California Workplace Surveillance Laws: Where Cameras Cannot Go
A camera map is drawn by whoever mounted the cameras, usually years ago, for reasons nobody wrote down. California workplace surveillance laws name three rooms where a recording of an employee is prohibited outright — and a bill enrolled on 4 September would put a per-violation penalty behind a narrower version of the same rule. Placement stops being a facilities decision at that point and becomes something a site has to be able to defend.
What California workplace surveillance laws already prohibit
Whatever happens to the bill below, the operative rule has been on the books since 1 January 1999 and is short enough to read in full.
Labor Code section 435 prohibits an employer from causing an audio or video recording to be made of an employee in a restroom, a locker room, or a room designated by the employer for changing clothes, unless a court order authorises it. Subdivision (b) adds a second, separate prohibition that is routinely missed: a recording made in violation of the section may not be used by the employer for any purpose. It applies to private and public employers alike, excepting the federal government. A violation is an infraction.
Two things in that paragraph do more work than they appear to.
It names rooms, not expectations. Most writing on workplace privacy reasons from a reasonable expectation of privacy, which is a standard applied after a dispute exists. Section 435 does not ask a site to predict how a court would weigh anything. It names three rooms.
The bar on use is independent of the bar on recording. If footage of one of those rooms exists — because a camera was aimed badly, because a changing area was designated after the camera went in, because a door was propped open — the employer cannot use it. Not in an investigation, not in a termination, not as evidence of theft. The recording being useful does not make it usable.
Where AB 1331 stands right now
AB 1331, authored by Assemblymember Elhawary, would add a new part to the Labor Code — Part 5.8, commencing with section 1560 — governing workplace surveillance tools.
The bill’s record tracks a bill that nearly died and then moved quickly. It went to the Senate inactive file on 13 September 2025 and sat there for eleven months. It was pulled off that file on 21 August 2026, amended on 21 and 28 August, and on 31 August — the last day of the session — the Senate passed it 28 to 5 and the Assembly concurred in the Senate amendments 61 to 7. It was enrolled on 4 September 2026.
That places it with the Governor under a fixed clock. Article IV, section 10(b) of the California Constitution gives the Governor until 30 September to act on a bill passed before 1 September of the second year of the session. If he does not return it by that date, it becomes a statute anyway. Signature, veto, or silence — the question is settled inside three weeks, and two of those three outcomes produce law.
If it is enacted this month, article IV, section 8(c) sets the effective date: a statute passed at a regular session takes effect on the January 1 following a 90-day period from enactment, which puts it at 1 January 2027.
Current as of 7 September 2026. This is an enrolled bill that has not been signed — check the status page before relying on any date here. Nothing below is legal advice.
What AB 1331 adds that Labor Code 435 does not reach
A workplace surveillance tool, under the enrolled text, is a system, application, instrument or device that collects, or facilitates the collection of, employee data, activities, communications, actions, biometrics or behaviours by means other than direct observation. Smoke detectors and weapon screening systems are excluded. A fixed camera running analytics is squarely inside that definition.
The two instruments are easy to conflate and do different work.
| Labor Code 435 (law since 1999) | AB 1331 (enrolled 4 September 2026) | |
|---|---|---|
| Conduct reached | Causing an audio or video recording to be made | Using a surveillance tool to monitor or surveil |
| Places covered | Restroom, locker room, changing room | Bathroom only |
| Employee right | None stated | Right to leave the tool behind when entering a bathroom |
| Enforcement | Infraction | Labor Commissioner citation or civil action; public prosecutors may also act |
| Penalty | Infraction penalty | Up to 500 dollars per violation |
| Notice duty | None | None — the bill adds no notification requirement |
Labor Code 435 reaches the recording. AB 1331 reaches the watching.
That distinction is the whole delta. A camera trained on a bathroom door that streams to a monitor and records nothing sits outside the plain words of section 435, which is about causing a recording to be made. It does not sit outside a prohibition on monitoring. AB 1331 also carves out a narrow exception on the other side: an employer may still check a surveillance tool for the one-time entry and exit of bathrooms, so a device that logs a door opening is treated differently from one that watches what happens beyond it.
