A widely repeated claim holds that Minnesota requires private employers to give formal notice and obtain written consent before monitoring employees, and that a dedicated state privacy statute dictates how surveillance data must be encrypted, retained, and destroyed. That is not what Minnesota law provides. No Minnesota statute imposes a general notice-and-consent regime on private-sector workplace surveillance. Instead, a private employer’s monitoring is bounded by the state wiretap statute, by common-law privacy expectations, and by ordinary prudence.

The practical consequence is straightforward. A private employer in Minnesota has considerable latitude to monitor its own premises, equipment, and systems, subject to a narrow set of real legal limits and a larger set of sound business practices. Knowing which is which is what separates a defensible monitoring program from an avoidable dispute.

Key Takeaways

  • Minnesota has no dedicated statute requiring private employers to notify employees or obtain consent before conducting video, biometric, GPS, or electronic monitoring.
  • Audio recording is the sharp exception. Under Minnesota’s wiretap statute, recording a conversation requires that the employer be a party or that one participant consent. Minn. Stat. § 626A.02, subdivision 2, paragraph (d).
  • The Minnesota Government Data Practices Act, Minn. Stat. § 13.01, governs government entities, so public employers carry data-practices duties that private employers do not.
  • The Minnesota Consumer Data Privacy Act, Minn. Stat. §§ 325M.10 to 325M.21, regulates consumer data at large businesses and expressly excludes the employment context, so it does not govern employee monitoring.
  • Clear written notice and a signed acknowledgment remain best practice. They reduce common-law invasion-of-privacy exposure and support workplace trust, even though no statute compels them.

The Governing Principle: Minnesota Regulates Workplace Surveillance Narrowly, Not Comprehensively

Minnesota has not enacted a comprehensive workplace-surveillance law. No state statute requires a private employer to post notice, obtain written employee consent, encrypt recordings, or destroy footage on a fixed schedule. Claims to the contrary often point to a “Minnesota Data Privacy Act,” but no statute by that name governs private employment.

The rules that actually constrain a private employer come from three sources, and each has defined edges. The first is the state wiretap statute, which limits the secret recording of conversations. The second is the common law, which protects a reasonable expectation of privacy against highly offensive intrusions. The third is not law at all but prudence: policies and practices that reduce disputes, preserve morale, and keep a monitoring program defensible. Public employers operate under an additional layer, the Government Data Practices Act, that does not reach private companies.

Audio is the area where Minnesota law is most specific, and it is the area most often described backward. Minnesota is a one-party consent state. Under Minn. Stat. § 626A.02, subdivision 2, paragraph (d), it is not unlawful for a person who is a party to a communication, or who has the prior consent of one party, to record it, unless the recording is made to commit a criminal or tortious act. An employer that participates in a conversation, or that has the consent of one participant, may lawfully record it.

The prohibition runs the other way. The same statute makes it an offense to intentionally intercept a wire, electronic, or oral communication to which the employer is not a party and for which no participant has consented. Secretly recording a conversation between two employees, or between employees and third parties, when the employer is neither a party nor authorized by a party, can violate the statute and carries criminal penalties under subdivision 4. The safe course is to record only conversations the employer is part of, or to obtain one participant’s consent in advance. Many employers set video systems to capture no audio for exactly this reason.

What Minnesota Does Not Require of Private Employers

Because there is no comprehensive statute, several obligations that are often assumed to be mandatory are, for private employers, not legally required:

  • Advance notice and written consent for video, biometric, or GPS monitoring. No Minnesota statute conditions these forms of monitoring on employee notice or a signed consent form. An employer may place cameras in work areas, use biometric time clocks, or track company vehicles without a statutory consent document. Best practice, discussed below, still favors notice.
  • Encryption of surveillance data. No Minnesota statute requires a private employer to encrypt employee-monitoring recordings.
  • Fixed retention and disposal schedules. No Minnesota statute sets how long a private employer must keep, or when it must destroy, surveillance footage or logs.

None of this means monitoring is unregulated. It means the limits come from the specific sources below, not from a general surveillance code.

Two Statutes People Confuse With a Workplace-Surveillance Law

Two real Minnesota data statutes are often cited as if they governed private workplace surveillance. Neither does.

The Government Data Practices Act Applies to Public Employers

The Minnesota Government Data Practices Act, Minn. Stat. § 13.01, applies to government entities and regulates how they collect, store, maintain, and disclose government data. Its duties fall on public bodies. A city, county, school district, or state agency that monitors employees handles the resulting data under Chapter 13. A private company does not. This is why guidance written for public-sector workplaces often does not translate to private employers, and why importing those obligations into a private handbook overstates what the law requires.

The Consumer Data Privacy Act Excludes the Employment Context

The Minnesota Consumer Data Privacy Act, Minn. Stat. §§ 325M.10 to 325M.21, took effect in 2025 and regulates how large businesses handle consumer personal data. It does not regulate employee monitoring, for two independent reasons.

First, it reaches only sizable operations. It applies to a business that controls or processes the personal data of at least 100,000 consumers, or that derives more than a quarter of its gross revenue from selling personal data and processes the data of at least 25,000 consumers. Most employers fall below those thresholds.

