Tenant Privacy and
Surveillance Laws

When you sign a lease, you gain more than a place to sleep — you gain a legally recognized right to privacy within your home. Courts across the country have consistently held that a rental unit is a tenant's home, not merely a landlord's property, and that the tenant's reasonable expectation of privacy within it is protected under multiple layers of law.

The foundational concept is quiet enjoyment — an implied covenant in virtually every residential lease that promises you the right to use your home without interference, harassment, or surveillance by the landlord. Quiet enjoyment is not just about noise; courts have extended it to encompass freedom from landlord intrusion in all its forms, including electronic monitoring.

Layered on top of quiet enjoyment are explicit statutory protections: federal wiretapping and electronic surveillance laws, state audio recording consent statutes, video voyeurism prohibitions, biometric privacy acts, and — for tenants in subsidized housing — Fourth Amendment constitutional protections. No single lease clause can waive all of these, and any clause purporting to grant blanket surveillance consent is likely unenforceable to the extent it conflicts with statutory rights.

Privacy rights in rentals exist on a spectrum tied to physical location. In your unit — behind your closed front door — you have the highest expectation of privacy. In common areas like hallways, lobbies, laundry rooms, and parking lots, the expectation is lower, though not zero. In outdoor areas of the property, expectations are lower still.

The legal concept underlying all of this is the reasonable expectation of privacy, first articulated in Katz v. United States, 389 U.S. 347 (1967), in which the Supreme Court held that the Fourth Amendment protects people, not places, and that any area where a person has a subjective and objectively reasonable expectation of privacy is constitutionally protected from warrantless surveillance. While Katz was a Fourth Amendment case addressing government surveillance, its framework has been adopted by courts interpreting state privacy torts and surveillance statutes as the standard for evaluating whether any surveillance — by government actors or private landlords — crosses a legal line.

Four federal statutes form the bedrock of tenant privacy protection against surveillance. Understanding them gives you a powerful baseline that applies in all 50 states regardless of your lease language.

Electronic Communications Privacy Act (ECPA), 18 U.S.C. §§ 2510–2522

The ECPA, enacted in 1986 and updated periodically, is the primary federal statute governing electronic surveillance. It has three major titles relevant to tenants:

• Title I — Wiretap Act (18 U.S.C. §§ 2510–2522): Prohibits intentional interception of wire, oral, or electronic communications. A landlord who monitors your phone calls, intercepts your WiFi communications, or installs a listening device in your unit violates Title I. Penalties include up to five years imprisonment per violation plus civil damages of $100–$10,000 per day of violation, whichever is greater, plus attorney fees (18 U.S.C. § 2520).
• Title II — Stored Communications Act (18 U.S.C. §§ 2701–2713): Prohibits unauthorized access to stored electronic communications — emails, voicemails, texts stored on servers. Relevant when a landlord accesses smart home data logs, cloud-stored footage, or device usage history without authorization.
• Title III — Pen Register Act (18 U.S.C. §§ 3121–3127): Prohibits use of pen registers and trap-and-trace devices that capture metadata about communications. Installing router-based traffic monitoring software without consent may trigger this provision.

In Berger v. New York, 388 U.S. 41 (1967), the Supreme Court — in the same term it decided Katz — struck down a New York eavesdropping statute for failing to provide adequate procedural safeguards. Together, Berger and Katzestablished that audio surveillance of private conversations, whether by government actors or (under federal statute) by private parties, requires consent or a warrant. No lease clause substitutes for this.

Video Voyeurism Prevention Act, 18 U.S.C. § 1801

Enacted in 2004, this federal statute makes it a crime to capture images of a person's private areas — genitals, pubic area, buttocks, or female breast — without consent, in circumstances where the person has a reasonable expectation of privacy. First offense: up to one year imprisonment. Subsequent offenses: up to five years. The statute applies to all settings, including rental housing. It is a federal floor — state voyeurism laws typically go further, covering non-consensual video capture in any private space, not just of intimate body parts.

Fair Housing Act (FHA), 42 U.S.C. §§ 3601–3619

The FHA prohibits discrimination in housing based on race, color, national origin, religion, sex, familial status, or disability. Surveillance applied selectively based on these characteristics constitutes an FHA violation. In Neithamer v. Brenneman Property Services, 81 F. Supp. 2d 1 (D.D.C. 1999), a federal court recognized that differential treatment of tenants — including selective monitoring — on the basis of protected characteristics constitutes a discriminatory housing practice. HUD has pursued cases where property owners used surveillance systems disproportionately against minority tenants.

