Blogs

New York's Latest Legal Mandate: Employers Must Disclose Surveillance Activities to Staff

Introduction

In an era where technology is deeply integrated into the workplace, New York has taken a significant step to protect employee privacy. Effective from May 7, 2022, New York's newly enacted statute, A.430/S.2628, mandates that private employers must inform their workforce in writing about any surveillance or monitoring activities related to internet and phone usage. This article delves into the intricacies of this law, its implications for employers, and the steps that need to be taken for compliance.

The Legal Landscape

Before we delve into the specifics of New York's new law, it's worth noting that this isn't the first of its kind. Connecticut and Delaware have had similar laws in place since 1998 and 2001, respectively. However, what sets New York's law apart is its timing. In a world increasingly concerned with data privacy and individual rights, this law comes as a timely addition to the existing legal framework.

Scope and Applicability

The new statute is not limited in its application. Any employer who engages in the surveillance or interception of an employee's electronic communications falls under its purview. This includes monitoring for regulatory compliance, adherence to workplace policies, and even the prevention of unlawful activities such as data breaches or theft of trade secrets.

Interestingly, the law does not require notification for activities aimed at system maintenance or those not specifically targeted at individual employees' communications. This provides some leeway for employers but also adds a layer of complexity to compliance efforts.

Who is an "Employer" and Who is an "Employee"?

The law adopts a broad definition of "employer," encompassing any individual or business entity with operations in New York, irrespective of size. However, the law is somewhat ambiguous when it comes to defining an "employee." This could potentially extend the scope to include non-traditional workers like contractors or volunteers, adding another layer of complexity for employers.

Detailed Notification Requirements

Transparency is at the core of this legislation. Employers are required to provide detailed written and posted notices to employees. These notices must unambiguously state that any form of electronic communication or internet activity may be subject to lawful monitoring. Furthermore, employees must acknowledge receipt of this notice, either in writing or electronically, adding a formal layer to the process.

The law also mandates that these notices be easily accessible, although it stops short of defining what constitutes "easily accessible." It is reasonable to assume that a company intranet or a similar platform exclusive to employees would meet this criterion.

Legal Ramifications for Non-Compliance

The penalties for failing to adhere to this law are not to be taken lightly. Civil penalties start at $500 for the first offense and can escalate to $3,000 for repeated violations. Importantly, the law does not provide for a private right of action, meaning employees cannot sue their employers for violations. However, the financial penalties and potential reputational damage make compliance a high priority.

Preparing for Compliance

Given the complexities and potential ambiguities in the law, proactive preparation is crucial. Employers should consider revising their existing policies and procedures to incorporate the new requirements. This may include updating employee handbooks, training HR teams, and even revising employment contracts to include the new notification clauses.

Moreover, employers should establish robust systems to track and store both the required disclosures and employee acknowledgments. This will not only aid in compliance but also serve as valuable evidence should any legal issues arise.

Conclusion and Next Steps

New York's A.430/S.2628 is more than just another piece of legislation; it reflects the state's commitment to enhancing workplace privacy in an increasingly digital age. Employers must take immediate steps to align their monitoring practices with this new legal mandate. Failure to do so could result in significant financial penalties and reputational harm.

For those seeking expert guidance on navigating the complexities of this new law, the team at Lucosky Brookman LLP stands ready to assist. We offer comprehensive legal services aimed at ensuring your business not only complies with the new requirements but thrives in this ever-changing legal landscape.