III: The Battleground · Chapter 11

Privacy & Speech

Remember: S.P.E.E.C.H.

9 min read||

What You Will Learn

That the First Amendment's "free speech" protection applies to the government, not your private employer, meaning you can often be fired for what you say online.
The powerful and unique protections of the Illinois Biometric Information Privacy Act (BIPA) regarding your fingerprints and face scans.
Why you should never secretly record conversations at work in Illinois, as it is likely a felony.

The 30-Second Answer

For most private-sector employees, your free speech rights are very limited; your employer can fire you for things you say online. The First Amendment protects you from the government, not your boss. However, in Illinois, the Biometric Information Privacy Act (BIPA) gives you powerful rights, requiring your employer to get your written consent before collecting your fingerprint or face scan. If they fail to do so, you may be entitled to significant damages.

The Story

Emily Carter, a teacher at a private school, was passionate about politics. On her private Facebook page, she shared a scathing political cartoon. The next day, she was fired. "This is not the image we want to project," the headmaster said. Emily was floored. "But I have a right to free speech!" The headmaster shook his head. "Not when you work for us, you do not." Meanwhile, Jamal Williams's warehouse installed a new time clock that required a fingerprint scan. The company never asked for his permission or explained what would happen to his data. Jamal felt uneasy. Could his employer just take his fingerprint without his consent? In Illinois, the answer was no.

The Action Plan

1Audit Your Social Media. Assume your boss can see everything you post, even on "private" accounts. Review your company's social media policy.
2Know Your State's Off-Duty Conduct Laws. Some states have laws that protect employees from being fired for lawful off-duty activities. Illinois has some protections, but they are not absolute.
3Read BIPA Consent Forms Carefully. If your employer asks you to use a fingerprint or facial scan system, they MUST provide you with a written policy and get your written consent. Read this document carefully.
4Document Any BIPA Violations. If your employer started collecting your biometric data without getting your written consent, they have likely violated the law. Note the date the system was installed.

The Details

The Myth of Free Speech at Work

The single biggest misconception employees have is about the First Amendment. It restricts what the government can do, not what private companies can. ⚠ State Variation: Workplace privacy and free speech protections vary dramatically by state. Some states have strong protections for off-duty conduct and political activity; others have very few. Check your state's specific privacy laws. Your private employer can, in most cases, create their own rules about what is acceptable speech for their employees. If they have a policy that says you cannot post political content online, and you violate that policy, they can generally fire you. It is unfair, but it is not illegal. There are some exceptions. You cannot be fired for speech that is part of a protected concerted activity (like Jamal complaining about wages with his co-workers under the NLRA) or for speech that opposes illegal discrimination. But for general political or social commentary, your rights are very limited. BIPA: The Illinois Privacy Shield Illinois's Biometric Information Privacy Act (BIPA) is one of the strongest privacy laws in the nation. It sets out strict rules for any company that collects biometric data (fingerprints, face scans, etc.). BIPA requires employers to:

Have a written, public policy for data retention and destruction.

Inform you in writing that your data is being collected and for what purpose. Receive a written release from you before collecting the data. If an employer violates BIPA, you can sue for $1,000 for each negligent violation and $5,000 for each intentional or reckless one. However, a critical 2024 amendment changed the damages landscape: on August 2, 2024, Illinois Governor Pritzker signed SB 2979, which amended BIPA to clarify that violations against the same person are treated as a single violation, regardless of how many times the data was collected or disclosed. In other words, damages are now calculated on a per-person basis, not a per-scan basis. The $1,000/$5,000 figures remain accurate, but a worker can no longer claim separate damages for each individual scan. This significantly reduces the financial exposure compared to the prior interpretation, but BIPA remains one of the strongest biometric privacy laws in the nation. By failing to get Jamal's written consent, his employer clearly violated BIPA. A Warning on Recording Conversations Be warned: secretly recording a "private conversation" in Illinois without everyone's consent is a felony. A private conversation is one where there is a reasonable expectation of privacy (e.g., a closed-door office meeting). Due to the legal risk, you should not secretly record conversations with your employer in Illinois. Focus on creating a paper trail instead. ⚠ State Variation: Illinois is an all-party consent state, but most U.S. states are one-party consent states, meaning you can legally record a conversation you are a party to without the other person's knowledge. If you are in a one-party consent state (such as Texas, Florida, New York, or California for in-person conversations), the ability to record a conversation where you are being harassed, threatened, or pressured may be your most powerful piece of contemporaneous evidence. Check your state's recording law before deciding. A single recorded conversation can be worth more than a hundred pages of notes. THE TOOLKIT The Toolkit CONCEPT WHAT IT MEANS WHY IT MATTERS TO YOU First Amendment Protects you from the government, not your private employer. Do not assume you have a right to "free speech" at your private-sector job. BIPA The Illinois Biometric Information Privacy Act. A powerful law that gives you control over your fingerprints, face scans, and other biometric data. Written Consent Your employer MUST get your written permission before collecting your biometric data in Illinois. If they did not, they have likely violated the law. Protected Concerted Activity Speech with or on behalf of co-workers about your terms and conditions of employment. This type of speech is protected, even in the private sector, under the NLRA. Remember: S.P.E.E.C.H. A mnemonic for your speech and privacy rights: LETTER STANDS FOR THE ACTION S Social Media Assume your employer can see it. P Private Employer The First Amendment does not apply. E Exceptions Speech about wages or discrimination is protected. E Eavesdropping Do not secretly record conversations in Illinois. C Consent Your employer needs your written consent for BIPA. H Handwriting A paper trail is always better than a recording.

