Q: What data does Meta’s new monitoring software collect? A: Meta employee keystroke monitoring 2026 records keystrokes, mouse movements, click locations, and limited on-screen content within approved work applications on U.S. company laptops. The program targets inputs and screen context to train AI models to understand real computer workflows. Q: Why is Meta collecting employees’ mouse movements and keystrokes? A: The company says the data will train AI agents to learn how people actually use computers, including actions like choosing from dropdowns and using keyboard shortcuts. Business Insider obtained an internal announcement saying real examples from day-to-day work will improve model behavior. Q: Who is covered by the rollout and can employees opt out? A: The rollout applies to U.S.-based full-time employees and contingent workers using company laptops, and internal communications indicate there is no opt-out on work-provided devices. The internal post also specifies the tool applies to computers and not employees’ phones. Q: Which applications and devices are in scope for the monitoring? A: Scope is limited to a pre-approved list of work-related applications and URLs, with examples cited including Gmail, GChat, Metamate, and VSCode, and the monitoring applies only to computers. The announcement says the capture is constrained to those approved tools. Q: What privacy risks should employees be most concerned about? A: Personal email, banking, health portals, and private chats can bleed into monitored inputs if opened on a work device, and clipboard contents like passwords or codes may be exposed if pasted into monitored fields. The guidance is to assume actions on a work laptop are observable to avoid accidental data spillover. Q: What practical steps can employees take to keep personal information private? A: Do personal tasks on a personal phone or home computer, sign out of any personal accounts, disable desktop alerts and clipboard syncing, and avoid storing personal files on work laptops. Also avoid pasting passwords or one-time codes into work devices and use personal authenticators or hardware keys for sensitive logins. Q: How can managers and companies reduce employee anxiety about monitoring? A: Companies can build trust by enforcing strict app whitelists, strong client-side redaction for sensitive fields, aggregating and anonymizing data by default, and restricting raw replay access to a small, audited group. They should also publish retention windows, commission independent audits, document data flows and access controls, and provide clear notices and feedback channels. Q: Is this monitoring covered by law and what should employees handling regulated data do? A: The program is focused on U.S. workers and work devices and state and federal laws still apply, so employees who handle regulated data should confirm specific rules with their compliance teams. The article notes this is general guidance, not legal advice, and recommends reading company policy and internal FAQs for details.