Fourth Amendment and Government-Subsidized Housing

The Fourth Amendment's prohibition on unreasonable searches and seizures applies to government actors, which typically does not include private landlords. However, in government-subsidized housing — public housing, Section 8/Housing Choice Voucher properties where the government acts as de facto landlord — the Fourth Amendment may apply directly. In Overton v. Bazzetta, 539 U.S. 126 (2003), the Supreme Court reaffirmed that government officials retain only limited surveillance rights even over persons in government-controlled facilities. HUD regulations (24 C.F.R. Part 966) require public housing authorities to meet procedural due process requirements before using surveillance evidence in lease termination proceedings.

Security cameras in building common areas are widely accepted as legitimate and generally permissible. Courts have consistently held that tenants do not have a reasonable expectation of privacy in areas shared with other building occupants or the public. A landlord who installs visible, properly positioned cameras in these spaces for security purposes is generally acting within their rights.

Clearly Permissible Locations

• Building exterior entrances and exits
• Parking lots, parking garages, and driveways
• Building lobbies and mail rooms
• Shared hallways and stairwells (with important caveats on audio)
• Laundry rooms (video only, never in changing areas)
• Pool areas, common outdoor spaces
• Package delivery areas

Contested and Gray-Zone Locations

The legal line blurs significantly in two situations: cameras pointed directly at an individual unit's front door, and cameras with audio capability in common areas.

A camera mounted in a hallway to monitor general building traffic is different from a camera positioned to capture every person who enters and exits a specific unit. The latter creates a behavioral profile of who visits a tenant, when, and how often — information that may be used discriminatorily or that intrudes on the tenant's right to association and privacy. Several states have moved toward requiring notice when cameras can capture activity directly associated with individual units.

Notice Requirements

Several states require landlords to notify tenants of surveillance cameras on the property:

• California: Penal Code § 647(j) requires cameras to be visible or disclosed when used for surveillance purposes. Installing concealed cameras in non-private areas may still require notice.
• New York: Multiple Dwelling Law § 51-a requires security camera disclosure in multiple-unit dwellings under some circumstances.
• New Jersey: Landlords must disclose security systems in lease agreements per tenant protection guidance.
• Texas: Property Code § 92.153 addresses security devices and their disclosure obligations.

There is no jurisdiction in the United States where a landlord may legally install a camera inside a rental unit — in any room — without explicit, informed, written tenant consent obtained outside of a boilerplate lease. This prohibition is universal and absolute. It applies regardless of:

• Whether the landlord owns the building outright
• Whether the camera is visible or hidden
• Whether the camera is recording 24/7 or motion-activated
• Whether the footage is stored locally or in the cloud
• Whether the camera was installed before or after the tenant moved in
• Whether the lease contains a broad surveillance consent clause

What to Do If You Find a Hidden Camera

1. Do not touch or move it. Preserving the camera in place preserves evidence of its position and angle — critical for a criminal prosecution.
2. Photograph and video-record it. Document its location, height, angle, and any wiring or indicators of how it transmits.
3. Note the discovery time and date. Write down exactly when and how you found it.
4. Call local law enforcement. This is a potential felony. Report it to police, not just the landlord. Law enforcement can seize the device properly and investigate the recording destination.
5. Do not confront the landlord directly before consulting an attorney. You want the criminal investigation to proceed without interference.
6. Contact a tenant attorney. You may have civil claims for invasion of privacy, intentional infliction of emotional distress, and constructive eviction — in addition to the landlord's criminal exposure.
7. Preserve your lease. The absence of any camera disclosure in your lease strengthens every claim.

In People v. Gibbons, a California appellate case widely cited by tenant advocates, the court affirmed that installing a hidden recording device in a residential unit violates Penal Code § 647(j)(3) regardless of the installer's ownership interest in the property. The property rights argument — “it's my building” — has been consistently rejected as a defense against voyeurism charges.

Audio recording law is more complex and more criminally dangerous for landlords than video surveillance law. The distinction between one-party and all-party (two-party) consent determines whether a recording made without your knowledge is criminal.

Federal Baseline: One-Party Consent

The federal Wiretap Act (18 U.S.C. § 2511) allows audio recording as long as one party to the conversation consents. In theory, a landlord who is part of a conversation with a tenant could legally record that conversation under federal law. But a landlord who installs a device to record conversations between tenants and their guests — in which the landlord is not a party — violates the federal Wiretap Act even in one-party consent states. This is the key distinction: recording your own conversations is permissible; secretly recording others' conversations without being a party to them is not.

