|
| | 09800HB1047ham001 | - 2 - | LRB098 04224 JLS 41247 a |
|
|
| 1 | | user name and password, password, or other means of |
| 2 | | authentication related account information in order to gain |
| 3 | | access to the employee's or prospective employee's account or |
| 4 | | profile on a social networking website or to demand access in |
| 5 | | any manner to an employee's or prospective employee's personal |
| 6 | | online account or profile on a social networking website. |
| 7 | | (2) An employer may request or require an employee to |
| 8 | | disclose any user name and password, password, or other means |
| 9 | | of authentication for accessing: |
| 10 | | (A) any electronic communications device supplied or |
| 11 | | paid for in whole or in part by the employer; or |
| 12 | | (B) any accounts or services provided by the employer |
| 13 | | or by virtue of the employee's employment relationship with |
| 14 | | the employer or that the employee uses for business |
| 15 | | purposes. |
| 16 | | (3) An employer may not: |
| 17 | | (A) discharge, discipline, or otherwise penalize or |
| 18 | | threaten to discharge, discipline, or otherwise penalize |
| 19 | | an employee solely for an employee's refusal to disclose |
| 20 | | any information specified in paragraph (1) of this |
| 21 | | subsection (b); |
| 22 | | (B) fail or refuse to hire any prospective employee as |
| 23 | | a result of the prospective employee's refusal to disclose |
| 24 | | any information specified in paragraph (1) of this |
| 25 | | subsection (b); or |
| 26 | | (C) be held liable for failure to request or require |
|
| | 09800HB1047ham001 | - 3 - | LRB098 04224 JLS 41247 a |
|
|
| 1 | | that an employee or prospective employee disclose any |
| 2 | | information specified in paragraph (1) of this subsection |
| 3 | | (b). |
| 4 | | (4) Nothing in this subsection shall prevent an employer |
| 5 | | from conducting an investigation: |
| 6 | | (A) for the purpose of ensuring compliance with |
| 7 | | applicable laws, regulatory requirements, or prohibitions |
| 8 | | against work-related employee misconduct based on the |
| 9 | | employer's receipt of specific information about activity |
| 10 | | on a personal online account by an employee or other |
| 11 | | source; |
| 12 | | (B) for the purpose of investigating violations of |
| 13 | | applicable laws, regulatory requirements, or prohibitions |
| 14 | | against work-related employee misconduct based on the |
| 15 | | employer's receipt of specific information about activity |
| 16 | | on a personal online account by an employee or other |
| 17 | | source; |
| 18 | | (C) for the purpose of protecting the security of the |
| 19 | | employer's computers, networks, or system based on the |
| 20 | | employer's receipt of specific information about activity |
| 21 | | on a personal online account by an employer or other |
| 22 | | source;
or |
| 23 | | (D) of an employee's actions based on the receipt of |
| 24 | | specific information about the unauthorized transfer of an |
| 25 | | employer's proprietary information, confidential |
| 26 | | information, or financial data to a personal online account |
|
| | 09800HB1047ham001 | - 4 - | LRB098 04224 JLS 41247 a |
|
|
| 1 | | by an employee or other source. |
| 2 | | Conducting an investigation as specified in subparagraphs |
| 3 | | (A), (B), (C), and (D) of this paragraph (4) includes requiring |
| 4 | | the employee's cooperation to share information that is |
| 5 | | relevant to making a factual determination concerning the |
| 6 | | matter that has been reported. |
| 7 | | (5) (2) Nothing in this subsection shall limit an |
| 8 | | employer's right to: |
| 9 | | (A) promulgate and maintain lawful workplace policies |
| 10 | | governing the use of the employer's electronic equipment, |
| 11 | | including policies regarding Internet use, social |
| 12 | | networking site use, and electronic mail use; and |
| 13 | | (B) monitor usage of the employer's electronic |
| 14 | | equipment and the employer's electronic mail without |
| 15 | | requesting or requiring any employee or prospective |
| 16 | | employee to provide any user name and password, password, |
| 17 | | or other means of authentication related account |
| 18 | | information in order to gain access to the employee's or |
| 19 | | prospective employee's personal online account; and or |
| 20 | | profile on a social networking website. |
| 21 | | (C) comply with the requirements of State or Federal |
| 22 | | statutes, rules or regulations, case law, or rules of |
| 23 | | self-regulatory organizations. |
| 24 | | (6) (3) Nothing in this subsection shall prohibit an |
| 25 | | employer from obtaining about a prospective employee or an |
| 26 | | employee information that is in the public domain or that is |
|
| | 09800HB1047ham001 | - 5 - | LRB098 04224 JLS 41247 a |
|
|
| 1 | | otherwise obtained in compliance with this amendatory Act of |
| 2 | | the 97th General Assembly. |
| 3 | | (7) (4) For the purposes of this subsection: , |
| 4 | | (A) "Prospective employee" means an applicant for |
| 5 | | employment. |
| 6 | | (B) "Electronic communications device" means any |
| 7 | | device that uses electronic signals to create, transmit, |
| 8 | | and receive information, including, without limitation, a |
| 9 | | computer, telephone, or personal digital assistant. |
| 10 | | (C) "Employer" means a person engaged in a business, |
| 11 | | industry, profession, trade, or other enterprise in this |
| 12 | | State, or any unit of State or local government. "Employer" |
| 13 | | includes any agent, representative, or designee of the |
| 14 | | employer. |
| 15 | | (D) "Personal online account" means an account created |
| 16 | | via bounded system established by an internet-based |
| 17 | | service that requires a user to input or store access |
| 18 | | information via an electronic device to view, create, |
| 19 | | utilize, or edit the user's account information, profile, |
| 20 | | display, communications, or stored data. |
| 21 | | (E) "Network" means a set of related, remotely |
| 22 | | connected devices and facilities, including more than one |
| 23 | | system, with the capability to transmit data among any of |
| 24 | | the devices and facilities. The term includes, without |
| 25 | | limitation, a local, regional, or global computer network. |
| 26 | | (F) "System" means a set of related equipment, whether |
|
| | 09800HB1047ham001 | - 6 - | LRB098 04224 JLS 41247 a |
|
|
| 1 | | or not connected, that is used with or for a computer. |
| 2 | | "social networking website" means an Internet-based |
| 3 | | service that allows individuals to: |
| 4 | | (A) construct a public or semi-public profile within a |
| 5 | | bounded system, created by the service; |
| 6 | | (B) create a list of other users with whom they share a |
| 7 | | connection within the system; and |
| 8 | | (C) view and navigate their list of connections and |
| 9 | | those made by others within the system. |
| 10 | | "Social networking website" shall not include electronic |
| 11 | | mail. |
| 12 | | (Source: P.A. 97-875, eff. 1-1-13.)
|
| 13 | | Section 99. Effective date. This Act takes effect upon |
| 14 | | becoming law.".
|