|
Privacy in the Workplace
Privacy in the Workplace1
What is “privacy in the workplace” and why is it so important to every employer? Many employers are now monitoring employees' use of Internet, e-mail and other technologies provided by the employer for carrying out its activities. It is through the use of these technologies that American workers, especially, have become among the most productive in the world.
Why are employers monitoring their employees' uses of these technologies? There are four reasons - liability, discoverability, productivity and protection of trade secrets and intellectual property - each of which is discussed, in greater detail below. With greater monitoring have come the inevitable lawsuits by employees for invasion of privacy, which has resulted in a 3000% increase in privacy related claims. What is going on and how is an employer supposed to address this issue?
Hostile Work Environment
Employers are often faced with Title VII claims by employees under the theory that the employer allowed the discriminatory misconduct of another employee to continue after the employer knew about it. These are most commonly known as “hostile work environment” cases in which an employee claims that the employer knew or should have known that another employee was harassing or discriminating against one or more employees and failed to prevent it.
Employers provide employees with access to its computers, e-mail and Internet services in order to facilitate business communications; the intended use of these technologies. Therefore, when employees use the employer's technology for another purpose, courts have dealt with these issues as one might expect. For example, derogatory and potentially defamatory material posted to a chat room provided by an employer for employees to check their work schedules was found to create a hostile work environment. mailto:A.@dIn hostile work place cases, courts routinely allow plaintiffs to introduce copies of the provocative e-mails that were sent.
In Coniglio v. City of Berwyn, a female employee in the city's computer department and several co-workers repeatedly observed her supervisor viewing pornographic pictures on his office computer. The pornographic images could be seen through a window in the office by anyone passing along the hallway. Coniglio was fired after a mainframe went down while she was out of the office due to an illness. She sued the city alleging a variety of claims, including sexual harassment due to her supervisor's display of the pornographic images. The court concluded that the display of pornographic images, and the city's alleged failure to adequately respond when informed, could constitute a violation of Title VII.
Negligent Retention
Likewise, a third party injured by an employee through the use of technology owned by the company can subject the company to liability for “negligently retaining” the employee that caused the injury. Therefore, knowing what employees are doing while at work is the key to avoiding claims from other employees, as well as from third parties. For example, a male Prodigy employee, using the company computer for purposes of cyber seducing while at work, entered a Prodigy sex chat room and made contact with a woman and persuaded her to meet and ultimately to have sex with him. What she didn't know was that he was a known sexual predator and that he had AIDS, despite his denial both prior to and following sexual contact.
The woman sued Prodigy and the court found that she failed to show that the employer knew anything about the wrongful conduct of its employee. The court was less clear in analyzing whether the employer could have known or should have known what its employee was doing. What will future cases bring? As negligent hiring carries the risk of punitive damages, the potential exposure from such claims is significant. The court's analysis leaves unresolved questions about the likelihood of future cases.
Whether and How Much to Monitor
The negligent retention and hostile work environment issues require an employer to responsibly manage and supervise its employees and their activities while at work in order to avoid any harm from coming to the public at large. If the employer knows, or reasonably should have known, that an employee was engaging in activity while at work that could bring harm to another employee or to a third party, the employer can be liable for any actual harm. Therefore the question is, what should the employer know about what its employees are doing while at work?
Technology has made the monitoring of employee activity possible. However, the dilemma is deciding whether to use the technology and how much monitoring is sufficient to protect the employer's interests. The more you monitor, the greater the likelihood of an employee claim for invasion of privacy. On the other hand, failing to monitor can expose an employer to crushing liability. In addition, failing to take action, if a problem is uncovered, also creates liability for the employer.
“Discovery” (making evidence available to the complaining party) of Email
In almost every lawsuit against an employer, among the first things sought by the plaintiff are all documents that have anything to do with the facts alleged in the suit. “Documents” include those stored electronically, such as e-mail. As Bill Gates, Ollie North and Al Gore learned, e-mails can almost always be retrieved even if they have been “deleted” from the system. Employees commonly send e-mails containing information that they would never put into a hard copy memo or letter. If employees know their e-mail is being monitored, they may be less likely to say things that they would not want to see presented against them in court.