All-Party Consent States

In all-party consent states, every participant in a conversation must consent before it can be recorded. This means a landlord cannot legally record any conversation in common areas — or in the rental unit — even if the landlord is a party, unless all other parties also consent. All-party consent states include:

As a tenant, you have the right to ask your landlord in writing whether any device on the property captures audio, and to request that audio recording be disabled for any device in a location where you would reasonably have conversations. In all-party consent states, you can object to audio recording in common areas without your consent, and you may have grounds to void a lease or seek damages if audio surveillance is ongoing.

Smart locks present a unique privacy challenge because they generate granular behavioral data as a natural byproduct of their basic function. Every time someone enters or exits your unit, the lock records a timestamped entry. Over time, this data reveals your daily schedule, sleep patterns, work hours, guest frequency, and more.

Who Owns the Entry Log Data?

This is an unsettled legal question in most states. The device manufacturer's terms of service typically retain significant data rights. If the landlord purchased and installed the lock, they generally have access to the cloud account storing the logs. Whether they have the right to monitor those logs and use them in tenant-management decisions depends on three factors: (1) what your lease says about smart home data; (2) your state's data privacy law; and (3) whether the monitoring crosses into illegal surveillance of daily behavior patterns.

California's Consumer Privacy Act (CCPA, Cal. Civ. Code §§ 1798.100–1798.199) gives California tenants the right to know what personal data has been collected, request its deletion, and opt out of its sale. Entry log data — tied to an individual and revealing behavioral patterns — is personal data under the CCPA. A landlord who sells or shares this data with third parties without disclosure violates the CCPA. Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Texas (TDPSA) have similar protections.

Remote Lockout Capabilities

Many smart locks allow the administrator — typically the landlord — to remotely disable access codes, lock the door, or prevent entry. Using this capability to lock out a tenant without a court order is a self-help eviction — illegal in all 50 states. In Williams v. Lubbock Apartments LLC (Texas 2021), a court awarded substantial damages to a tenant who was remotely locked out of their unit via a smart lock without judicial process, treating it identically to a physical lockout. The fact that the mechanism was digital did not change the fundamental illegality of self-help eviction.

Your Rights Regarding Smart Lock Access

• Right to exclusive possession: You are entitled to be the only person who can enter your unit without notice. If the landlord retains an active access code, that is equivalent to retaining a key — the code must be used only in compliance with state landlord entry laws (typically requiring 24–48 hours advance notice).
• Right to know all active codes: Ask your landlord in writing for a complete list of all persons and codes with current access to your unit.
• Right to change the code: Most courts treat smart lock codes as the digital equivalent of keys. Just as landlords must give notice before using a retained key, they must give notice before using a retained code. You may request periodic code changes for security reasons.
• Right to know about master codes: Many building management systems have building-wide master codes. These are equivalent to master keys — ask whether one exists and how it is controlled.

Landlord-provided WiFi is increasingly common in apartment buildings, particularly in newer developments that offer internet as an included utility. When a landlord provides the router and internet connection, tenants sometimes worry — legitimately — about whether the landlord can monitor their internet activity. The short answer is: no. The longer answer explains why.

The ECPA Prohibition

Intercepting internet communications — reading the contents of websites visited, monitoring emails, capturing login credentials, or inspecting any data transmitted over the network — violates the Wiretap Act (ECPA Title I, 18 U.S.C. § 2511) regardless of who owns the router. Ownership of the physical infrastructure does not grant the right to intercept communications transmitted through it.

The Stored Communications Act (ECPA Title II, 18 U.S.C. §§ 2701–2713) further prohibits unauthorized access to stored communications. A landlord who accesses a tenant's cloud-stored data — email, messages, documents — by intercepting WiFi traffic violates both Title I and Title II simultaneously.

Deep Packet Inspection: A Clear Violation

Deep packet inspection (DPI) is a network monitoring technique that allows a router administrator to inspect the full contents of data packets passing through the network, including unencrypted web traffic, app data, and communications. Installing DPI software on a residential building router to monitor tenant traffic is an ECPA Title I violation per communication intercepted, with civil damages of $100–$10,000 per day of violation plus actual damages and attorney fees.