The right to leave a tool behind carries its own exceptions, and they are narrow: requirements tied to meal and rest period availability, required identification or safety badges, and secured door-entry devices that have no audio, no video and no AI capability.
Two things the bill does not do are as important as what it does. It restricts bathrooms and nothing else — no break room provision, no locker room provision, no parking or personal vehicle provision. And it imposes no notice duty at all. A reader who takes the headline and assumes a general workplace surveillance statute has arrived will act on a rule that is not there.
Why the usual approach falls short
Search for this and page one gives two kinds of page, neither of which produces an answer an operator can act on.
The employment-firm summary explains reasonable expectation of privacy at length, correctly, and never names a room. It is written to establish that a claim might exist, which is a different job from telling a security manager whether the camera above the locker aisle is a problem.
The state-by-state comparison table, usually published by a camera reseller, names California and then repeats a claim that will not survive contact with the statute: that California employers must give 14 days’ written notice before monitoring. No California statute imposes that. The nearest real duty runs the other way — under the CCPA, at Civil Code section 1798.100, a business must disclose the categories of personal information it collects, the purposes, and how long it keeps each category, at or before the point of collection. That is a content requirement with no waiting period attached. A bill that would have imposed broader duties on workplace surveillance tools, AB 1221, died on 31 January 2026.
Getting this wrong is expensive in both directions. A site that believes it owes 14 days’ notice delays a safety deployment for a rule that does not exist. A site that concludes the notice question is therefore fictional skips the disclosure it does owe.
What good looks like: auditing a camera map against California law
An audit here is not a legal opinion. It is an inventory question, and the site already has most of the answer written down somewhere.
The four questions to ask about each camera
Run these against every device on the map, one row per camera:
- What is in the frame, including at the edges? Not what the camera is for — what it can see. A dock camera whose field of view clips the corridor outside a changing room is a section 435 question even though nobody aimed it there.
- Does it record, monitor, or both? Section 435 is about recording. The enrolled bill is about monitoring. A live-only feed and a recorded one now sit under different rules.
- Does it capture audio? If yes, the question changes statute. Penal Code section 632 requires the consent of all parties to record a confidential communication, with a fine of up to 2,500 dollars per violation and up to 10,000 after a prior conviction. Many cameras ship with the microphone enabled by default, and nobody checked.
- Has the room changed since the camera went in? A storage bay designated as a changing area, a corridor converted to a locker aisle. The camera did not move; the statute’s coverage did.
The areas that are settled, and the areas that are argued
The settled list is short: the three rooms named in section 435, plus bathrooms specifically if AB 1331 is enacted. Everything else is decided on facts.
The break room is the clearest example, and the most asked about. No California statute names it. It is not a restroom, a locker room, or a room designated for changing clothes, so section 435 does not reach it, and the enrolled bill does not either. Whether a camera there is defensible turns on whether employees reasonably expected privacy in that space — which depends on signage, on layout, on whether the room is enclosed, and on what the camera is being used for. That is a fact question, and a site that documents its answer in advance is in a better position than one that improvises it after a complaint.
The useful move is to sort the map into three lists rather than two: prohibited, defensible with a documented reason, and unexamined. The third list is where the risk actually lives.
Notice: write the disclosure, skip the waiting period
The CCPA duty is a content duty. It asks what categories of personal information are collected, why, and for how long each is kept — delivered at or before collection. For a camera estate that usually means a posted notice at entrances and a line in the employee handbook that matches what the system actually does, including retention.
The retention half is where these documents most often go wrong, because the honest answer is frequently whatever the recorder holds before it overwrites, which is a storage specification rather than a policy.
Where Nsightify fits
Analytics inherits the camera map it is given. Nsightify runs on the IP and CCTV cameras a site already operates, so the placement audit above is a prerequisite to a deployment rather than an output of one.
