On May 22, 2014, Louisiana Governor Bobby Jindal signed into law the "Personal Online Account Privacy Protection Act." The measure, effective immediately, bans employers, including state and local governments, from requesting usernames, passwords or other authentication information that allows them to access personal online accounts of either employment applicants or current employees. The act equally prohibits public educational institutions, including colleges, from requesting the same information from prospective or current students. Even if an employer inadvertently receives an employee's or applicant's personal online account information, the employer is prohibited from using the information to access the personal online account. The act also prohibits an employer from firing or disciplining an employee or applicant for refusing to provide his personal online account information. However, as currently written, the law does not provide for a penalty in case of a violation of the act.

Notably, the act only covers "personal online accounts" created and used exclusively for personal communications, unrelated to business purposes. Therefore, employers can still require an employee to disclose information, including usernames and passwords, to gain access to electronic devices, accounts or services paid for or provided by the employer or used for the employer's business purposes.

In addition, employers are not prohibited from viewing, accessing or utilizing information from an employee's personal online account when a username or password is not required to access the information. For example, an employer cannot request an employee's username or password to view his or her personal Facebook account, but is free to view whatever aspects of the account are available to the public, such as the Facebook profile.

With the signing of this act, Louisiana joins several other states that have already instituted similar password protection laws, including Arkansas, California, Colorado, Illinois, Maryland, Michigan, Nevada, New Mexico, Oregon, Utah and Washington. More than 20 other states have legislation introduced or pending.

The Personal Online Account Privacy Protection act is codified at La. Rev. Stat. § 51:1951, et seq.


Written by:

Published In:

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Baker Donelson | Attorney Advertising

Don't miss a thing! Build a custom news brief:

Read fresh new writing on compliance, cybersecurity, Dodd-Frank, whistleblowers, social media, hiring & firing, patent reform, the NLRB, Obamacare, the SEC…

…or whatever matters the most to you. Follow authors, firms, and topics on JD Supra.

Create your news brief now - it's free and easy »

All the intelligence you need, in one easy email:

Great! Your first step to building an email digest of JD Supra authors and topics. Log in with LinkedIn so we can start sending your digest...

Sign up for your custom alerts now, using LinkedIn ›

* With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name.