Privacy Category Archives — The New Jersey Employment Law Firm Blog Published by New Jersey Employment Attorney

February 4, 2022

New Law Will Prohibit New Jersey Employers from Using Tracking Devices in Vehicles Without Notifying Employees

Employees’ privacy rights are becoming an increasingly important issue. When many people began working from home because of the COVID-19 pandemic, questions arose about how much their employers could monitor their activities. Even before then, some employers were using potentially intrusive technologies to collect data about their employees. New Jersey’s governor recently signed a bill that will address one type of technology that employers might use to track employees. The new law requires employers to notify an employee before using any sort of device to track the movements of a vehicle driven by that employee. While the bill originally imposed criminal penalties on employers, the final version uses civil penalties instead.

Current New Jersey employment law provides a patchwork of privacy protections for employees. A law passed in 2013, for example, bars employers from requiring employees and job applicants to provide user names or passwords for “personal accounts,” including email and social media accounts that are not connected to those individuals’ employment. At the federal level, the Americans with Disabilities Act restricts the types of questions employers may ask about employees’ health and health history.

The new law, A3950, was signed by the governor on January 18, 2022. It takes effect on April 18. The law deals with the use of “electronic communications devices” and “tracking devices” in vehicles. Employers may want to track the movements of vehicles operated by employees during work hours for a variety of legitimate reasons, including simply wanting to confirm that employees are working during those hours. The sheer amount of tracking technology available now, however, has led to substantial privacy concerns.
Continue reading

January 3, 2022

DOJ Settles Disability Discrimination Lawsuit Against New Jersey Rail Service

by Resnick Law Group, P.C.

Two federal laws, the Americans with Disabilities Act (ADA) of 1990 and the Genetic Information Nondiscrimination Act (GINA) of 2008, protect employees from discrimination on the basis of disability. Part of this protection involves prohibiting inquiries into employees’ medical histories that are not specifically related to those employees’ jobs. The U.S. Department of Justice (DOJ) recently announced that it had settled claims against a New Jersey rail line for allegedly conducting medical examinations and requesting health information from employees in violation of both statutes. If you have been subjected to disability discrimination in the workplace, reach out to a New Jersey employment lawyer as soon as possible.

The ADA prohibits employers from discriminating against employees and job applicants on the basis of disability. Employers may not require medical examinations of job applicants or employees under the ADA, except to ask about or assess their ability to perform specific job duties. They may require a medical examination for new hires if the examination is the same for every new employee in the same category “regardless of disability.” The ADA allows mandatory medical examinations of employees if they are “job-related and consistent with business necessity.” All other medical examinations or inquiries are prohibited.

GINA protects employees’ and job applicants’ “genetic information,” which it defines as information obtained from genetic tests an individual or their family members, as well as “the manifestation of a disease or disorder” in the individual’s family members. Employers may not request genetic information from employees or job applicants, nor may they request or obtain such information from any third party, except in specific situations. Exceptions include authorization by the employee or job applicant; publicly-available information in a newspaper or book; and “genetic monitoring of the biological effects of toxic substances in the workplace,” provided that the employer has notified the employee and obtained their written consent.
Continue reading

June 25, 2021

How New Jersey Employment Laws Protect Job Applicants During the Hiring Process, Part 2: Background Checks and Social Media

by Resnick Law Group, P.C.

People looking for jobs in New Jersey have the protection of federal and state employment laws addressing issues like wages, overtime compensation, and workplaces that are free of discrimination and harassment. To protect job applicants’ privacy rights, New Jersey law limits how employers can conduct background checks on prospective hires, and on how they can use information obtained from an applicant’s credit or criminal history. The following is the conclusion of our two-part series about New Jersey laws that protect job applicants’ rights.

Use of Credit History in Hiring

At the federal level, the Fair Credit Reporting Act (FCRA) regulates consumer reporting agencies (CRAs), which are companies that compile information about consumers, and package that information in report form in exchange for a fee. The reports, known as consumer reports or credit reports, often include sensitive personal information that most people would rather remain private. The FCRA restricts the use of credit reports to a small number of situations, including employment.

