Starting a new job is exciting, but it also requires handing over some of the most sensitive personal information you have — your Social Security number, bank account details, government identification, and more. Once that data enters your employer's systems, you have limited control over how it is stored, who sees it, and whether it is ever fully deleted. Understanding what employers collect, what they can legally monitor, and how to set boundaries from day one is essential for protecting your privacy in the workplace.
What Employers Collect During Onboarding
The onboarding process for a new job involves an enormous amount of personal data collection, much of it legally required. Here is what a typical employer gathers:
- Social Security number — for tax reporting (W-4) and identity verification
- Government-issued ID and work authorization — I-9 verification requires a passport, driver's license, or similar documents
- Bank account details — routing and account numbers for direct deposit payroll
- Emergency contact information — names, phone numbers, and relationships of people to contact in an emergency
- Background check authorization — criminal history, credit checks, driving records, and employment verification
- Health information — insurance enrollment, disability accommodations, and drug test results
- Home address, phone number, and personal email — for HR records and benefits correspondence
While most of this data collection is necessary, the key question is how long it is retained, how securely it is stored, and who within the organization has access to it.
Pre-Employment Background Checks and Your Rights
Before you even start, most employers run a background check. These checks can reveal a surprising amount of personal information:
- Criminal records at the county, state, and federal level
- Credit history and score (commonly checked for financial roles)
- Driving records
- Employment history verification
- Education verification
- Professional license verification
- Sex offender registry checks
Know Your FCRA Rights
Under the Fair Credit Reporting Act (FCRA), employers must get your written consent before running a background check. If an employer decides not to hire you based on the results, they must provide you with a copy of the report and a "pre-adverse action" notice before making a final decision. You then have the right to dispute any inaccurate information. If any of these steps are skipped, you may have grounds for legal action. Always review the background check report carefully — errors are more common than you might think.
It is also worth noting that over 37 states have adopted "ban-the-box" laws, which prohibit employers from asking about criminal history on initial job applications. These laws vary by state but generally delay criminal history inquiries until later in the hiring process, giving candidates a fairer chance at being evaluated on qualifications first.
Employee Monitoring: What Your Employer Can See
Once you are on the job, many employers monitor employee activity to varying degrees. The types of monitoring include:
- Email monitoring — employers can read emails sent and received on company email accounts
- Web browsing tracking — company networks often log every website visited on work devices or the work network
- Keystroke logging — some monitoring software records every keystroke typed on company devices
- Screen recording and screenshots — periodic or continuous screen captures of your work device
- GPS and location tracking — common for employees with company vehicles or mobile devices
- Application usage monitoring — tracking which apps are used and for how long
- Camera and microphone access — some remote monitoring tools can activate webcams
Assume Company Devices Are Monitored
If your employer provides you with a laptop, phone, or tablet, assume that everything you do on that device is visible to your employer. This includes browsing history, personal messages sent through work devices, files stored locally, and even peripheral device connections. Never use company devices for personal activities you would not want your employer to see — including job searches, medical research, financial transactions, or private communications.
Your rights regarding workplace monitoring vary significantly by state. California, Connecticut, Delaware, and New York have specific laws requiring employers to notify employees about electronic monitoring. In many other states, however, employers have broad latitude to monitor activity on company-owned equipment and networks with minimal or no disclosure requirements.
Skip the manual opt-outs
One opt-out won't stop them — brokers relist your data. PrivacyOn removes your info from 100+ sites and keeps it removed.
Start your free scanSteps to Protect Your Privacy at a New Job
1. Provide Only Required Information
During onboarding, provide only the information that is legally required or necessary for your role. If a form asks for optional details — such as personal social media handles, personal cell phone numbers for non-work purposes, or information about your spouse — you are generally not obligated to provide them. Politely decline optional fields.
2. Ask About Data Retention Policies
Request a copy of your employer's data retention policy. Find out how long your personal information — especially your SSN, financial data, and background check results — is stored. Good employers have clear policies for securely disposing of this data when it is no longer needed.
3. Use Personal Devices for Personal Communication
Keep all personal communication on your personal phone and personal computer. Do not use your work email for personal correspondence. Do not log into personal accounts on work devices. This creates a clean separation that protects both your privacy and your employer's interests.
4. Read the Employee Handbook Privacy Section
Before signing any acknowledgments, read the sections on electronic monitoring, data collection, social media policies, and acceptable use. Understanding these policies up front helps you make informed decisions about what you share and how you use company resources.
5. Keep Work and Personal Accounts Completely Separate
Use different passwords for work and personal accounts. Do not sync personal cloud storage with work devices. Do not use your work email as a recovery address for personal accounts. If you leave the company, you want a clean separation so that losing access to work accounts does not affect your personal digital life.
6. Clean Up Your Social Media Before Starting
Before your first day, review your public social media profiles. Remove or restrict access to posts, photos, or information that you do not want colleagues or management to see. Even if your employer does not formally check social media, coworkers will likely look you up.
7. Understand Monitoring Disclosure Requirements
Ask HR directly whether the company uses employee monitoring software and what it tracks. In states that require disclosure, this information should be provided proactively. In other states, asking the question at least puts the answer on record.
8. Ask How Your SSN and Financial Data Are Protected
Your Social Security number and bank account details are high-value targets for identity thieves. Ask your employer about their data security practices for this information. Is it encrypted? Who has access? Is it stored on secured servers? These are reasonable questions, and any reputable employer should be able to answer them.
Data Brokers and Employment Information
Your job history, employer name, job title, and estimated salary frequently show up on people-search sites and data broker databases. This information is compiled from public records, commercial databases, and data sharing agreements. Anyone who searches for you online can potentially see where you work, what you earn, and your employment history — which can be used for social engineering, identity theft, or simply unwanted attention.
How PrivacyOn Can Help
PrivacyOn continuously scans over 100 data broker sites and removes your personal information, including employment details, salary estimates, home address, and contact information. Starting a new job is the perfect time to clean up your data broker presence — before new employment records get added to the ecosystem. With plans starting at $8.33 per month, PrivacyOn keeps your personal information off the web so that your professional life does not become a gateway to your private life.