The useful part of that constraint is that the places California puts off-limits are places no safety detection needs. PPE compliance, forklift–pedestrian proximity, blocked exit and obstructed egress, person down, restricted-area dwell — every one lives on a floor, a dock, an aisle or a yard. A restroom, a locker room and a changing room contribute nothing to any of them.
Where the map and the statute do not line up neatly, the configuration can be made to. A camera can be excluded from analysis entirely, and a zone inside a camera’s field of view can be masked so it is never analysed — the dock camera whose frame clips the corridor outside a changing area does not have to be re-aimed or taken down to stop feeding that corridor into a detection. Both are configured at commissioning and both stay the customer’s call afterwards.
What that does not do belongs in the same breath. Masking a zone in the analytics layer does not change what the camera captures or what the recorder keeps, and section 435 is about the recording being made. A mask narrows what gets analysed and leaves the underlying footage where it was. The audit is still the control.
The rest of the limits are the usual ones. Nsightify produces real-time alerts that a condition was observed at a place and a time; it is an alerting layer, not a legal control, and using it resolves no obligation under any statute above. Detection depends on sightlines, mounting height and lighting. Deployment is either Nsightify Cloud or a Zero Trust on-premises installation where video stays inside the site boundary. Nothing here is legal advice.
Questions operators are asking
Can my employer put a camera in the break room?
No California statute names the break room. Labor Code 435 names three rooms — restroom, locker room, and a room designated for changing clothes — and AB 1331, if enacted, adds a bathroom monitoring prohibition. A break room falls outside both, so the question turns on whether employees had a reasonable expectation of privacy there, which is decided on the facts rather than by a list. Confirm your own position with counsel.
Are cameras allowed in employee-only areas?
Generally yes. California law does not restrict cameras by whether an area is open to the public. It restricts them by room: Labor Code 435 prohibits an employer from causing an audio or video recording of an employee in a restroom, locker room or changing room without a court order. A warehouse floor, dock or yard is employee-only and is not covered by that prohibition.
Is it legal to have cameras in the workplace in California?
Yes, with limits. Video surveillance of work areas is lawful in California. The named prohibition is Labor Code 435, which bars recording an employee in a restroom, locker room or changing room and bars the employer from using any such recording for any purpose. Audio raises a separate question under Penal Code 632, which requires the consent of all parties to record a confidential communication.
Does my employer have to tell me about cameras?
There is a notice duty, but it is not a waiting period. Under the CCPA, at Civil Code 1798.100, a business must inform people of the categories of personal information collected, the purposes, and the retention period at or before the point of collection. No California statute imposes a 14-day or 30-day advance notice before workplace monitoring may begin, despite that claim appearing widely online.
Can my boss watch me on camera all day?
Continuous monitoring of work areas is not itself prohibited in California. The limits are on place and on use: no recording in the three rooms Labor Code 435 names, no use of such a recording for any purpose, and all-party consent before recording a confidential conversation. What an employer may then do with footage in a disciplinary decision is governed separately.
What to check on your camera map this week
None of this waits on the Governor. Pull the camera list, and for each device write down what is in the frame at the edges, whether it records or only streams, whether audio is enabled, and when the surrounding room was last repurposed. Three columns, one afternoon.
Then sort the result into prohibited, defensible with a documented reason, and unexamined — and work the third list first, because that is the one that turns into a complaint nobody can answer. The same inventory does double duty: it is the stream inventory an IT reviewer will ask for before any analytics platform is approved, and it is the document that makes the human-review workflow California’s AI workplace law would require possible to write, since its companion bill was enrolled on the same day and faces the same 30 September deadline.
If you want to know what your existing coverage can actually detect once the map is clean, see what real-time physical safety monitoring reads from the cameras you own, then talk to us about Physical Safety.
Keep reading:
More on this from Nsightify: PPE detection and hazard-zone monitoring.
See Nsightify in Action
We're onboarding a limited number of pilot partners. If you're an operations or security leader in construction, warehousing, or manufacturing — let's talk.