Employer Social Media Monitoring Laws in Georgia

Federal law provides the primary framework for social media monitoring restrictions. The Electronic Communications Privacy Act (18 U.S.C. § 2511), commonly called the Wiretap Act, prohibits employers from intentionally intercepting, accessing, or using any electronic communication without prior consent. This applies to email, texts, and private social media communications. Title VII of the Civil Rights Act of 1964 (42 U.S.C. § 2000e) prohibits employers with 15 or more employees from using monitoring or surveillance to discriminate based on race, color, religion, sex, or national origin.

The Americans with Disabilities Act (42 U.S.C. § 12101 et seq.) extends this protection to disability-based discrimination. Employers cannot monitor social media to identify employees with disabilities, mental health conditions, or genetic information. The Age Discrimination in Employment Act protects employees aged 40 or older from age-based discrimination in all employment decisions, including those informed by social media monitoring.

The Stored Communications Act (18 U.S.C. § 2701) prohibits unauthorized access to electronic communications stored by a provider. If an employer accesses a social media account without authorization—such as logging in as the employee or hacking their password—federal criminal liability may apply. The EEOC enforces Title VII and investigates whether social media monitoring was used as a pretext for discrimination. Private employers not covered by federal law (fewer than 15 employees) may still face state common law liability.

Georgia does not have a specific social media monitoring statute like California (Penal Code § 1001.8) or Colorado (C.R.S. 8-2-127). Instead, Georgia relies on common law tort doctrine and the state Wiretap Act (O.C.G.A. § 16-8-20 through 16-8-24), which mirrors federal law but applies to all employers regardless of size.

Georgia Code section 16-8-20 prohibits the unauthorized access, attempted access, or use of a computer, computer network, or electronic device with intent to defraud, harm, or commit any felony. This applies to employers who access employees' personal social media accounts without authorization. An employer cannot compel an employee to disclose passwords or provide access to personal accounts unless there is a court order or law enforcement request.

Georgia recognizes the common law tort of invasion of privacy. Under Georgia case law, an invasion of privacy occurs when: (1) the employer's conduct intrudes into the employee's private affairs, (2) the intrusion is highly offensive to a reasonable person, and (3) the employer acts with reckless disregard for the employee's privacy. An employer monitoring an employee's personal social media without consent, business necessity, or prior notice may face civil liability for this tort.

Georgia also recognizes tortious interference with business relations and contractual relations. If an employer uses social media monitoring to obtain information that damages an employee's reputation or employment prospects through wrongful means, the employee may sue. Georgia employers are not required to have explicit policies authorizing social media monitoring, but courts look more favorably on monitoring that is clearly disclosed and limited to work-related accounts or business-related conduct.

Unlike California, Georgia has no private right of action for violations of the state Wiretap Act; only state prosecutors can pursue criminal charges. However, employees can still sue employers civilly under common law tort theories. Georgia does not prohibit employers from monitoring social media posts that are publicly available, as there is reduced expectation of privacy. However, attempting to access private accounts, direct messages, or using false identities is strongly disfavored and exposes employers to liability.

Georgia employers are covered by federal law if they have 15 or more employees. Smaller employers are only bound by Georgia state law—common law tort principles and the state Wiretap Act. Remedies available under Georgia law include compensatory damages (lost wages, emotional distress, damage to reputation) and, in cases of intentional misconduct, punitive damages. An employee may also seek injunctive relief to stop ongoing monitoring.

Georgia law recognizes several important exceptions and defenses to social media monitoring liability. First, employers may monitor work-related social media accounts—accounts owned by the company or accounts used primarily for work—if the employee had notice and reasonable expectation that monitoring would occur. An employer may also monitor social media activity that directly relates to workplace conduct, such as posts disparaging the employer or disclosing confidential information, if monitoring has a legitimate business purpose.

Second, monitoring of publicly available social media content does not violate privacy law because there is no reasonable expectation of privacy in information posted publicly. An employer may view a public Facebook profile, Twitter account, or LinkedIn profile without consent. However, if the employer uses deception—such as creating a fake profile to access private content or asking a third party to friend the employee to access restricted posts—Georgia courts have indicated this crosses the line into tortious conduct.

Third, employers have a defense if they accessed social media in response to a legitimate business security threat, such as investigating theft, data breaches, or threats of violence. In these cases, courts may find the intrusion justified despite the lack of consent, though the scope of monitoring must remain proportionate to the threat.

Fourth, if the employee consented to monitoring—either through an employment agreement, handbook, or email acknowledgment—the employer has a stronger defense against invasion of privacy claims. However, consent obtained through coercion or as a condition of employment without notice may not be enforceable.

Fifth, employers are not liable for monitoring content that relates to union organizing, protected concerted activity, or whistleblowing, even with consent, because such monitoring would violate the National Labor Relations Act. Similarly, monitoring motivated by discrimination based on protected class status is illegal and no legitimate business purpose defense applies.

Sixth, Georgia employers may monitor employee social media to prevent disclosure of trade secrets or client information, but only if the monitoring is narrowly tailored to that purpose and not pretextual. The burden is on the employer to demonstrate the legitimate business purpose was the actual reason for monitoring, not a cover for discriminatory intent.

Seventh, employees in certain regulated industries (healthcare, finance, education) may have fewer privacy expectations due to industry-specific compliance obligations. However, this exception does not extend to blanket monitoring of personal accounts; it applies only to monitoring directly related to regulatory requirements.

