Privacy Violation Lawyers in California
Quick Answer
Workplace privacy violations in California may involve secretly recording confidential conversations, accessing medical records without a legitimate job-related reason, monitoring personal accounts without consent, or asking prohibited questions. Some monitoring of company devices and common work areas is permitted, but employers may not record employees in restrooms or changing rooms or demand passwords to personal social media accounts. Lawyers for Employee and Consumer Rights (LFECR) evaluates the circumstances, explains employees' privacy rights, and helps determine whether a legal claim is available.
California employees have meaningful legal protections against workplace privacy violations. Your employer has the right to manage its business, but that right has limits. When an employer crosses the line into accessing personal information, conducting unlawful surveillance, asking prohibited questions, or using your private information in ways you did not consent to, California law may give you the right to take action.
Privacy violations in the workplace take many forms. Some are obvious, such as being asked questions your employer has no legal right to ask. Others are more subtle, such as monitoring conducted without proper notice, accessing medical records without justification, or conducting background checks in ways that violate California law.
At Lawyers for Employee and Consumer Rights (LFECR), our attorneys help California employees understand their privacy rights and evaluate whether their employer may have violated them. If you are unsure whether what happened to you qualifies, a free and confidential consultation can help you decide what steps, if any, may make sense.
FREE AND CONFIDENTIAL
Get a Free Case Review
Fill out the form below and a member of our team will contact you for a free case review. There is no cost and no obligation.
I can not speak highly enough. An immense thank you to my attorney and the entire team! Very professional, communicative and highly knowledgeable. Will recommend.
Mel Luna
Local Guide
I got a settlement when I didn't even expect a dime. I wasn't there to hear them or even see them fighting for me, but the fact that they were able to get me compensation was all that made the ultimate difference between me and my ex employer. Thanks.
Steve Uitz
Local Guide
I had a truly remarkable experience with the legal professionals who represented me, they exhibited an impressive level of expertise and insight regarding the specifics of my case. They provided me with thorough guidance and support...
Local Guide
Privacy Violation & Protection
A workplace privacy violation happens when an employer intrudes on information or spaces the law treats as private, without a legitimate reason or the consent the law requires. California's Constitution gives every person a right to privacy, and unlike in most states, that right applies to private employers as well as the government. State laws add specific protections for recordings, medical information, social media accounts, background checks, and personnel records. Learn more about employee privacy rights.
Have you experienced any of these privacy violations?
- Your employer ran a credit check on you for a job that is not one of the positions California allows, such as managerial roles or jobs with access to bank account information
- Your employer asked strictly forbidden questions, including: your maiden name, whether you own or rent your residence, your national origin, marital status, religion, or your race
- Your employer asked you to take a medical examination or sought access to your medical records for reasons not reasonably related to your job
- Your employer asked about any addiction-related medical condition (including methadone maintenance) or your employer demoted or fired you based on substance abuse or an addiction-related medical condition
- Your employer asked about your criminal history before making a conditional job offer, or sought criminal records for reasons not reasonably related to your job
- Your employer asked you to sign a form releasing the employer from any liability for making inquiries into your private credit history, driving record, or criminal record
- Your employer made a prohibited inquiry either before you were hired and/or while you were on the job
- Your employer demanded your personal social media password or made you log in to your personal accounts in front of them
- Your employer recorded you in a restroom, locker room, or changing area
- Your employer shared your medical condition with coworkers without your permission
If you are unsure whether your situation qualifies as a privacy violation, speaking with an employment attorney is the most reliable way to find out. Consultations are free, confidential, and carry no obligation.
Do California Privacy Laws Protect Employees? The CCPA and CPRA
Yes, in part. The California Consumer Privacy Act (CCPA), as expanded by the California Privacy Rights Act (CPRA), began covering employee and job applicant information on January 1, 2023, when its temporary exemption for employment data expired. It applies to larger businesses that meet the law's thresholds, not to every employer.
If your employer is covered, you generally have the right to:
- Be told what personal information is collected about you and why, at or before the time it is collected
- Request access to the personal information the employer holds about you
- Ask the employer to correct inaccurate information
- Ask the employer to delete information, subject to exceptions for records the employer must keep by law
- Limit the use of sensitive personal information, such as health data or precise location
The CCPA is enforced mainly by the California Privacy Protection Agency and the Attorney General. Employees can sue directly under the CCPA only in one situation: when certain unencrypted personal information is stolen or exposed in a data breach caused by the employer's failure to use reasonable security. The Agency explains the employee-data change in its CCPA frequently asked questions. Most workplace privacy lawsuits rely on other laws, such as the constitutional right to privacy, California's recording laws, and medical confidentiality rules.
California Workplace Surveillance and Recording Laws
California law limits how employers may monitor, record, and collect information about employees. Some monitoring may be allowed for security, productivity, or business reasons, but employers can cross the line when they record private conversations, monitor private areas, or collect personal information without proper notice.
Audio Recording and Wiretapping
California is an all-party consent state for confidential communications. Under California Penal Code Section 632, all parties must consent before a confidential conversation is recorded.