Second, and decisively, the Act defines a “consumer” as a Minnesota resident acting only in an individual or household context and states that a consumer “does not include a natural person acting in a commercial or employment context.” Employee and applicant data collected within the employment relationship is carved out. So even for a large employer that is otherwise covered, the Act’s consumer-data obligations, including its consent rules for sensitive data such as biometric identifiers, do not attach to workplace monitoring. Enforcement of the Act rests with the Attorney General, and it creates no private right of action.

What the Law Does Limit: Common-Law Privacy

Beyond the wiretap statute, Minnesota common law protects a reasonable expectation of privacy. An employer can face a common-law invasion-of-privacy claim for intruding on an employee’s private affairs in a way a reasonable person would find highly offensive. That exposure concentrates in spaces where employees genuinely expect privacy, such as restrooms, locker rooms, changing areas, or a room used for a private medical or lactation need. Cameras or recording devices in those areas invite a lawsuit regardless of any statute, and they are the clearest practice to avoid.

Monitoring of open work areas, shared equipment, company networks, and business communications sits on much safer ground, because employees generally do not hold a reasonable expectation of privacy there, particularly when the employer has said in advance that those areas and systems are monitored.

Best Practices That Reduce Risk

Even though Minnesota does not mandate them, several practices are worth adopting. They lower the odds of a common-law claim, they undercut the argument that employees reasonably expected privacy, and they protect trust:

  • Publish a written monitoring policy. State plainly what is monitored, where, and why, covering work areas, company devices, networks, email, and vehicles. A clear policy is the single most effective way to eliminate a reasonable expectation of privacy in monitored spaces.
  • Obtain a signed acknowledgment. Have employees acknowledge the policy in writing. This is not a statutory consent form; it is evidence that the employee knew about and expected the monitoring.
  • Keep cameras out of private spaces. No cameras or microphones in restrooms, locker rooms, changing areas, or lactation rooms. This is the highest-risk practice and the easiest to avoid.
  • Respect the audio rule. Record conversations only when the employer is a party or has one participant’s consent, and default video systems to no audio unless a lawful basis exists.
  • Limit access and purpose. Restrict who can view recordings, tie monitoring to legitimate business reasons such as security and deterring theft, and avoid using footage for purposes employees were never told about.
  • Retain no longer than needed. Although no statute sets a schedule, keeping recordings only as long as a legitimate purpose requires reduces both storage cost and exposure if the data is later sought or breached.

The Myth, Restated Correctly

The common claim sounds authoritative: Minnesota’s privacy law requires employee notice and consent before surveillance and dictates how the data must be secured and destroyed. That inverts the actual law. There is no Minnesota statute that imposes a notice-and-consent regime on private workplace surveillance, no state mandate to encrypt or purge employee-monitoring data, and no “Minnesota Data Privacy Act” governing the private workplace.

What Minnesota law actually does is narrower and more specific. The wiretap statute forbids secretly recording conversations without a party’s consent. The common law forbids highly offensive intrusions into genuinely private spaces. The Government Data Practices Act binds public employers, not private ones. And the Consumer Data Privacy Act, even where it applies, carves the employment context out entirely. Notice and consent are not legal mandates for private employers; they are prudent practices that happen to be the best defense available.

Frequently Asked Questions

Not by statute, with one exception. No Minnesota law requires a private employer to obtain employee consent before video, biometric, GPS, or electronic monitoring. The exception is audio: under the state wiretap statute, recording a conversation requires that the employer be a party or that one participant consent. Written notice and a signed acknowledgment are still strongly advisable for all monitoring, but as best practice rather than a statutory command.

Can an employer record audio in the workplace?

Yes, within the one-party consent rule. Under Minn. Stat. § 626A.02, subdivision 2, paragraph (d), an employer may record a conversation it is part of, or one for which a participant has given consent. Secretly recording a conversation between others, where the employer is neither a party nor authorized by a party, can be an offense. Many employers set video systems to capture no audio to stay clearly on the right side of this line.

Is there a “Minnesota Data Privacy Act” that governs workplace cameras?

No. There is no Minnesota statute by that name governing private workplace surveillance. Two real statutes are often confused with one. The Government Data Practices Act, Minn. Stat. § 13.01, applies to government entities. The Consumer Data Privacy Act, Minn. Stat. §§ 325M.10 to 325M.21, regulates consumer data at large businesses and excludes the employment context. Neither imposes surveillance rules on a private employer’s workforce.

Can an employer put cameras in break rooms or restrooms?

Restrooms, locker rooms, changing areas, and lactation rooms should never be monitored. Even without a specific statute, cameras or microphones in those spaces invite a common-law invasion-of-privacy claim because employees hold a reasonable expectation of privacy there. Break rooms are less clear-cut. An open break area is generally monitorable if disclosed in advance, but the more a space functions as a private retreat, the greater the risk. When in doubt, disclose the monitoring and keep it out of spaces that serve a personal need.

Must an employer encrypt or delete surveillance recordings on a schedule?

No Minnesota statute requires a private employer to encrypt employee-monitoring recordings or to follow a fixed retention and disposal schedule. Those steps are sound data-hygiene practices, and limiting retention to what a legitimate purpose requires reduces cost and exposure. For private employers, they are business decisions rather than statutory duties.