Can My Employer See My Screen? What Is Visible, When and Under What Law

If the computer belongs to your employer, assume the answer is yes. Monitoring software installed on a company laptop can take screenshots at set intervals, record the screen as video, stream it live to a manager, log which applications and websites are open and for how long, and score your activity by keyboard and mouse input. None of that is illegal for a private employer in any US state, as long as the software is on company equipment and, in New York, Connecticut and Delaware, you were given written notice. What the employer cannot do is reach beyond the device: your personal phone on your own data plan, your home network traffic from other devices, and the contents of personal accounts you have not opened on the work machine.

This guide explains what the common tools actually capture and how often, how to tell whether your screen is being watched, what the law requires employers to tell you and where, what remains private even on a monitored machine, and what to do if you find monitoring you were never told about. It is written for employees; the employer-side guide to the same technology is our computer screen monitoring page.

The short answer by situation

What screen monitoring software captures

The tools differ more than their marketing suggests, so the question is which one is installed. Based on the vendors' own documentation read in October 2026:

• Periodic screenshots. Hubstaff takes up to three screenshots every ten minutes at the employer's chosen frequency, and can blur them or turn them off per user; employees can delete a screenshot if the setting allows, at the cost of the tracked time. Time Doctor captures screenshots on every plan at an interval the administrator sets, with blurring optional. DeskTime takes one random screenshot inside a window of 5, 10, 15 or 30 minutes on its Premium plan and can blur them. Insightful offers screenshots on demand or at intervals.
• Continuous video. Teramind records the screen continuously or on policy triggers and offers live viewing; Time Doctor's Premium plan adds video recording; Kickidler records screen video; Veriato and Controlio record and play back. Video is the most intrusive mode and the one least often disclosed clearly.
• Live view. Teramind, Kickidler and remote-support tools such as TeamViewer, AnyDesk and the remote-control features of Intune and Jamf allow a manager or technician to see your screen in real time. Support tools usually show a notification or ask permission; monitoring tools usually do not.
• Application and website logs without images. ActivTrak records which applications and websites are active and for how long, classifies them as productive or not, and says it does not log keystrokes; screenshots are an optional, alarm-triggered feature. DeskTime's Pro plan and RescueTime work the same way. This is the most common form of monitoring and the least visible.
• Activity scores. Hubstaff's activity level is the share of tracked seconds with any keyboard or mouse input; Time Doctor rates applications as productive or unproductive and flags mouse jigglers and irregular keyboard patterns. Neither measures work; both measure input.
• Keystrokes. Teramind (above its Starter tier), Veriato, InterGuard and SentryPC can log keystrokes; Hubstaff, Time Doctor, ActivTrak, DeskTime and Insightful say they do not. Keystroke logging captures passwords typed into personal accounts, which is the point at which several courts have found liability; see our webcam and keylogger guide.

Separate from dedicated monitoring software, almost every company laptop carries management tools that are not screen monitoring but are often mistaken for it: Microsoft Intune or Jamf for device configuration, Microsoft Defender or CrowdStrike for security telemetry, and a web filter such as Zscaler, Netskope or Cisco Umbrella that logs the domains you visit. Those see your traffic and your software inventory, not your screen. Our work laptop guide covers them.

How to tell if your screen is monitored

1. Read the policy. The handbook, the acceptable use policy and the onboarding documents you signed usually say. In New York, Connecticut and Delaware the employer must have told you in writing.
2. Look for the agent. On Windows, open Task Manager and the Services list, and Settings, then Apps, then Installed apps. On a Mac, open Activity Monitor and System Settings, then General, then Login Items and Extensions. Names to recognize: Hubstaff, Time Doctor (timedoctor2), ActivTrak (its agent runs as svctcom or scthost), Teramind (tmagent or Teramind Agent), DeskTime, Insightful or Workpuls, Veriato, Kickidler, Controlio, InterGuard, SentryPC. Some agents run under generic names; a process with high privileges and no obvious purpose is worth asking IT about.
3. Check management profiles. On Windows, Settings, then Accounts, then Access work or school shows whether the device is enrolled and lets you view the management policies applied. On a Mac, System Settings, then Privacy and Security, then Profiles lists the management profile. On both, Screen Recording permission lists in the privacy settings show which apps can capture the screen; on a Mac, System Settings, then Privacy and Security, then Screen and System Audio Recording is definitive, because macOS will not let an app capture the screen without appearing there.
4. Check the browser. In Chrome or Edge, chrome://management or edge://management states whether the browser is managed and what the administrator can see; chrome://policy lists the policies. A managed browser reports visited URLs if the administrator enables it.
5. Watch for the signs of live view. A mouse that moves on its own, a notification that a session has started, or a technician who knows what is on your screen without being told.

Our detection guide walks through the Windows and macOS checks step by step. Do not remove or disable an agent you find on a company device; that is usually a policy violation and in some cases a computer misuse offense. Ask instead, in writing.

