Employer Social Media Monitoring Laws in Michigan

Federal law governing employer social media monitoring is limited and primarily reactive. The Electronic Communications Privacy Act (ECPA), codified at 18 U.S.C. § 2511, generally prohibits the unauthorized interception, access, or disclosure of electronic communications. However, the ECPA contains a "business use" exception that permits employers to monitor communications made on employer-provided equipment or through employer systems. The Stored Communications Act (SCA), 18 U.S.C. § 2701, similarly protects against unauthorized access to stored electronic communications, but also contains exceptions for service providers and those with authorization.

Title VII of the Civil Rights Act of 1964 (42 U.S.C. § 2000e) and the Americans with Disabilities Act (42 U.S.C. § 12101) do not directly address social media monitoring but establish that any monitoring data used for employment decisions cannot be used in a discriminatory manner based on protected characteristics. The National Labor Relations Act (29 U.S.C. § 151) restricts employer monitoring that interferes with employees' rights to organize, engage in concerted activity, or discuss wages and working conditions.

Federally, there is no affirmative right to privacy in social media for employees in private-sector workplaces. The Equal Employment Opportunity Commission (EEOC) does not enforce specific social media monitoring rules but investigates if monitoring-derived information is used in discriminatory employment decisions. No federal agency specifically regulates social media monitoring by private employers, leaving the field largely to state law and common law privacy doctrines.

Michigan law does not contain a comprehensive statute specifically regulating employer monitoring of employee social media, unlike some states that have enacted explicit protections (e.g., California, New York, Illinois). However, Michigan recognizes several legal doctrines that provide indirect protections against overly invasive social media monitoring. Michigan common law recognizes the tort of "intrusion upon seclusion," which prohibits intentional intrusions into another's reasonable expectation of privacy, including through technological means. Under this doctrine, an employer monitoring an employee's personal social media account where the employee has a reasonable expectation of privacy could face tort liability.

Michigan Penal Code § 750.539 addresses unlawful use of electronic mediums for harassment, stalking, or threatening communication. If an employer uses social media monitoring results to harass or threaten an employee, or to facilitate workplace harassment, this statute could apply. The statute applies to communications that are "threatening, harassing, or any other illegal subject matter." Additionally, Michigan recognizes limited invasion of privacy claims under state tort law for false light publication, which could apply if an employer publicly discloses private social media information in a misleading way.

Compared to federal law, Michigan provides no stronger statutory protections against monitoring itself. However, Michigan employers that monitor employee social media must remain mindful of the common law privacy tort and cannot use social media information to make employment decisions based on protected characteristics (race, color, national origin, sex, disability, age, religion, or marital status under Michigan's Elliott-Larsen Civil Rights Act, MCL 37.2101 et seq.). Michigan employers also cannot monitor social media for content related to union organizing or concerted protected activity under the National Labor Relations Act, as Michigan residents have the same federal protections as other employees.

Practically, Michigan employers often adopt social media policies that: (1) prohibit monitoring of personal accounts without employee consent, (2) permit monitoring of work-related accounts and publicly available posts, (3) establish clear guidelines on the use of monitoring data in employment decisions, and (4) ensure compliance with the ECPA and state wiretapping restrictions. While Michigan has no mandatory employer transparency law for social media monitoring, best practices include notice and consent, particularly for personal accounts.

Michigan law recognizes several important exceptions and limitations to social media privacy protections. First, employers have broad rights to monitor social media that is already publicly available or posted with public visibility settings. An employee who posts information publicly cannot claim a reasonable expectation of privacy in that content, and employers may freely view, record, and use such publicly available posts.

Second, Michigan employers may monitor work-related social media accounts provided by the employer without significant legal restriction. The business use exception to the ECPA permits monitoring of communications on employer-owned systems, equipment, or accounts. This includes company Facebook pages, Twitter accounts, LinkedIn profiles established by the employer, and emails sent through company systems. Employers can establish and enforce policies requiring monitoring of work accounts.

Third, if an employee has consented to monitoring—whether through an acknowledgment of a company social media policy, a signed consent form, or login terms that disclose monitoring—the employer's legal exposure is significantly reduced. Consent is a complete defense to intrusion upon seclusion tort claims in Michigan. However, consent must be informed and specific; blanket consent in employee handbooks may not cover all forms of monitoring.

Fourth, social media monitoring that relates to legitimate business investigations may be permitted. An employer investigating potential theft, data breaches, security risks, or misconduct linked to the company may monitor relevant social media activity, though this must be narrowly tailored to the investigation and not serve as a pretext for general surveillance.

Fifth, background checks conducted by third parties using public social media information are generally legal in Michigan, provided they comply with the Fair Credit Reporting Act (FCRA) if a consumer reporting agency is involved. However, the employer cannot use information derived from social media to make decisions based on protected characteristics.

Sixth, the National Labor Relations Act's Section 7 protections apply in Michigan, creating an exception to at-will employment. Employers cannot monitor or take adverse action against employees based on social media posts discussing wages, working conditions, union organizing, or other concerted protected activity, even if those posts are on personal accounts and occur outside work hours.

Seventh, employers are not required to monitor social media or investigate employees' personal accounts. Michigan law does not impose an affirmative duty to audit social media, and employers that do not monitor face no legal penalty. The choice to monitor creates monitoring responsibilities but not monitoring obligations.