Avoiding the obvious areas: sexually explicit and racially or ethnically insensitive communications should go without saying, but employees need to be very careful about saying anything that implies illegal or anticompetitive behavior. Sales managers often seek to hype their staff with admonitions to “kill the competition.” Imagine quotations of this type being introduced in an anti-trust case. Additionally, industrial espionage is on the rise. Hackers who can get into corporate systems to look at e-mail. Employees need to be mindful of what they say and remember that e-mails can last forever.
Productivity Loss
The average U.S. employee spends approximately six hours a week searching the Internet for personal reasons while at work. At sixty-two percent of U.S. employers, employees surf for sexually explicit materials. The two most frequent search keywords on the Internet are “sex” and “pornography/porno.” Seventy percent of all Internet porn traffic occurs during working hours. During working hours, nine percent of employees earning less than $35,000 surf the net for a new job while eleven percent of those making between $75,000 and $100,000 search. It has recently been estimated that the cost to employers from this lack of productivity is $5.3 billion.
An effective monitoring system will identify those that are spending too much time surfing for personal reasons. Just having a policy that employees know will be enforced will dampen the non-work surfing. Software can limit access to shopping sites, weather sites, news sites, sports sites, porn sites and job sites, which will prevent the company for paying an employee to look for a job while at work!
Protecting Intellectual Property
The ubiquitous “chat room” allows disgruntled employees an unparalleled platform to air their complaints and post defamatory messages on innumerable websites. Chat rooms are everywhere and millions of people spend hours in them.
It is not easy to identify the John Does (unnamed individuals) posting defamatory messages or company secrets. Some of the ISPs comply with subpoenas without notifying the individuals while others give notice in accordance with their policies to allow the John Does to quash the subpoenas if they can
With Internet activity providing perceived anonymity to employees, it is likely that such suits will increase dramatically in the future. ISPs are essentially immune from defamation claims under the Communications Decency Act of 1996.
Monitoring employee activity while at work can help deter and detect such employee behavior. However, if an employee chooses to use his own computer while not at work, employers should similarly have inside or outside counsel ready, at a moment's notice, to file John Doe actions and temporary restraining orders to prevent disclosure of secrets and confidential information, and defamation. Employees should be educated on the perils of such posting.
What's an Employer to Do?
It is critical to have your HR and IT work carefully and closely with your legal department to formulate a monitoring policy and implementation program. The scope and level of employee monitoring will depend on the type of business involved. Health and finance related employers may need a higher level of review whereas a parts distributor a lesser one.
Your plan, once carefully crafted with input from IT, HR, management and legal counsel, should include at least the following (as in all important policy changes be sure that they are communicated clearly and in writing and acknowledged as having been read and understood):
Disclosure to employees upon hiring and periodically thereafter that all e-mail, voice mail, Internet access and computer files are employer property and as such are subject to monitoring;
Notification to employees that the technology they are provided by the company is company property and is to be used only for business purposes;
An explanation to employees that despite the fact that they are given passwords to access your system, they should not have any expectation that the system or anything placed on the system is “private”;
Notification to employees what material, in hard copy or in electronic format, they will not be allowed to transport in or out of the employer's premises or system. Confidential material, trade secrets and protected intellectual property should not be disseminated out of the company without safeguards approved by the employer and as allowed by the software used to monitor employee use of technology;
Employees should not import copyrighted material or byte-heavy programs. Bandwidth is always at a premium no matter how much you have. Preventing employees from downloading files from the net will conserve your system's capacity and might prevent copyright claims being asserted against you company;
Having an agreed upon electronic “document” destruction policy. Federal and state laws require various types of information to be kept for various periods of time. Make sure that all electronic files are stored and backed up in such a way as to prevent “permanent” deletion;
Reiteration that your non-harassment and non-discriminatory practice policies apply to company e-mail to prohibit offensive and potentially discriminatory behavior. It is difficult to describe in detail everything that should not be put in e-mail. Use the mother test or the jury trial test. Have employees asked themselves how they would feel if they had to show their e-mail to their mothers or explain them to a jury in federal court. Such tests often have the salutary effect hoped for;
Notification to employees what the penalties for violation of the policy are or could be. This should include reprimand, demotion and termination; and
Be sure you get something in writing from your employee to acknowledge receipt of the written policy when issued and if updated.
_______________________________________________________________
1. With permission and based on Privacy in the Workplace - Complex Issues for Employers,
by Rodney H. Glover, Partner Wiley Rein & Fielding LLP, Washington, DC. www.wrf.com
|