Bill Text: NY S05544 | 2019-2020 | General Assembly | Amended


Bill Title: Prohibits an employer from requesting or requiring that an employee or applicant disclose any user name, password, or other means for accessing a personal account or service through specified electronic communications devices.

Spectrum: Partisan Bill (Democrat 2-0)

Status: (Introduced - Dead) 2020-01-08 - REFERRED TO LABOR [S05544 Detail]

Download: New_York-2019-S05544-Amended.html



                STATE OF NEW YORK
        ________________________________________________________________________

                                         5544--A

                               2019-2020 Regular Sessions

                    IN SENATE

                                       May 6, 2019
                                       ___________

        Introduced  by  Sens.  RAMOS, JACKSON -- read twice and ordered printed,
          and when printed to be committed to the Committee on Labor --  commit-
          tee  discharged, bill amended, ordered reprinted as amended and recom-
          mitted to said committee

        AN ACT to amend the labor law, in relation to  prohibiting  an  employer
          from  requesting  or  requiring that an employee or applicant disclose
          any user name, password, or  other  means  for  accessing  a  personal
          account through specified electronic communications devices

          The  People of the State of New York, represented in Senate and Assem-
        bly, do enact as follows:

     1    Section 1.  The labor law is amended by adding a new section 201-h  to
     2  read as follows:
     3    §  201-h.  Request  for access to personal accounts prohibited. 1. For
     4  purposes of this section, the following words shall have  the  following
     5  meanings:
     6    (a) "Applicant" means an applicant for employment.
     7    (b)  "Electronic  communications  device"  means  any device that uses
     8  electronic signals to create, transmit, and receive information, includ-
     9  ing, but not limited to computers, telephones, personal digital  assist-
    10  ants and other similar devices.
    11    (c)  "Employer"  means  (i)  a person or entity engaged in a business,
    12  industry, profession, trade or other enterprise in the state; or (ii)  a
    13  unit  of  state  or  local government; and (iii) shall include an agent,
    14  representative or designee of the employer.
    15    (d) "Personal account" means an account or profile  on  an  electronic
    16  medium  where  users may create, share, and view user-generated content,
    17  including uploading or downloading videos or still  photographs,  blogs,
    18  video  blogs,  podcasts, instant messages, or Internet Web site profiles
    19  or locations that is used by an employee or an applicant exclusively for
    20  personal purposes.

         EXPLANATION--Matter in italics (underscored) is new; matter in brackets
                              [ ] is old law to be omitted.
                                                                   LBD01244-03-9

        S. 5544--A                          2

     1    2. (a) Except as provided in paragraph (b)  of  this  subdivision,  it
     2  shall  be  unlawful  for  any employer to request, require or coerce any
     3  employee or applicant for employment to:
     4    (i)  disclose any user name and password, password, or other authenti-
     5  cation information for accessing a personal account through an electron-
     6  ic communications device;
     7    (ii) access the employee's or  applicant's  personal  account  in  the
     8  presence of the employer;
     9    (iii) reproduce in any manner photographs, video, or other information
    10  contained within a personal account.
    11    (b)  An  employer  may  require an employee to disclose any user name,
    12  password or other means for accessing nonpersonal accounts that  provide
    13  access to the employer's internal computer or information systems.
    14    (c)  For  the  purposes of this section, "access" shall not include an
    15  employee or applicant voluntarily adding an employer or employment agen-
    16  cy to their  list  of  contacts  associated  with  a  personal  internet
    17  account.
    18    3. An employer may not:
    19    (a)  Discharge,  discipline,  or  otherwise  penalize  or  threaten to
    20  discharge, discipline, or otherwise penalize an employee for an  employ-
    21  ee's  refusal  to disclose any information specified in paragraph (a) of
    22  subdivision two of this section; or
    23    (b) Fail or refuse to hire any applicant as a  result  of  the  appli-
    24  cant's refusal to disclose any information specified in paragraph (a) of
    25  subdivision two of this section.
    26    4.  It shall be an affirmative defense to an action under this section
    27  that the employer acted to comply with requirements of a federal,  state
    28  or local law.
    29    5. (a) Nothing in this section shall prohibit an employer from:
    30    (i) requesting or requiring an employee to disclose access information
    31  to  an  account  provided by the employer where such account is used for
    32  business purposes and the employee was  provided  prior  notice  of  the
    33  employer's right to request or require such access information;
    34    (ii)  requesting  or requiring an employee to disclose access informa-
    35  tion to an account  known  to  an  employer  to  be  used  for  business
    36  purposes;
    37    (iii)  accessing an electronic communications device paid for in whole
    38  or in part by the employer where the provision of or  payment  for  such
    39  electronic communications device was conditioned on the employer's right
    40  to  access such device and the employee was provided prior notice of and
    41  explicitly agreed to such conditions. However, nothing in this  subpara-
    42  graph  shall  permit an employer to access any personal accounts on such
    43  device;
    44    (iv) complying with a court order in obtaining or  providing  informa-
    45  tion  from, or access to, an employee's accounts as such court order may
    46  require;
    47    (v)  restricting  or  prohibiting  an  employee's  access  to  certain
    48  websites  while using an employer's network or while using an electronic
    49  communications device paid for in whole or part by  the  employer  where
    50  the  provision  of or payment for such electronic communications  device
    51  was conditioned on the employer's right to restrict such access and  the
    52  employee  was  provided  prior  notice  of and explicitly agreed to such
    53  conditions.
    54    (b) This section does  not  prohibit  or  restrict  an  employer  from
    55  complying  with a duty to screen employees or applicants prior to hiring
    56  or to monitor or retain  employee  communications  that  is  established

        S. 5544--A                          3

     1  under  federal  law  or by a self regulatory organization, as defined in
     2  section 3(a)(26) of the securities and exchange  act  of  1934,  15  USC
     3  §78c(a)(26).
     4    (c)  This section does not prohibit or restrict an employer from view-
     5  ing, accessing, or utilizing information about an employee or  applicant
     6  that  can be obtained without any required access information or that is
     7  available in the public domain.
     8    6. The provisions of this section shall not apply to any law  enforce-
     9  ment agency, a fire department or a department of corrections and commu-
    10  nity supervision.
    11    § 2. This act shall take effect on the one hundred eightieth day after
    12  it shall have become a law.
feedback