What the law says

Federal law does not prohibit an employer from viewing or recording the screen of a computer it owns. The Electronic Communications Privacy Act restricts intercepting communications, but its consent exception (18 USC 2511(2)(d)) and the provider exception for an employer running its own systems cover ordinary monitoring once a policy is in place, and courts since Smyth v. Pillsbury (1996) have found no reasonable expectation of privacy in what appears on a company system under a disclosed policy. Public employees have Fourth Amendment protection, which in City of Ontario v. Quon (2010) still permitted a reasonable, work-related review.

Three states require notice. New York Civil Rights Law 52-c (since May 7, 2022) requires written notice at hire, acknowledged by the employee, and a conspicuous posting, for any monitoring of phone, email or internet use; penalties are $500, $1,000 and $3,000 per offense, enforced by the Attorney General. Connecticut General Statutes 31-48d requires prior written notice of the types of monitoring, and Public Act 26-73, in force since October 1, 2026, adds location-specific notices and a statement to new hires. Delaware's 19 Del. C. 705 requires a one-time written notice or a daily electronic banner, at $100 per violation. None of the three gives you a right to refuse; they give you a right to be told. California adds two rules from January 1, 2027: no monitoring in bathrooms and similar areas (AB 1331) and no AI surveillance that infers emotional state (AB 1883), each with a $500 penalty. Our employee monitoring laws by state page has the detail, and unionized employees should know that new monitoring is a mandatory bargaining subject under National Labor Relations Board precedent.

What stays private on a monitored computer

• Encrypted traffic the employer has not configured to decrypt. A web filter sees the domain you visited, not the page contents, unless the company has installed its own root certificate on the device to inspect HTTPS. On a company laptop, assume it has.
• Your personal account contents, unless you open them on the screen. The employer cannot read your Gmail by virtue of owning the laptop; it can screenshot your Gmail if you open it there. Logging into your personal account itself, with a saved password, is a Stored Communications Act violation (Pure Power Boot Camp, 2008). Our personal email guide covers this.
• Your personal phone on its own cellular data, including messages, even on your desk. On the office Wi-Fi the network sees your phone's domains and traffic volume, not content.
• Privileged communications with your lawyer from a personal account have been protected even on a company laptop (Stengart, New Jersey 2010) but not from a work account under a clear policy (Holmes, California 2011). Use your own device.
• Protected concerted activity. Monitoring that targets union or group discussion of pay and conditions violates the National Labor Relations Act whatever the policy says.

If you find monitoring you were not told about

1. Check the policy again; most undisclosed monitoring turns out to be disclosed in a document nobody read.
2. Ask HR or IT in writing what the software is, what it captures, how often, who sees it and how long it is kept. In New York, Connecticut and Delaware you are entitled to that notice.
3. If you are in one of those states and were never given notice, you can file a complaint with the state Attorney General (New York) or Labor Commissioner (Connecticut, Delaware). No public enforcement action has been reported under any of the three laws as of October 2026, which is a reason to expect a slow response, not a reason not to file.
4. If the monitoring captured a personal account login or a privileged communication, speak to an employment lawyer before deleting anything; the Stored Communications Act and state privacy torts apply, and the record on your side is what you preserve now.
5. Move personal use off the work device. It is the only reliable fix.

Remote workers and home networks

Working from home changes the practical exposure, not the legal one. An agent on a company laptop captures the same screen at home as in the office, including the personal browsing done on it at lunch. It does not capture other devices on your home network, your router logs or your smart speaker; the employer's visibility ends at the device and its VPN tunnel. The law that applies is usually the law of the state where you work, so a New York employee working from home in New Jersey loses the New York notice right in most readings, while a New Jersey employee working for a New York employer may gain it if the employer has a place of business there. A webcam or microphone turned on by monitoring software in your home raises separate issues, covered in our webcam and keylogger guide, and the employer guide to remote monitoring sets out what a reasonable policy looks like from the other side.

Key takeaways

• On a company-owned computer, yes: monitoring software can take screenshots, record video, stream live and log applications and sites, and US law permits it on company equipment under a disclosed policy.
• On a personal computer with only a work account signed in, the employer sees activity inside the account and a managed browser, not your screen.
• The tools differ: Hubstaff, Time Doctor and DeskTime take periodic screenshots; Teramind, Kickidler and Time Doctor Premium record video; ActivTrak, DeskTime Pro and RescueTime log applications without images.
• New York, Connecticut and Delaware require written notice of monitoring; no state gives private employees a right to refuse it; California bans bathroom monitoring and emotion-inferring AI from January 1, 2027.
• macOS Screen Recording permissions, Windows Access work or school settings, Task Manager or Activity Monitor and chrome://management show what is installed and managed.
• Your personal phone on cellular data, personal account contents you do not open on the device, and lawyer communications from a personal account remain private; logging into your personal accounts is a Stored Communications Act violation.
• Do not remove an agent you find; ask in writing, and move personal use to your own device.