This can apply to workplace conversations, meetings, or phone calls when the people involved reasonably expect the conversation to remain private. An employer that secretly records confidential communications may face civil damages and criminal liability. A person harmed by an illegal recording can sue for $5,000 per violation or three times their actual damages, whichever is greater.
Video Surveillance in the Workplace
California employers may use video cameras in many common work areas, such as offices, warehouses, production floors, and public-facing spaces. However, under California Labor Code Section 435, employers may not make audio or video recordings of employees in restrooms, locker rooms, or rooms designated for changing clothes unless authorized by court order.
Other areas, such as break rooms, depend on the facts. The key question is whether employees had a reasonable expectation of privacy in that space. Hidden cameras can also raise serious concerns, especially if they record audio or capture employees in private situations.
Computer and Electronic Monitoring
Employers generally have more authority to monitor company-owned devices, company email accounts, and company networks. However, monitoring personal devices, personal email accounts, private messages, or off-duty activity can create legal issues, especially if the employee did not consent or had a reasonable expectation of privacy.
Employers covered by California privacy laws may also need to notify employees about the personal information they collect and how it is used, including information collected through certain monitoring systems.
GPS and Location Tracking
Employers can generally track company vehicles and company-issued phones used for work. California law prohibits using an electronic tracking device to follow someone's location without the vehicle owner's or lessee's consent, so a tracker on an employee's personal car is a serious problem. Tracking a personal phone after work hours raises similar privacy concerns.
Personal Social Media and Passwords
Under California Labor Code Section 980, an employer may not require or ask you to share your personal social media username or password, log in to your personal accounts in front of them, or hand over your personal social media content, except in limited workplace misconduct investigations. Employers also may not punish you for refusing an unlawful request. Read more about social media and workplace surveillance.
If you believe your employer recorded, watched, or monitored you in a way that violated your privacy, speaking with an employment attorney can help you understand whether a legal claim may be available.
Can Your Employer Read Your Personal Text Messages or Emails?
Usually not, if the messages are in your personal accounts. An employer reviewing email on its own system, or messages on a phone it issued for work, is on firmer ground, especially with a written monitoring policy. Going into your personal email, messaging apps, or personal phone without permission is different, and can violate your constitutional right to privacy and other California laws.
Practical examples of conduct that raises concern:
- A manager logs in to an employee's personal Gmail account on a shared computer and reads private messages
- An employer requires a "productivity" app on employees' personal phones that collects texts, photos, or location outside work hours
- A supervisor uses screenshots from an employee's private social media account to discipline them for lawful off-duty activity
Lawful off-duty conduct has its own protections. See off-duty conduct protections. For a deeper look at phones and messages, read our guide: Can my employer monitor my emails, text messages, or personal phone?
Can Your Employer Share Your Medical Information?
Generally, no. Under California's Confidentiality of Medical Information Act, employers that receive employee medical information must keep it confidential and may not use or disclose it without your signed authorization, except in limited situations, such as when the law requires it. Telling coworkers about your diagnosis, posting accommodation details in a group chat, or sharing a doctor's note with people who have no need to know can all be violations. Learn more about medical information privacy (CMIA).
Many people assume HIPAA applies. HIPAA mainly governs health care providers and health plans, not employers acting as employers, which is why the California law matters so much at work. If medical information was used to treat you differently, you may also have a claim for disability discrimination.
What Happens If Your Employer Discloses Your Personal Information?
It depends on what was disclosed, how, and why. Deliberately sharing your Social Security number, home address, or personnel file with people who have no business need may be an invasion of privacy. A data breach is different: if a security failure exposed unencrypted personal information, the CCPA allows a lawsuit when the breach resulted from unreasonable security. Separately, you have the right to inspect and copy your own personnel records under California Labor Code Section 1198.5.
Can You Sue Your Employer for Violating Your Privacy?
Often, yes, depending on what happened. Common legal claims include:
- Constitutional invasion of privacy. Generally requires a legally protected privacy interest, a reasonable expectation of privacy in the situation, and a serious invasion of that privacy.
- Common-law privacy claims. For example, intruding into private matters in a highly offensive way, or publicly disclosing private facts.
- Illegal recording. Claims under California's recording laws.
- Medical information claims. Claims under the Confidentiality of Medical Information Act.
- Related employment claims. Discrimination, retaliation, or wrongful termination claims, if the privacy violation led to discipline or firing.
Some privacy rights, such as most CCPA rights, are enforced by government agencies rather than through individual lawsuits.
What Compensation Can You Recover for a Workplace Privacy Violation?
Depending on the claim, remedies may include:
- Compensation for emotional distress and other harm
- Lost wages, if the violation led to discipline or termination
- Statutory amounts, such as $5,000 per violation for illegal recordings
- Damages and limited attorney's fees for improper disclosure of medical information
- Court orders requiring the employer to stop the conduct or destroy recordings
Every case depends on its facts, and no outcome can be promised, but we can tell you which remedies may apply to you.