New Jersey law largely mirrors the language of the FCRA. Under both laws, an employer needs a job applicant’s written consent in order to obtain a credit report. New Jersey goes a step further than the FCRA, however, by requiring employers to give job applicants a written disclosure stating that credit reports “commonly include[] information regarding the [applicant]’s character, general reputation, personal characteristics, and mode of living.” The employer must provide the applicant with a copy of the report upon request.
Continue reading

April 9, 2021

Bill Pending in New Jersey Legislature Would Restrict Use of Biometric Data by Employers, Others

by Resnick Law Group, P.C.

Employers in New Jersey use increasingly high-tech methods to monitor their employees throughout the work day. Some of these methods raise concerns about employee privacy, especially systems that collect biometric data. “Biometrics” refers to the automated use of physical characteristics to identify individuals. For example, many smartphones give users the options of unlocking their devices with fingerprint or facial recognition software. Some employers use this kind of technology to control access to worksites or track employees’ time. This means that each time an employee passes a checkpoint or enters the employer’s premises, the employer captures an image of their face, fingerprint, or other unique identifying feature. Employees have an interest in knowing how employers are using this information, and how securely they are storing it. Currently, no law in New Jersey regulates the collection, storage, and use of biometric data. A bill pending in the New Jersey Assembly would address this issue and provide a path forward for New Jersey employment lawyers and their clients.

Under New Jersey law, employers may not intrude into areas where employees have a reasonable expectation of privacy. Unreasonable searches of private areas in the workplace, such as an employee’s locker, may violate an employee’s legal rights. Surveillance of phone or computer use is allowed by law, as long as it is reasonably related to the employer’s business. Video monitoring of common areas is not unusual, particularly in retail or warehouse settings. Intrusive surveillance that serves no legitimate business purpose could be unlawful. In extreme cases, such as video monitoring of a restroom or changing area, it could even be criminal.

Biometric surveillance is, in one sense, an extension of video surveillance. Since it results in the collection of data that could be used to identify specific individuals, it is also analogous to the collection of Social Security numbers and other information best kept private. Few states currently have laws addressing the collection of biometric data. Illinois enacted the first such law, the Biometric Information Privacy Act (BIPA), in 2008. Other states have passed similar laws since then. BIPA remains the only law that allows private causes of action for violations.
Continue reading

November 20, 2020

What Are Employees’ Privacy Rights in New Jersey During a Global Pandemic?

by Resnick Law Group, P.C.

The COVID-19 pandemic has now entered its ninth month in the United States. After extensive lockdowns in March and April 2020, cities and states around the country struggled with finding ways to reopen their economies without risking public health. Many New Jersey employees had to adapt quickly to a home office environment. Workers deemed “essential” had to continue reporting to their jobs, often with added safety measures intended to inhibit the spread of the novel coronavirus. Some of the new measures used by employers raise important questions about employee privacy rights in New Jersey.

New Jersey Workplace Privacy Laws

As a general rule, employees do not have an expectation of privacy when they are at work, on the clock, and using their employer’s property. Employers can, with some exceptions, access emails sent by employees using a company email address, or search employees’ desks and other areas in the workplace. Employees’ personal property, such as cell phones, purses, and wallets, are subject to greater legal protection.

New Jersey recognizes several common-law claims for privacy violations, including intrusion upon seclusion, which protects a person’s “private affairs or concerns.” With more workers doing their jobs remotely, often using videoconferencing technologies that allow employers to see into their homes, these concerns have become much more pressing.

March 21, 2019

What Fitness Trackers in Workplaces in New Jersey and Around the Country Could Mean for Employees’ Rights

by Resnick Law Group, P.C.

Technology is constantly providing new ways to help both employers and employees in New Jersey. Unfortunately, sometimes a technology that helps employers does so at employees’ expense. Our legal system can be slow to catch up with new innovations. Fitness trackers, which are devices individuals can wear to track movement and other vital statistics, are becoming more and more common. Many employers have taken notice of this. A recent Washington Post article describes fitness trackers as “an increasingly valuable source of workforce health intelligence for employers.” Employers’ access to, and use of, employees’ fitness tracker data raises concerns about privacy. In some cases, it could raise concerns about employment discrimination. Federal and New Jersey employment laws prohibit discrimination on a wide range of factors, and protect privacy in certain areas. Opinions are mixed on the extent to which they cover fitness tracker data.

