Bill Text: MO HB706 | 2013 | Regular Session | Introduced


Bill Title: Establishes the Password Privacy Protection Act which prohibits an employee from being required to disclose personal user names or passwords

Spectrum: Partisan Bill (Republican 1-0)

Status: (Introduced - Dead) 2013-05-17 - Referred: Workforce Development and Workplace Safety(H) [HB706 Detail]

Download: Missouri-2013-HB706-Introduced.html

FIRST REGULAR SESSION

HOUSE BILL NO. 706

97TH GENERAL ASSEMBLY


 

 

INTRODUCED BY REPRESENTATIVE FUNDERBURK.

1676L.01I                                                                                                                                                  D. ADAM CRUMBLISS, Chief Clerk


 

AN ACT

To amend chapter 285, RSMo, by adding thereto one new section relating to employee password protection.




Be it enacted by the General Assembly of the state of Missouri, as follows:


            Section A. Chapter 285, RSMo, is amended by adding thereto one new section, to be known as section 285.045, to read as follows:

            285.045. 1. This section shall be known and may be cited as "The Password Privacy Protection Act".

            2. As used in this section, the following terms shall mean:

            (1) "Applicant", any person applying for employment;

            (2) "Electronic communications device", any device that uses electronic signals to create, transmit, and receive information which shall include, but not be limited to, computers, telephones, personal digital assistants, and other similar devices;

            (3) "Employee", any person performing work or service of any kind or character for hire within the state of Missouri, including independent contractors;

            (4) "Employer", any person or entity employing any person for hire within the state of Missouri, including a public employer;

            (5) "Employment", the act of employing or state of being employed, engaged, or hired to perform work or services of any kind or character within the state of Missouri;

            (6) "Personal online account", an online account that is used by an employee or applicant exclusively for personal communications unrelated to any business purposes of the employer. Such account shall not include any account created, maintained, used, or accessed by an employee or applicant for business related communications or for a business purpose of the employer;

            (7) "Personal online service", an online service that is used by an employee or applicant exclusively for personal communication or use unrelated to any business purposes of the employer. Such service shall not include any service maintained, used, or accessed by an employee or applicant for business related communications or uses or for a business purpose of the employer;

            (8) "Political subdivision", any agency of the state, county, city, town, township, village, special district or subdistrict, or any unit of the state authorized to levy taxes;

            (9) "Public employer", every department, agency, or instrumentality of the state or political subdivision of the state;

            (10) "Work", any job, task, labor, services, or any other activity for which compensation is provided, expected, or due.

            3. Subject to the exceptions provided in subsection 4 of this section, an employer shall not request or require an employee or applicant to disclose any user name, password, or other authentication means for accessing any personal online account or personal online service.

            4. An employer may request or require an employee to disclose any user name, password, or other authentication means for accessing:

            (1) Any electronic communications device supplied by or paid for in whole or in part by the employer;

            (2) Any accounts or services provided by the employer;

            (3) Any accounts or services the employee uses for business purposes; or

            (4) Any accounts or services used as a result of the employee's employment relationship with the employer.

            5. An employer shall not:

            (1) Discharge, discipline, or otherwise penalize or threaten to discharge, discipline, or otherwise penalize an employee solely for an employee's refusal to disclose any information specified in subsection 3 of this section;

            (2) Fail or refuse to hire any applicant as a result of the applicant's refusal to disclose any information specified in subsection 3 of this section; or

            (3) Be held liable for failure to request or require that an applicant or employee disclose any information specified in subsection 3 of this section.

            6. An employee shall not transfer an employer's proprietary or confidential information or financial data to an employee's personal online account or personal online service without the employer's authorization.

            7. This section shall not be construed to prevent an employer from engaging in any of the following activities:

            (1) Conducting an investigation for the purposes of ensuring compliance with applicable laws or regulations against work-related employee misconduct based on the receipt of specific information about activity on a personal online account or personal online service by an employee or other source;

            (2) Conducting an investigation of an employee's actions based on the receipt of specific information about the unauthorized transfer of an employer's proprietary information, confidential information or financial data to a personal online account or personal online service by an employee or other source;

            (3) Conducting an investigation as specified in subdivision (1) or (2) of this subsection that requires the employee's cooperation to share the content that has been reported in order to make a factual determination;

            (4) Disciplining or discharging an employee for transferring the employer's proprietary or confidential information or financial data to an employee's personal internet account without the employer's authorization;

            (5) Restricting or prohibiting an employee's access to certain websites while using an electronic communications device that is paid for in whole or in part by the employer or while using an employer's network or resources, in compliance with state and federal law; or

            (6) Monitoring, reviewing, accessing, or blocking electronic data stored on an electronic communications device that is paid for in whole or in part by the employer, or such data that is traveling through or stored on an employer's network, in compliance with state and federal law.

            8. This section shall not prohibit or restrict any employer from viewing, accessing, or utilizing information about any employee or applicant that can be obtained without the information specified in subsection 3 of this section or that is available to the public.

            9. This section shall not be construed to prevent an employer from complying with state or federal laws or regulations or the rules of self-regulatory organizations as that term is defined in 15 U.S.C. Section 78c(a)(26).

feedback