What Should You Do If Your Employer Violates Your Privacy?
- Write down what happened. Include dates, who was involved, what information or space was affected, and how you found out.
- Keep what is yours. Save copies of policies you signed, emails sent to you, and screenshots of your own accounts. Do not access employer systems you are not authorized to use, and do not secretly record confidential conversations yourself, since that can violate the same law that protects you.
- Identify the information involved. Medical, financial, location, or account data each fall under different rules.
- Review your employer's policies. Monitoring policies and handbooks can affect whether you had a reasonable expectation of privacy.
- Talk to an employment attorney before you respond formally. Some deadlines are short, and how you raise the issue can matter.
Can Your Employer Retaliate Against You for Reporting a Privacy Violation?
Often, no. If you report conduct you reasonably believe breaks the law, such as an illegal recording or unlawful disclosure of medical information, to a supervisor or a government agency, California's whistleblower protections may apply. Labor Code Section 980 separately bars punishment for refusing an unlawful demand for social media access. Not every complaint about privacy is legally protected, though, so the details matter. If you were disciplined or fired after raising a privacy concern, you may have a workplace retaliation claim.
FAQs About Employee Privacy Rights in California
Is audio surveillance legal in the workplace in California?
It depends on whether the conversation is confidential and whether everyone consented. California is an all-party consent state under Penal Code Section 632, so secretly recording a private conversation at work is generally unlawful, even on employer property. Clear advance notice that a space or phone line is recorded can affect whether a conversation is considered confidential, and audio recording in restrooms, locker rooms, and changing areas is prohibited without a court order. If you were recorded without your knowledge, it may be worth discussing with an attorney.
Can my employer monitor my computer or email at work in California?
Generally yes, on company-owned devices, accounts, and networks, where employees usually have a reduced expectation of privacy. Extending monitoring to personal devices, personal email, or personal social media without consent may violate California privacy law, and larger employers covered by the CCPA must tell employees what personal information they collect. If your employer accessed your personal accounts or device without permission, that situation may warrant legal review.
Can my employer use surveillance cameras in the workplace in California?
Yes, in most common work areas, such as offices, warehouses, sales floors, and production areas. Labor Code Section 435 prohibits audio or video recording of employees in restrooms, locker rooms, and rooms designated for changing clothes unless a court authorizes it. Other spaces, such as break rooms, depend on whether employees had a reasonable expectation of privacy there, and hidden cameras raise additional concerns.
What questions is my employer not allowed to ask me in California?
Employers generally may not ask about your national origin, religion, marital status, race, or medical conditions unrelated to your job. Employers with five or more employees may not ask about conviction history before a conditional job offer under the Fair Chance Act, may use credit reports only for certain positions, and may not ask for your personal social media passwords. Some limits apply only during hiring, while others continue throughout employment.
Can my employer access my medical records in California?
Generally no, unless the access is directly and specifically related to your job duties or a documented business necessity. California law strongly protects employee medical privacy. Employers may not require medical examinations or seek access to medical records except in limited circumstances, such as when evaluating a request for reasonable accommodation or verifying a fitness-for-duty issue when there is objective evidence of a work-related concern. Employers who access medical records without a legitimate job-related reason may be violating California privacy law, the California Confidentiality of Medical Information Act (CMIA), and in some cases federal law.
What should I do if I believe my employer violated my privacy rights in California?
Start by writing down what happened, including the date, what information was accessed or disclosed, by whom, and in what context. Preserve any documentation you are entitled to keep, such as emails, forms you were asked to sign, or a copy of a surveillance policy. Then speak with an employment attorney, who can tell you whether what happened may be legally actionable and which claims and deadlines apply. A free consultation with LFECR carries no cost and no obligation.
How LFECR Helps With Workplace Privacy Violations
Lawyers for Employee and Consumer Rights is an employee-side employment law firm founded in 2015 and based in Burbank. We represent California workers in all 58 counties in cases involving workplace privacy, including unlawful recording and surveillance, misuse of medical information, prohibited background checks and inquiries, and retaliation for raising privacy concerns. We never represent employers, and we handle cases on a contingency basis, so you pay no attorney's fees unless we recover for you. Our team assists clients in English and Spanish. Learn more about our firm.
Our Process:
- Call LFECR at 844-619-7541 or fill out the form below after hours.
- When you call Lawyers for Employee and Consumer Rights, tell us YOUR story.
- You’ll first speak with a Case Evaluator, who is collecting information that they will share with one of our Case Managers and Privacy Protection Lawyers.
- They will verify this information and ask you further questions. We’ll explain the legal process and guide you along the way – as it’s our job to collect as much information we can so we can get you the justice you deserve.
Call us today.
Talk to a California Privacy Violation Lawyer Today
If your employer recorded you without consent, went through your personal accounts, shared your medical information, or punished you for objecting, you do not have to sort it out alone. The information on this page is general and is not legal advice about your situation.
Contact Lawyers for Employee and Consumer Rights for a free, confidential case review. We will listen to what happened, explain your rights, and help you decide on next steps.
