the clock. If the software runs whenever the device is powered on, shutting it down is the simplest way to stop the collection.
The legal framework heavily favors the employer when the device belongs to the company. Your best protection isn’t litigation after the fact. It’s keeping personal activity off company equipment in the first place.