**Step 1: Document the Monitoring Activity**

Immediately create a detailed record of the monitoring. Note the date, time, and method of monitoring you observed or became aware of (e.g., employer accessed your phone during work, manager mentioned reviewing your social media, IT department installed monitoring software). Screenshot or save copies of any communications from your employer about monitoring policies or requests to access your accounts. Record whether your employer asked for passwords, used company software to monitor devices, accessed your accounts without permission, or reviewed your public social media posts. Keep copies of your employment handbook or any emails confirming you received notice of monitoring policies. Document whether you explicitly consented to monitoring and, if so, the date and form of consent. If monitoring involved a device or network, note whether it was company-owned or personal equipment. Store these documents securely and separately from your work computer in case your employer deletes records.

**Step 2: Review Your Employment Agreement and Handbook**

Obtain a copy of your employment agreement, employee handbook, and any policies related to electronic monitoring or social media. Check for explicit authorization of monitoring, what accounts or devices are covered, what notice was provided, and whether you signed an acknowledgment. If no policy exists, or if the policy is ambiguous, this strengthens your case. Document any policy changes—if monitoring policies changed without notice or became more invasive, this is relevant. If your handbook prohibits certain monitoring practices or requires reasonable expectations of privacy, that is important evidence. Consider whether the monitoring fell outside the stated policy scope; if your employer monitors personal devices when the policy only authorizes company device monitoring, this is a violation. If no written authorization exists but your employer claims implied consent, gather all evidence of what was actually disclosed.

**Step 3: File an Internal Complaint**

Before filing with government agencies, send a written complaint to your employer's Human Resources department or management. Use certified mail or email with read receipt so you have proof of delivery. State clearly: (1) what monitoring occurred, (2) when it occurred, (3) whether you consented and the basis of consent, (4) which accounts or devices were monitored, (5) the business justification the employer provided (if any), (6) how the monitoring harmed you, and (7) what you are requesting (cessation of monitoring, damages, policy change). Keep the tone professional and factual; avoid emotional language. Do not threaten litigation immediately, but state that you believe the conduct violated your privacy rights. Ask for a written response within 10 business days. Preserve all communications—your complaint, the employer's response, and any follow-up discussions. An internal complaint creates a clear record that you objected and gives the employer an opportunity to cure the violation. If the employer acknowledges wrongdoing and stops the monitoring, document that as evidence the violation was real. If the employer denies wrongdoing or continues monitoring, you have evidence of intentional or reckless conduct.

**Step 4: File a Complaint with the EEOC (If Discrimination Is Involved)**

If the monitoring was motivated by or used to effect discrimination based on protected characteristics—race, color, religion, sex, national origin, disability, age, or genetic information—file a charge with the U.S. Equal Employment Opportunity Commission (EEOC). You can file online at www.eeoc.gov or visit the Atlanta EEOC office (45 Piedmont Avenue NE, Suite 400, Atlanta, GA 30303, phone 404-562-6800). The deadline to file is 180 days from the discriminatory act in Georgia (a non-deferral state), or 300 days if you file with the Georgia Attorney General's Civil Rights Section simultaneously. Provide the EEOC with: your name and contact information, your employer's name and address, the number of employees, the dates of the monitoring, a detailed description of what monitoring occurred, why you believe it was discriminatory, the names of any witnesses, and copies of documents (emails, handbook policies, screenshots of social media posts, internal complaints). Include a statement of the harm suffered (emotional distress, lost opportunities, reputational harm). The EEOC will issue a Determination of Reasonable Cause or Cause within 180 days or may settle the matter. If the EEOC finds discrimination, you receive a Right-to-Sue letter allowing you to file a civil lawsuit in federal court within 90 days.

**Step 5: File with the Georgia Attorney General (Optional)**

You may simultaneously file a complaint with the Georgia Attorney General's Civil Rights Section (40 Capitol Avenue SW, Suite 315, Atlanta, GA 30334, phone 404-656-3792). Georgia has worksharing agreements with the EEOC, so a single charge can be filed with both. Include the same information as the EEOC charge but focus on any violation of Georgia common law or state Wiretap Act. The Attorney General's office can investigate and refer the matter for prosecution if criminal conduct is suspected (e.g., unauthorized computer access under O.C.G.A. § 16-8-20). However, the Attorney General does not have a private right of action; only the employee can sue civilly.

**Step 6: Consult an Employment Attorney**

Before pursuing civil litigation, schedule a consultation with an employment lawyer licensed in Georgia. Bring all documentation: employment agreement, handbook, the internal complaint you filed, the employer's response, screenshots, witness names, and a timeline of events. The attorney will evaluate whether you have a viable common law tort claim (invasion of privacy, tortious interference), whether discrimination is present, and the likely value of your claim. Georgia does not require you to wait for EEOC investigation before filing a civil lawsuit in state court, though filing an EEOC charge first preserves your federal claims and creates a clear record. Your attorney will advise whether to pursue settlement negotiations, proceed to litigation in Georgia state court or federal court, or file additional administrative complaints. Ask the attorney about contingency fee arrangements (you pay only if you recover damages) to reduce your upfront costs.

**Step 7: The Investigation and Resolution Process**

If you filed an EEOC charge, expect the EEOC to investigate within 180 days. The investigator will contact your employer, ask for documents (monitoring policies, authorization records, the basis for monitoring), and may interview you and witnesses. You will receive updates on the status of your charge. The EEOC may determine there is Reasonable Cause to believe discrimination occurred, No Reasonable Cause, or Insufficient Cause. If Reasonable Cause is found, the EEOC will attempt conciliation—negotiating a settlement between you and the employer. If conciliation fails, you receive a Right-to-Sue letter. In state court, you can file a civil lawsuit against your employer for common law tort damages within 4 years. You may seek compensatory damages (lost wages, emotional distress, damage to reputation, diminished earning capacity) and, if you prove intentional or reckless conduct, punitive damages. The litigation process typically takes 1-3 years from filing to trial, though many cases settle before trial. Be prepared to provide testimony about the monitoring, the harm suffered, and any evidence of the employer's intent or recklessness.