Arguably, employers use employee fitness tracker data to monitor performance. The devices record information about an employee’s movement, or lack thereof. This could be relevant to job performance, but it could also present problems. The New Jersey Law Against Discrimination (NJLAD) prohibits employers from discriminating against employees and job applicants on the basis of disability. N.J. Rev. Stat. § 10:5-12(a). The statute defines this term very broadly, covering a wide range of physical and mental conditions that “prevent[] the normal exercise of any bodily or mental functions.” Id. at § 10:5-5(q). At the federal level, the Americans with Disabilities Act (ADA) of 1990, as amended by the ADA Amendments Act (ADAAA) of 2008, also prohibits employment discrimination. This statute’s definition of “disability” includes both actual and perceived disabilities. See 42 U.S.C. §§ 12102(1)(C), 12112.

State and federal antidiscrimination law also prohibit discrimination by employers based on genetic information. This could be an issue for employers using fitness tracker data in some situations. The NJLAD defines “genetic information” as “information about genes, gene products or inherited characteristics.” N.J. Rev. Stat. § 10:5-5(oo). The plain language of the statute suggests that the information does not have to come from a genetic test ordered by the employer. The federal Genetic Information Nondiscrimination Act (GINA) focuses more specifically on genetic testing. It defines “genetic information” as information derived from a person’s genetic test or that of a family member, or “the manifestation of a disease or disorder” in a member of that person’s family. 42 U.S.C. §§ 2000ff(4)(A), 2000ff-1(a).
Continue reading

January 4, 2019

The Uncertain Privacy of Genetic Information, and How It Could Affect New Jersey Employees

by Resnick Law Group, P.C.

Employment discrimination on the basis of genetic information is an important area of law that has not received as much attention as other forms of discrimination. This is partly because the laws protecting against genetic information discrimination have not been on the books very long. At the federal level, the Genetic Information Nondiscrimination Act (GINA) of 2008 prohibits various types of discrimination in employment and health insurance. The New Jersey Law Against Discrimination (NJLAD) prohibits discrimination by employers based on specific genetic traits. This area of law is likely to gain prominence as a wider range of genetic information becomes available. Multiple companies conduct genetic testing to provide genealogy information to consumers. They are then able to use those consumers’ genetic information in a variety of ways that are not well understood. Privacy laws and consumer contracts are likely to play as important a role as employment statutes in New Jersey and around the country. If you have questions of this nature, reach out to a New Jersey employment discrimination attorney.

GINA defines “genetic information” as information obtained from “genetic tests” of an individual or their family members, or from “the manifestation of a disease or disorder in family members of such individual.” 42 U.S.C. § 2000ff(4)(A). It defines a “genetic test” as “an analysis of human DNA, RNA, chromosomes, proteins, or metabolites,” provided that it is able to “detect genotypes, mutations, or chromosomal changes.” Id. at § 2000ff(7). The statute prohibits discrimination by employers based on genetic information, using language that is similar to the prohibitions on employment discrimination found in Title VII of the Civil Rights Act of 1964. Id. at §§ 2000ff-1(a), 2000e-2(a).

Under the NJLAD, an employer commits an “unlawful employment practice” if they discriminate on the basis of an “atypical hereditary cellular or blood trait of any individual,” or an individual’s “refusal to submit to a genetic test or make available the results of a genetic test to an employer.” N.J. Rev. Stat. § 10:5-12(a). The statute specifically identifies the following traits: “sickle cell trait, hemoglobin C trait, thalassemia trait, Tay-Sachs trait, or cystic fibrosis trait.” Id. at §§ 10:5-5(x)-(cc). Its definition of “genetic test” is similar to the one found in GINA. Id. at § 10:5-5(pp).
Continue reading

June 2, 2017

New Jersey Court Clarifies Liability for Violations of Statute Governing Consumer Background Reports

by Resnick Law Group, P.C.

Background checks enable employers to obtain a vast amount of information about prospective employees. In order to safeguard people’s privacy, the Fair Credit Reporting Act (FCRA) establishes limitations on the collection and use of people’s personal information during the hiring process. The law regulates both employers and consumer reporting agencies (CRAs), which collect consumer information and compile it into reports for employers and others. Both CRAs and employers are potentially liable to job applicants for violations of the FCRA, but liability generally arises under different circumstances. Two recent decisions from New Jersey federal courts clarify who is primarily liable to a job applicant for FCRA violations. Muir v. Early Warning Svcs., et al., No. 2:16-cv-00521, op. (D.N.J., Sep. 15, 2016); Geter v. ADP Screening & Selection Svcs., et al., No. 2:14-cv-03225, op. (D.N.J., Apr. 23, 2015).

