Search form

Virginia Limits Employer Access to Social Media Accounts of Employees and Applicants

By Joseph J. Lazzarotti
  • April 7, 2015

Key points:

  • Effective July 1
  • Employers barred from demanding personal account information 

Effective July 1, 2015, employers in Virginia will be prohibited from requiring, requesting, or causing a current or prospective employee to disclose the username and password to the individual’s social media account. The new law, signed by Governor Terry McAuliffe on March 23, 2015, also prohibits employers from requiring an employee to add another employee, a supervisor, or an administrator to the list or contacts associated with the individual’s social media account or changing the privacy settings.

Under the new law, “social media account” means a personal account with an electronic medium or service where users may create, share, or view user-generated content, including, without limitation, videos, photographs, blogs, podcasts, messages, emails, or website profiles or locations. 

However, “social media account” does not include an account: 

(i) opened by an employee at the request of an employer; 

(ii) provided to an employee by an employer, such as the employer’s email account or other software program owned or operated exclusively by an employer; 

(iii) set up by an employee on behalf of an employer; or 

(iv) set up by an employee to impersonate an employer through the use of the employer’s name, logos, or trademarks.

An employer taking or threatening to discharge, discipline, or otherwise penalize any employee in retaliation for his or her refusal to comply with a request or demand that violates the new law is in violation of the law. Failing or refusing to hire a prospective employee for exercising his statutory rights also is a violation.

What the Law Does Not Prohibit

The new law does not limit an employer’s right to obtain information that is in the public domain, conduct an investigation, or comply with the requirements of state or federal statutes, rules or regulations, case law, or rules or regulations of self-regulatory organizations. The employee’s username and password can be used only for the purpose of the formal investigation or a related proceeding.

An employer may enforce lawful workplace policies (e.g., on Internet and electronic mail use) governing use of the employer’s electronic equipment, monitor use of the employer’s electronic equipment and electronic mail, and request or require an employee to disclose access information to an account or service provided by virtue of his or her employment relationship with the employer or an electronic communication device or online account paid for or supplied by the employer.

If an employer inadvertently receives an employee’s username and password to, or other login information associated with, the employee’s social media account through an employer-provided electronic device or a program that monitors the employer’s network, the employer would not be liable for having the information as long as the employer does not use the information to gain access to the employee’s social media account.

Employers may have legitimate need to access employee or applicant personal social media or other online accounts, as in cases involving theft of trade secrets, disclosures of confidential information, and similar reasons. However, with more than a dozen states already imposing limitations on employer access of personal social media accounts, employers, particularly those operating in more than one state, should be careful in determining what they are permitted to do in each state. 

For additional information and assistance in complying with the new law, please contact a member of our Privacy, e-Communication and Data Security practice or the Jackson Lewis attorney with whom you regularly work.

©2015 Jackson Lewis P.C. This material is provided for informational purposes only. It is not intended to constitute legal advice nor does it create a client-lawyer relationship between Jackson Lewis and any recipient. Recipients should consult with counsel before taking any actions based on the information contained within this material. This material may be considered attorney advertising in some jurisdictions. Prior results do not guarantee a similar outcome.

Reproduction of this material in whole or in part is prohibited without the express prior written consent of Jackson Lewis P.C., a law firm that built its reputation on providing workplace law representation to management. Founded in 1958, the firm has grown to more than 900 attorneys in major cities nationwide serving clients across a wide range of practices and industries including government relations, healthcare and sports law. More information about Jackson Lewis can be found at www.jacksonlewis.com.

See AllRelated Articles You May Like

August 1, 2019

Healthcare Organizations, Is Your Patient Portal Secure?

August 1, 2019

Healthcare organizations’ traditional cybersecurity measures are insufficient against today’s cyberattacks, according to a report from LexisNexis® Risk Solutions and the Information Security Media Group released in July 2019. Even as healthcare organizations embrace new technologies (such as patient portals), the report shows that... Read More

July 26, 2019

New York Enacts SHIELD Act, Adding Data Security Requirements and Strengthening Data Breach Requirements

July 26, 2019

New York has enacted the Stop Hacks and Improve Electronic Data Security Act (SHIELD Act) to amend the state’s data breach notification law to impose more expansive data security and data breach notification requirements on companies. The move aims to ensure New York residents are better protected against data breaches of their private... Read More

July 10, 2019

2019: The Mid-Year Outlook for Employers

July 10, 2019

The first six months of 2019 have proven to be busy, challenging professionals in the labor and employment communities to keep up with a number of newly enacted laws and regulations. In the 2019: Mid-Year Outlook for Employers, Jackson Lewis attorneys provide a snapshot of activity from the first half of the year as well as a preview of... Read More