Bill > HB4364

This bill, the Internet Privacy Protection Act, aims to safeguard the personal electronic data of employees and job applicants by prohibiting employers from demanding their social media usernames, passwords, or other login credentials, or forcing them to reveal their personal accounts in the employer's presence, or compelling them to add employers to their contact lists. However, employers are still permitted to access publicly available information, enforce company policies regarding personal account usage during work hours or for business purposes, and investigate potential misuse of company information or violations of law, provided they have specific reasons to suspect unauthorized transfers of proprietary data. The bill also clarifies that employers are not liable for inadvertently obtaining login information through network monitoring technology, as long as they do not use it to access personal accounts and promptly delete it unless it's part of an ongoing investigation. Importantly, this legislation does not affect an employer's ability to investigate harassment complaints. A "personal account" is defined as a social networking profile used solely for personal communications unrelated to the employer's business.