Architectural Columns

Tag Archives: #NDALaw

Scrolling Under Surveillance: A New Yorker’s Guide to Bosses, Feeds, and the Law

It’s a simple question, with complicated answers: What can my employer do about my social media? Below is a practical overview of the rules that actually exist today—what employers may monitor, the limits on digging into your private accounts, and how other common contract terms (non‑competes, NDAs, training‑repayment clauses) intersect with your online life.

 

1) Monitoring: when New York employers must warn you

Since May 7, 2022, private employers in New York that monitor or intercept employees’ phone calls, emails, or internet use must give prior written notice at hire and post a conspicuous notice in the workplace. The statute—New York Civil Rights Law § 52‑c, covers “any electronic device or system” but excludes system‑maintenance processes (e.g., spam filters) that are not targeted at a particular individual. Employers must advise new hires that calls, emails, or internet access may be monitored at any time by lawful means.

Implication for workers: Electronic monitoring at work is allowed with notice. If you never received a written acknowledgment at hire or can’t find the posted notice, that’s a compliance red flag.

 

2) Your private social media: the password wall

Effective March 12, 2024, New York added Labor Law § 201‑i, prohibiting employers from requesting or requiring access to an employee’s or applicant’s personal social media accounts—including usernames, passwords, “shoulder‑surfing” log‑ins, or compelled reproduction of private content. Retaliation for refusing is barred.

Limited exceptions exist for non‑personal (business) accounts that access employer systems, certain employer‑provided or employer‑paid devices (with advance notice and explicit agreement), compliance with court orders, and viewing publicly available content.

The New York State Department of Labor has published a public fact sheet reinforcing that employers cannot demand personal account credentials or force in‑person access, and clarifying that publicly available information remains visible to employers. [dol.ny.gov]

Implication for workers: You can say no to password requests and coerced access to personal accounts. If you use an employer‑provided device or a BYOD device, access rights must be disclosed in advance and employers must show that you explicitly agreed.

 

3) Off‑duty online activity: statutory protection, unsettled edges

New York’s Labor Law § 201‑d protects employees from adverse action based on lawful, off‑duty political and recreational activities—defined to include hobbies like reading or viewing media—as long as they occur outside work hours, off employer premises, and without employer equipment. The statute’s text is broad; it also protects “political matters,” with specific definitions.

But word to the wise: Court interpretations of the lawful off-duty activities law have not been particularly employee-friendly. Case in point, in Sander v. Westchester Reform Temple, 2025 N.Y. Slip Op. 06958 (N.Y. Dec. 16, 2025), the New York Court of Appeals did not decide whether blogging or social‑media speech is a “recreational activity” under § 201‑d. The case was dismissed on other grounds.

Implication for workers: § 201‑d can protect off‑duty lawful online activity, but protection is not absolute. Expect further litigation.

 

4) NLRA protections for social media: concerted activity still counts

If you and your coworkers discuss wages, taxes, scheduling, or working conditions on social media, that can be protected concerted activity under § 7 of the National Labor Relations Act (NLRA). But be careful. Disloyal, maliciously false statements can still get you fired. And the decisions of the NLRB (the board that enforces the NLRA) generally reflect the political views of the administration that appointed the board members.

Implication for workers: Discussions with coworkers about workplace terms on social media can be protected.

 

5) Policies employers are allowed to have—and how to read them

  • Monitoring policies with proper notice (see § 52‑c): permissible if they disclose scope and method and are posted as required.
  • Social media policies restricting disclosure of confidential information, harassment, and unlawful conduct: generally lawful, but they must be narrow enough not to chill NLRA‑protected concerted activity.
  • Access to business accounts and employer‑paid devices: prohibited, but exceptions apply under Labor Law § 201‑i if the employer has given advance notice and received explicit consent. Employers may also view publicly available content.

 

6) Related contract terms that affect your online life

  • Non‑competes

Non‑competes in New York are enforced as long as a court finds them reasonable and necessary to protect legitimate interests such as trade secrets, confidential client relationships, or truly unique services. A 2023 bill to broadly ban non‑competes was vetoed; thus, current New York law continues to apply. Federally, the FTC’s 2024 Noncompete Rule is not in effect and was abandoned on appeal in September 2025; the FTC now pursues case‑by‑case actions instead.

Social media angle: If your online activity involves soliciting clients you personally served or trading on confidential lists, your employer (or former employer) may accuse you of violating the clause.

  • NDAs and Confidentiality Clauses

Like non-competes, routine workplace NDAs to protect trade secrets are enforceable in New York when they are reasonable in scope and duration. But if the NDA is part of a settlement package (and yes, notwithstanding new restrictions on NDAs for claims involving discrimination, harassment, or retaliation, it’s still possible for an enforceable NDA to show up in a settlement agreement), you can get sued for violating that clause.

Social media angle: If you’re talking about stuff you agreed not to talk about on your social, the employer might take you to court.

 

7) Practical guidance

  • Confirm notice: If you’re monitored at work, ask for the written notice they are claiming that you acknowledged, and check for the posted policy; lack of notice points to § 52‑c problems.
  • Protect passwords: Decline any request for your personal social media credentials or forced access; Labor Law § 201‑i protects that refusal. Document the request and talk to an attorney about it.
  • Know your NLRA rights: Group discussions with coworkers about wages or conditions—even online—are often protected; discipline for such activity may violate the NLRA.

 

Defend your digital life

Don’t let overreach creep from the employee handbook into your private feed. If a policy goes beyond lawful monitoring, if a manager demands passwords, or if an employer tries to use a contract provision to control your social media activity, push back. The statutes and cases above give you leverage. If you have questions, talk to a workers’ rights attorney in your jurisdiction. Your rights don’t end where your timeline begins.

 

 

A circular logo with the letters SLRF intertwined. Blue text around the circle says "Fighting For Workers' Rights Since 1984" Under the circle, red lettering says "Satter Ruhlen Law Firm"

217 S. Salina St., 6th Fl.,
Syracuse, NY 13202

T: 315-471-0405
F: 315-471-7849

Attorney Advertising. Prior results do not guarantee a similar outcome. This site is published for informational purposes only and does not constitute legal advice.  This site neither creates nor implies an attorney-client relationship.

Find us on Mastodon: @WorkplaceLawyer@union.place