Eighth, some Michigan courts have recognized exceptions for situations where social media monitoring is conducted by a government employer or subject to government contract requirements, though these typically involve higher privacy protections than for private employers.

Finally, the attorney-client privilege and work-product doctrine may limit an employer's ability to use social media monitoring results in litigation if the monitoring was conducted at the direction of counsel for purposes of litigation strategy.

Step 1: Document the Employer's Monitoring Conduct

Begin by carefully documenting what the employer is monitoring and how. Create a detailed record including: (1) which social media platforms or accounts are being monitored (personal Facebook, Instagram, Twitter, LinkedIn, TikTok, Snapchat, etc.), (2) the method of monitoring (direct access, third-party monitoring tools, screenshots, manual searches), (3) what information is being captured (posts, photos, messages, comments, location data, friend lists), (4) who at the company is accessing the information (HR, management, security), (5) whether you received notice or consent requests, and (6) whether the monitoring relates to your personal account or a work-provided account. Save evidence including: email policy documents, consent forms or acknowledgments you signed, screenshots of the employer accessing your account, or witness accounts of monitoring discussions. Note the date, time, and specific details of each monitoring incident. If messages have been accessed, document the sender, recipient, content preview if available, and timestamp. Preserve all communication from the employer about monitoring intentions.

Step 2: Review Your Employer's Social Media Policy and Determine Your Privacy Expectations

Obtain and carefully read your employer's social media policy, employee handbook, and any signed agreements. Identify whether the employer explicitly claims the right to monitor personal accounts or only work accounts. Check whether you agreed to monitoring and under what terms. Assess whether you have set your personal social media accounts to private, restricted to friends only, or completely confidential—this is relevant to your reasonable expectation of privacy. If the employer is monitoring a work-provided account, the employer's rights are broader. If the employer is monitoring a purely personal account with privacy protections, your legal position is stronger. Consider whether the employer has a legitimate business reason for monitoring (security investigation, compliance check, hiring decision review) versus mere surveillance. Document any policy statements the employer made about monitoring to you personally. If no policy exists or monitoring was not disclosed, this strengthens potential privacy tort claims. Determine whether the employer had your consent for the specific type of monitoring occurring.

Step 3: Send Written Notice to Employer and Preserve Evidence

Do not assume the monitoring is authorized. Send a dated, signed written letter to your employer (preferably to both HR and your direct manager via email with read receipt) stating: "I am notifying you that I have become aware that you are monitoring my [personal/work] social media account on [platform]. I am requesting that this monitoring cease immediately unless I have expressly consented to it in writing. To the extent any monitoring has occurred, I request confirmation of what data has been accessed, by whom, and how it will be used. I reserve all legal rights." Keep a copy of this letter and the proof of delivery. Do not delete or alter any social media accounts or posts after sending this notice, as this could be viewed as destruction of evidence. If the employer responds with a policy or clarification, document it. If the employer ignores your request and continues monitoring after notice, this strengthens claims that the monitoring was unauthorized. In Michigan, this step creates evidence of lack of consent, which is crucial for a tort claim. The notice also puts the employer on formal notice that you object, which can result in punitive damages in some invasive monitoring scenarios.

Step 4: File a Charge with the Michigan Department of Civil Rights (MDCR) if Monitoring Involved Discrimination

If the employer's social media monitoring was used to investigate, discipline, or terminate you based on a protected characteristic (race, color, national origin, sex, disability, age, religion, marital status, or sexual orientation), file a civil rights charge with the Michigan Department of Civil Rights. The deadline is 180 days from the unlawful act in Michigan (shorter than the federal 300-day deadline in deferral states). File online at the MDCR website (michigan.gov/mdcr) or by mail to: Michigan Department of Civil Rights, Lansing office, or your regional office. Include: your name and contact information, the employer's name and location, dates of monitoring, what protected characteristic was involved, a description of how the employer used monitoring data to make an adverse employment decision, names of witnesses, and any related documentation. The MDCR will investigate within 60 days and attempt conciliation. Federal EEOC charges can also be filed simultaneously for the same discrimination claim, extending the federal filing deadline to 300 days. File with both agencies for maximum protection.

Step 5: Consult an Employment Attorney and File Litigation if Necessary

Contact a Michigan employment lawyer experienced in privacy torts and employment litigation as soon as you discover monitoring, ideally before taking any public action. An attorney can: (1) assess whether you have a viable claim for intrusion upon seclusion (the strongest tort claim in Michigan for unauthorized social media monitoring), (2) evaluate whether monitoring violates the ECPA or other federal laws, (3) review whether the employer violated any union or collective bargaining agreement protecting social media privacy, (4) determine if monitoring relates to unlawful retaliation or discrimination, and (5) prepare litigation strategy and demand letters. Bring all documentation, policy documents, and evidence of monitoring to the consultation. Your attorney will typically send a cease-and-desist letter to the employer demanding an end to monitoring and preservation of any data already collected. If the employer continues monitoring or takes retaliatory action (discipline, demotion, termination), your attorney can file a civil lawsuit in Michigan state court (or federal court if federal law violations are involved) seeking: damages for emotional distress, invasion of privacy tort damages, attorney fees if applicable, and injunctive relief to stop future monitoring. Michigan courts do not cap damages for privacy torts, making some cases valuable. The statute of limitations for filing a tort claim is generally 3 years from discovery of the monitoring. Do not wait longer than 6 months to consult an attorney, as evidence may be lost and your claims could be barred by delay.