Five Real-World Scenarios

Scenario 1: The Political Post. An employee posts a controversial political opinion on his public Twitter account. His employer has a clear social media policy that prohibits employees from engaging in online behavior that could damage the company's reputation. The employer can legally fire him.

Scenario 2: The BIPA Violation. A company installs a new fingerprint scanner for building access. They do not provide employees with a written policy or get their written consent. Every single scan is a violation of BIPA. The company is now exposed to a massive class-action lawsuit.

Scenario 3: The Secret Recording. An employee secretly records a meeting with his boss where he is being fired. In Illinois, this is likely a felony. The recording is inadmissible in court and the employee could face criminal charges.

Scenario 4: The Protected Speech. A group of employees starts a private Facebook group to complain about their low wages and poor working conditions. The employer finds out and fires the organizer. This is illegal retaliation, as the speech was "protected concerted activity" under the National Labor Relations Act.

Scenario 5: The Off-Duty Conduct. An employee is a member of a controversial but legal off-duty organization. His employer fires him, claiming his membership violates company values. In some states, this might be illegal under an "off-duty conduct" law. In Illinois, the protections are weaker, and the firing is likely legal. DECODER RING: Biometric Information Any information based on an individual's unique biological characteristics, such as a fingerprint, voiceprint, or scan of hand or face geometry. It is your most personal data, and BIPA protects it like a fortress. The Algorithmic Shadow: When Surveillance Chills Your Right to Organize The intersection of workplace surveillance and the right to organize is one of the most urgent battlegrounds in modern labor law. Employers have always monitored workers, but AI-powered surveillance tools have transformed monitoring from periodic observation into continuous, granular data collection that can detect, predict, and suppress organizing activity before it gains momentum. Modern bossware and digital monitoring tools can track which employees communicate with each other, how frequently, and about what topics. Natural language processing algorithms can scan internal communications for keywords associated with unionization, collective complaints, or labor organizing. Sentiment analysis tools can flag employees whose communications suggest dissatisfaction or solidarity with coworkers. Predictive models can identify "flight risks" or "disengagement patterns" that correlate with organizing activity. This creates a profound chilling effect on the exercise of rights protected by the National Labor Relations Act (NLRA). Section 7 of the NLRA guarantees employees the right to engage in "concerted activities for the purpose of collective bargaining or other mutual aid or protection." When an employer deploys AI surveillance that can identify and flag these very activities, the right exists on paper but is suppressed in practice. The National Labor Relations Board (NLRB) has begun to address this. In October 2022, NLRB General Counsel Jennifer Abruzzo issued Memorandum GC 23-02, warning that employers' use of electronic monitoring and algorithmic management could violate the NLRA if it tends to interfere with, restrain, or coerce employees in the exercise of their Section 7 rights. The memo specifically identified AI-driven surveillance as a potential unfair labor practice. Plaintiff-Side Insight: If you are involved in organizing activity and your employer uses digital monitoring tools, document the surveillance. Note which tools are deployed, what data they collect, and whether monitoring increased after organizing began. Under the NLRA, surveillance of protected concerted activity is itself an unfair labor practice. The algorithm that watches you organize may be the evidence that proves your employer violated your rights. CLOCKED IN Clocked In The First Amendment is Not Your Shield: In the private sector, your free speech rights are extremely limited. BIPA is Your Sword: In Illinois, BIPA gives you powerful rights over your biometric data. Know them and use them. Do Not Record: Secretly recording conversations in Illinois is a legal minefield. Do not do it. In the next chapter, we enter the process: how to file a charge with the EEOC and IDHR, and what to expect when you do. Before You Move On ▢ ▢ ▢ ▢ ▢ CH A P T E R 1 1 A C T I O N C H E C K L I S T I understand my rights regarding workplace monitoring and surveillance I know whether my employer has a monitoring policy and what it covers I have documented any instances where monitoring was used selectively or punitively against me I understand my right to discuss wages and working conditions with coworkers I have preserved evidence of any surveillance or monitoring that may be discriminatory SECTION SUMMARY This chapter explains that the First Amendment's protection of free speech generally does not prevent private employers from firing you for what you say, particularly online. In Illinois, however, the Biometric Information Privacy Act (BIPA) gives you significant rights over your biometric data, such as fingerprints and facial scans, by requiring your employer to get your written consent. It is also a felony in Illinois to secretly record conversations at work. The chapter advises you to review your social media, understand your company's policies, and never secretly record conversations.

Resumen en español

Este capítulo explica que, por lo general, la Primera Enmienda no te protege de ser despedido por tu empleador privado debido a tus expresiones, especialmente en línea. Sin embargo, en Illinois, la Ley de Privacidad de la Información Biométrica (BIPA) te otorga importantes derechos sobre tus datos biométricos, como huellas dactilares y escaneos faciales, al exigir que tu empleador obtenga tu consentimiento por escrito. Es crucial que sepas que grabar conversaciones en secreto en el trabajo es un delito grave en Illinois. El capítulo aconseja revisar tus redes sociales, comprender las políticas de tu empresa y nunca grabar conversaciones en secreto. Recuerda que, si bien tu libertad de expresión es limitada, tienes un poder significativo para proteger tu privacidad biométrica. PART IV The Process "The arc of the moral universe is long, but it bends toward justice." , Theodore Parker

Educational publication

This chapter provides general information, not advice about a specific situation. Do not submit confidential facts through the book reader.