This is actually a source of much talk in many corporate circles and in the public sector circle, as well.  In fact, many states consider this an invasion of privacy -- no different than HIPAA. Talk to your state's dept of labor to see if it has issued rules/guidance/opinions/orders on this very issue. Try http://www.dli.mn.gov/main.asp