CIPP / US - Workplace privacy Flashcards
Under the Fair and Accurate Credit Transactions Act (FACTA), communications related to an employee investigation that are not considered a consumer report are:
- The communication is made to an employers in connection with the investigation of (a) suspected misconduct related to employment, or (b) compliance with federal, state, or local laws and/ or regulations the rule of a self-regulatory organization, or any preexisting written employment policies
- The communication is not made for the purpose of investigating a consumer’s creditworthiness, credit standing or credit capacity and does not include information pertaining to those factors
- The communication is not provided to any person except: (a) the employer or agent of the employer; (b) a federal or state officer, agency, or department of a unit of general local government; (c) a self-regulating organization with authority over the activities of the employer or employee; (d) as otherwise required by law; (e) pursuant to 15 USC Sec 168
Under the FCRA, when can an employer obtain a consumer report or an investigative consumer report?
When there is a permissible purpose
Permissible purpose:
- reemployment screening for the purpose of evaluating the candidate for employment, and
- Determining if an existing employee qualifies for promotion, reassignment, or retention
What federal laws with employment privacy implications regulate benefits related information?
- HIPAA
- COBRA
- ERISA
- FMLA (Family Medical Leave Act)
What is an investigative consumer report?
A report in which some of the information is acquired through the interviews with neighbors, friends, associates or acquaintances of the employee, such as reference checks
What federal laws with employment privacy implications regulate data collection and record keeping?
- FCRA
- FLSA
- OHSA
- Whistleblower Law Protection Act
- NLRA
- California Investigative Consumer Reporting Act (ICRA)
- Securities Exchange Act of 1934
The FTC and CFPB regulate . . .
unfair and deceptive trade practices
Which federal agencies protect employee privacy?
- DOL
- EEOC
- FTC
- CFPB
- NLRB
The NLRB conducts . . .
elections and investigates and remedies unfair labor practices
What must employers do under the ICRAA?
- Notify applicants and employers of their intention to obtain and use a consumer report
- Once disclosure is made, the employer must obtain the applicant or employee’s written authorization prior to requesting the report
- On the notice and authorization form, employers must enable applicants and employees to check a box to receive a copy of their consumer report at any time a background check is conducted
- If employers wish to take adverse employment action, they must provide the employee with a copy of the report, regardless of whether the employee waived the right to receive a copy
What are some reasons for monitoring the workplace?
- Follow workplace safety and other laws that require or encourage monitoring
- Protect physical security (such as video cameras near entrances) and cybersecurity (such as activity on computer systems)
- Protect trade secrets
- Limit liability for unlicensed transmission of copyrighted material and other confidential company information
- Try to keep employees on task rather than spending time on personal business, such as surfing the web
What are the roles and responsibilities of the Federal Communications Commission (FCC)?
Places significant compliance regulations on and governs the communications industry, such as television, radio, and telemarketing and more recently, with recently with online marketing developing such as laws as the Telemarketing Sales Rule and Controlling the Assault of Non-solicited Pornography and Marketing Act (CAN-SPAM)
Along with the FTC, the FCC, the FCC also enforces privacy laws
Under the TCPA when is interception of employee communications permitted?
- If a person is a party to a call or where one of the parties has given consent
- The interception is done in the ordinary course of business
What standards must an employer meet in order to obtain a consumer report?
- Provide written notice to the applicant that is obtaining a consumer report for employment purposes will be obtained
- Obtain written consent from the applicant
- Obtain Datta only from a qualified consumer reporting agency, an entity that has taken steps to assure the accuracy and currency of the data
- Certify to the CRA agency that the employer has a permissible purpose and has obtained consent from the employee
- Before taking an adverse action, such as denial of employment, provide a pre-adverse action notice to the applicant with a copy of the consumer report, in order to give the applicant an opportunity to dispute the report
- After taking adverse action, provide an adverse action notice
What federal laws with employment privacy implications regulate monitoring practices?
- Employee Polygraph Protection of 1988
- Wiretap Act
- Electronic Communications Privacy
- SCA
What are the three relevant torts to employee privacy?
- Intrusion upon seclusion
- Publicity given to private life
- Defamation