The FCRA defines a “consumer report” as any collection of information about an individual with regard to factors like “credit worthiness,…character, general reputation, personal characteristics, or mode of living.” 15 U.S.C. § 1681a(d)(1). A consumer report may include financial information like delinquent accounts and bankruptcies, as well as arrests, criminal charges, convictions, and other legal information. The statute defines a CRA as any individual or business that routinely compiles consumer information into reports in exchange for financial compensation. Id. at § 1681a(f).

A CRA may not issue a consumer report to an employer until the employer certifies that it has complied and will continue to comply with its obligations under the FCRA. Id. at § 1681b(b)(1). An employer must obtain the job applicant’s written consent to obtain a consumer report, and it must provide the applicant with a written disclosure explaining that the employer may use the report in making a hiring decision. Id. at § 1681b(b)(2).

May 26, 2017

Federal Law Protects Privacy Rights of Employees and Job Applicants During Hiring Process

by Resnick Law Group, P.C.

Employers frequently conduct background checks on job applicants by obtaining a consumer report from a credit reporting agency (CRA). In some cases, such as jobs in law enforcement or jobs requiring security clearances, employers are required to conduct background checks for specific issues. Background checks also make sense for certain types of jobs. For example, an employer hiring for a position that involves handling large amounts of money might want to check for excessive problems with debt or past convictions for offenses like fraud or embezzlement. By relying on CRAs to provide background information on job applicants, employers rely on the accuracy of the information they provide. Since these reports are not always accurate, the federal Fair Credit Reporting Act (FCRA) regulates both CRAs and employers. The Federal Trade Commission (FTC) recently offered some guidance to employers regarding FCRA compliance in a blog post. Job applicants might find the FTC’s post useful as a guide to potential warning signs in the job application process.

In the context of employment, the FCRA requires both CRAs and employers to follow specific procedures. An employer must give a job applicant a “clear and conspicuous disclosure…in a document that consists solely of the disclosure” detailing its intent to obtain a consumer report as part of the hiring process, and it must obtain the applicant’s written consent. 15 U.S.C. § 1681b(b)(2). A CRA may not issue a consumer report to an employer unless it obtains a certification from the employer stating that the employer has fulfilled all of its obligations regarding disclosure and consent and that it will comply with all additional requirements under the FCRA. Id. at § 1681b(b)(1).

If an employer decides not to hire an applicant because of information contained in a consumer report, the FCRA requires it to provide a copy of the report to the applicant, along with a written description of the applicant’s legal rights. Id. at §§ 1681b(b)(3), 1681g(c). This allows the applicant to review the information that the employer saw and to use other legal mechanisms provided by the FCRA to correct incorrect or incomplete information. The employer must allow a reasonable amount of time for the applicant to review the report and communicate with the CRA that issued it.

March 7, 2017

How Federal Anti-Hacking Laws Could Affect Employment Disputes in New Jersey and Elsewhere

by Resnick Law Group, P.C.

The U.S. Congress has enacted several statutes addressing unauthorized access to computer systems, commonly known as “hacking.” These statutes include both civil and criminal components. The Stored Communications Act (SCA), 18 U.S.C. § 2701 et seq., deals with digital information stored by third parties, usually internet service providers (ISPs). It comes into play when someone accesses another person’s email or other stored communications data without authorization. The statute allows civil claims in certain cases. 18 U.S.C. § 2707. When an employer accesses an employee’s online information without permission, it could be liable to the employee for damages under the SCA.

Third-party ISPs include companies that provide internet access, email servers, and social media services. The use of a third-party ISP involves voluntarily entrusting personal information to someone else’s care. The SCA seeks to protect people’s privacy rights with regard to this information against both the government and private individuals and entities. The Fourth Amendment to the U.S. Constitution guarantees people’s right to “be secure in their…papers and effects,” but voluntarily turning materials over to a third party can negate the Fourth Amendment’s protection. The SCA extends Fourth Amendment-like protections against government access to stored communications. Since non-government actors are not constrained by the Fourth Amendment, the SCA also prohibits unauthorized access by private actors.

The same principle that excludes voluntarily disclosed information from Fourth Amendment protection also applies to the SCA. The “authorized user exception” states that SCA protection does not apply to “conduct authorized…by a user of that service with respect to a communication of or intended for that user.” 18 U.S.C. § 2701(c).