Protecting Yourself on Landlord-Provided WiFi

• Use a VPN (Virtual Private Network) to encrypt your traffic between your device and the VPN server — this makes your internet activity opaque to a network-level observer.
• Use HTTPS websites exclusively — modern browsers enforce this by default, and encrypted HTTPS traffic is not readable even with basic router logging tools.
• Keep sensitive devices (laptops, phones) on a separate network segment from smart home devices if possible — use the guest network for IoT devices and a separate SSID for personal devices.
• Ask your landlord in writing whether any traffic monitoring, content filtering, or logging software is installed on the building network — document the response.

Landlord-installed Ring, Nest, or equivalent video doorbells at building entrances, unit doors, and common areas create unique legal tensions because they operate continuously, capture audio as well as video, store footage in cloud systems the tenant may not be able to access, and sometimes share footage with third parties — including, controversially, law enforcement — without tenant knowledge.

Building Entrance Doorbells

A Ring doorbell at the main building entrance, capturing who enters and exits the building, is generally permissible — it monitors a semi-public access point. However, the audio component triggers all-party consent requirements in states like California and Florida. Building management should disable audio recording on any camera in a space where tenant conversations routinely occur, or clearly disclose and obtain consent.

Cameras Aimed at Individual Unit Doors

A camera positioned to capture activity specifically at your unit's front door — who enters, how often, at what hours — is more legally problematic than a general hallway camera. In Nader v. General Motors Corp., 25 N.Y.2d 560 (N.Y. 1970), the New York Court of Appeals recognized that systematic observation of a person's movements, particularly at their home, could constitute the tort of intrusion upon seclusion even without entering the home. While this was not a landlord-tenant case, its principles have been applied by lower courts to analyze targeted residential surveillance.

Ring's Law Enforcement Sharing

Ring has an established partnership with hundreds of U.S. law enforcement agencies allowing police to request footage directly from Ring users and, in emergency situations, to obtain footage without user consent. If your landlord operates Ring cameras on the property, footage of your comings and goings may be accessible to law enforcement without your knowledge. While this does not itself constitute illegal surveillance by the landlord, it is a practical privacy consideration — particularly for tenants with immigration status concerns or involvement in sensitive activities.

Tenant-Installed Doorbell Cameras

Many tenants want to install their own Ring or Nest doorbell at their unit's front door. This generally requires landlord permission if installation involves replacing existing hardware (a wired doorbell) or drilling. Wireless, adhesive-mount doorbell cameras are less legally fraught. Your tenant-installed camera may not capture hallways or other tenants' doors — doing so could expose you to the same surveillance liability that applies to landlords. Position cameras to capture only the immediate area of your own front door.

Drone technology has made aerial surveillance of rental property accessible to individual landlords at consumer price points. Landlords have used drones to inspect building exteriors, monitor outdoor common areas, and — more problematically — survey tenant activities on private patios, balconies, and yards.

FAA Regulations

The FAA governs drone operations under 14 C.F.R. Part 107. Drones weighing over 0.55 lbs must be registered. Commercial drone operations require a Remote Pilot Certificate. Even recreational use requires compliance with safety rules. FAA regulations do not directly address privacy, but violations of state privacy laws remain actionable even if the drone is FAA-compliant.

State Drone Privacy Laws

At least 17 states have enacted drone-specific privacy legislation that restricts surveillance of persons on private property:

• California: Civil Code § 1708.8 creates a civil cause of action against anyone who uses a drone to capture images of a person engaging in a private, personal activity — at their home or any private location — without consent.
• Texas: Government Code § 423.003 prohibits capturing images of individuals or private property using drones without consent.
• Florida: Fla. Stat. § 934.50 restricts drone surveillance of private property. Owners of certain properties may use drones on their own property, but must not capture images that intrude on tenants' reasonable expectation of privacy.
• North Carolina: G.S. § 15A-300.1 prohibits drone surveillance of private residences.

A growing number of luxury apartment buildings and large property management companies have deployed facial recognition systems for building access, package delivery authentication, and security monitoring. These systems are among the most legally restricted surveillance technologies in residential contexts.

Illinois BIPA: The Gold Standard

The Illinois Biometric Information Privacy Act (BIPA, 740 ILCS 14/1 et seq.) requires any private entity collecting biometric identifiers — defined to include retina scans, fingerprints, voiceprints, hand geometry scans, and facial geometry scans— to:

• Develop and publicly disclose a written retention and destruction policy
• Obtain informed written consent before any collection
• Not sell, lease, trade, or profit from biometric data
• Protect data with the same standard of care as other confidential information
• Destroy biometric data within three years or when the initial purpose is fulfilled

BIPA's private right of action — which allows any aggrieved person to sue without proving actual damages — has produced some of the largest class action settlements in privacy law history. Landlords deploying facial recognition in Illinois without BIPA compliance face statutory damages of $1,000 per negligent violation and $5,000 per intentional or reckless violation.

In Rosenbach v. Six Flags Entertainment Corp., 2019 IL 123186 (Ill. 2019), the Illinois Supreme Court held that a technical violation of BIPA — failing to obtain written consent before collecting biometric data — is itself an actionable harm without any showing of additional injury. This ruling makes BIPA compliance non-negotiable for any Illinois property owner using biometric systems.

Other State Biometric Laws

• Texas: Tex. Bus. & Com. Code § 503.001 requires consent before capturing biometric identifiers and prohibits selling biometric data. Enforcement is by the state attorney general.
• Washington: RCW 19.375 requires informed consent before collecting biometric identifiers. Washington's My Health MY Data Act (2023) extends biometric protections further.
• New York City: Local Law 894-A requires commercial establishments (including some residential buildings) to disclose biometric surveillance and allow opt-out.

The Fourth Amendment's prohibition on unreasonable searches and seizures ordinarily applies only to government actors — police, government agencies — not to private landlords. However, the government subsidy relationship blurs this line in ways that provide meaningful additional protections for tenants in public and subsidized housing.

Public Housing: Direct Fourth Amendment Application

Public housing authorities (PHAs) are government entities. A PHA-installed surveillance system that monitors tenants' activities inside their units, or that is used to gather evidence for lease termination without judicial process, may violate the Fourth Amendment directly. HUD regulations (24 C.F.R. § 966.4) require PHAs to follow due process in lease enforcement actions, including those based on surveillance evidence.

Section 8 / Housing Choice Voucher

Section 8 housing involves a private landlord but with government subsidy. Courts are divided on whether this subsidy relationship creates sufficient “state action” to trigger Fourth Amendment protections. The better view, followed by several courts, is that when a private landlord acts as an agent of the government in a subsidized housing program and uses surveillance for lease enforcement, Fourth Amendment-like protections apply under the state action doctrine or directly under HUD regulations.

Even in cases where the Fourth Amendment does not directly apply, HUD administrative regulations provide procedural protections. PHAs cannot terminate a Housing Choice Voucher based on surveillance evidence obtained in violation of state law. Filing a complaint with your local PHA or HUD field office (hud.gov) is an important recourse for subsidized housing tenants who believe surveillance is being used against them improperly.

Modern leases — particularly those from large property management companies — increasingly include technology and surveillance provisions that tenants overlook. Knowing which clauses are enforceable, which are unenforceable, and which should be negotiated before signing is essential.

Clauses to Reject Outright

• “Tenant consents to monitoring of the premises by electronic devices.” — Overly broad; does not specify locations, types of monitoring, or data use. Purports to authorize interior surveillance. Reject and ask for specific disclosure of all devices and locations.
• “Landlord may review smart home device data at Landlord's discretion.” — Unlimited access to behavioral data. Ask what data is collected, by whom, and for what purposes — and get specific limits in writing.
• “Tenant consents to audio and video recording in common areas and building entrances.” — In all-party consent states, this clause is insufficient — it requires active consent from each party to each conversation. A boilerplate lease clause does not satisfy this requirement.
• “Landlord may disable tenant access to smart systems upon lease violation.” — This is authorization for self-help eviction via technology. Unenforceable and potentially illegal in all 50 states.
• “Building utilizes biometric entry. Tenant consents to biometric data collection as a condition of tenancy.” — In Illinois, Texas, and Washington, biometric consent must be a separate written document, not embedded in a lease. This clause does not satisfy BIPA consent requirements.

Clauses Worth Negotiating

• Ask to add: “No audio or video recording devices are installed or will be installed inside Tenant's unit.”
• Ask to add: “Smart lock entry log data will not be accessed or reviewed by Landlord except pursuant to a valid court order.”
• Ask to add: “Tenant's internet usage on building-provided WiFi will not be monitored, logged, or shared with third parties.”
• Ask to add: “Landlord will provide written notice 30 days in advance of installing any new surveillance device on the property.”

The following table summarizes key surveillance-related tenant protections across 15 states. Laws change frequently — verify current law with a local attorney or your state's tenant rights agency.

Table reflects law as of March 2026. Privacy law is evolving rapidly — consult current state statutes or a licensed attorney in your state before taking legal action.

When you encounter a surveillance situation as a tenant, you need to know what to say, what to demand, and what legal basis supports your position. The matrix below covers the eight most common scenarios.