Legislation

New law limits credit checks for New York City employers

New York City has joined the growing list of employers placing limits on credit checks. On April 16, the City Council overwhelmingly voted in favor of a bill prohibiting the use of credit checks in most employment situations. Mayor Bill De Blasio signed the legislation on May 6, amending the city’s Human Rights Law to make the use of credit history for hiring and other employment purposes, with certain exceptions, an unlawful discriminatory practice. Set to take effect on September 3, 2015, the law will have a sizable impact on employers in New York City. A review of current policies and procedures to determine if any exceptions apply is key, while employers with a statewide presence should consider whether to continue credit checks in other locations where they remain legal.

As defined by the law, “consumer credit history” means an individual’s credit worthiness, credit standing, credit capacity, or payment history, as indicated by: (a) a consumer credit report; (b) credit score; or (c) information an employer obtains directly from the individual regarding (1) details about credit accounts, including the individual’s number of credit accounts, late or missed payments, charged-off debts, items in collections, credit limit, prior credit report inquiries, or (2) bankruptcies, judgments or liens. The law further provides that “a consumer credit report shall include any written or other communication of any information by a consumer reporting agency that bears on a consumer’s creditworthiness, credit standing, credit capacity or credit history.”

Importantly, employers are prohibited not just from the request or use of credit history for applicants, but also from using credit history as a factor in employment decisions for current employees in “compensation, or the terms, conditions or privileges of employment.”

When initially introduced, the proposal featured no exceptions to the ban on credit checks. But over the course of the past year, limited exceptions were added to the bill. As enacted, the legislation permits the use of credit checks for prospective employees of broker-dealers who must register with the Financial Industry Regulatory Authority (FINRA) as well as for police officers and other public officials in a position involving a “high degree of public trust.” Additional exceptions allow a review of credit history when required by state or federal law or regulations; for positions when an employee must possess a security clearance or has “regular access” to intelligence or national security information; for non-clerical positions with access to “trade secrets;” for computer security positions when the employee’s duties include the ability to modify digital security systems; and for employees with signing authority over third-party funds or assets greater than $10,000 or fiduciary responsibility to an employer with the authority to enter into financial agreements of $10,000 or more.

The law permits individuals to file a complaint of discrimination with the New York City Commission on Human Rights within a one-year period or a complaint in court, with a three-year statute of limitations. Remedies include back pay, reinstatement, compensatory and punitive damages, and attorney’s fees and costs.

New York City joins 12 other jurisdictions that have prohibited credit checks in employment-related decisions, including the city of Chicago as well as California, Colorado, Connecticut, Hawaii, Illinois, Maryland, Nevada, Oregon, Vermont, and Washington.

Read the New York City legislation here.

June 12th, 2015|Categories: Legislation|Tags: , , |

California expands privacy protections for state residents

A perennial trendsetter with regard to data security and privacy, California has updated its state law with tweaks that expand the scope of the privacy protections for state residents.

A.B. 1710 made three changes to existing law that go into effect January 1, 2015: first, businesses that maintain “personal information” about California residents must “implement and maintain appropriate and reasonable security procedures and practices” to protect the data from “unauthorized access, destruction, use, modification, or disclosure.” Personal information is defined to include an individual’s first name or first initial and last name, Social Security number, driver’s license number, as well as medical and financial account information.

Second, if a person or business was “the source” of a data breach and offers to provide identity theft prevention and mitigation services to affected individuals, the business must offer the services at no cost for at least 12 months. Some controversy has swirled around this provision, with debate on whether the language actually requires businesses to provide one year of free identity theft protection and mitigation services or if the law simply requires that if the services are offered, they last for 12 months and are provided gratis. Additional guidance may be forthcoming.

Finally, the new legislation prohibits a business from “selling, offering for sale, or advertising for sale” Social Security numbers. Limited exceptions were noted in the bill, including “if the release

[not necessarily a sale] of the Social Security number is incidental to a larger transaction and is necessary to identify the individual in order to accomplish a legitimate business purpose” or “for a purpose specifically authorized or specifically allowed by federal or state law.”

The law’s scope reaches well beyond the borders of California, as it applies to businesses that maintain any personal information about a state resident. Companies would be well advised to familiarize themselves with the new requirements.

To read AB 1710, click here.

December 3rd, 2014|Categories: Legislation, Privacy|Tags: , |

New York City’s new bill would restrict using credit reports for employment decisions

Last month, the New York City Council’s Committee on Civil Rights held a hearing on a bill that would amend the city’s administrative code, prohibiting employers from using consumer credit reports for personnel decisions. Although the hearing ended without a disposition, it is expected that this bill will pass in some form in the near future. The Committee is holding a separate hearing in December on a bill that would prohibit employment discrimination based on an applicant’s or employee’s criminal history.

Congress proposes bill that protects regulated employers’ background checks

While the Equal Employment Opportunity Commission (the “EEOC”) is continuing its challenge of employers’ use of criminal history and credit report information in personnel decisions, and new “ban-the-box” laws are rapidly gaining momentum, on September 9, 2014, Congress proposed legislation that protects certain regulated employers from EEOC, state agency and private actions when they strive to comply with the screening laws that are particular to their industries. The Certainty in Enforcement Act of 2014 would amend Section 703 of the Civil Rights Act of 1964 (42 U.S.C. 2000e-2), and cover employers that include those engaged in “health care, childcare, in-home services, policing, security, education, finance, employee benefits, and fiduciary duties.”

October 15th, 2014|Categories: Employment Decisions, Legislation|Tags: , , |

California’s A.B. 1710 enhances privacy protections for sensitive personal information

Effective January 1, 2015, A.B. 1710 amends California’s breach notification, security procedures, and Social Security number (SSN) laws, generally outlined as follows:

  • provides that existing personal information data security obligations apply to businesses that maintain personal information, in addition to those who own or license the information;
  • provides that if the person or business issuing the notification was the source of the breach, an offer to provide appropriate identity theft prevention and mitigation services, if any, be made at no cost to the affected person for not less than 12 months, along with all information necessary to take advantage of the offer to any person whose information was or may have been breached, if the breach exposed or may have exposed SSN and driver’s license numbers;
  • provides that a person or entity may not sell, advertise for sale, or offer to sell an individual’s SSN, except as permitted.
October 15th, 2014|Categories: Legislation|Tags: , , |

Reminder: San Francisco’s tough ordinance that restricts asking about and using criminal records in employment and housing decisions starts August 13, 2014

Effective August 13, 2014, the Fair Chance Ordinance (the “FCO”) (see also the FCO FAQs) requires covered employers, contractors, and housing providers to review an individual’s qualifications before inquiring about his/her criminal history and follow strict rules for using the information.

The FCO applies to private employers that are located or doing business in the city and county of San Francisco, and employ 20 or more persons worldwide. This 20-person threshold includes owner(s), management, and supervisory personnel. The FCO covers positions (including contractor and other status) located within San Francisco, regardless of where the employer is located, as long as the position is “in whole, or in substantial part, within the city.” San Francisco’s Office of Labor Standards Enforcement (the “OLSE”) interprets “in substantial part” to mean an average of eight hours of work performed per week in San Francisco.

Along with banning inquiries about a criminal history or pending charges on the job application or during the first live interview, the FCO prohibits asking about six categories of criminal record information altogether, and mandates significant measures for individualized assessment, including considering only “directly-related convictions that have a direct and specific negative bearing on the

[applicant’s] ability to perform the duties or responsibilities necessarily related to the position,” the time elapsed since the conviction, evidence of inaccuracy, evidence of rehabilitation and/or other mitigating factors.

An aspect of the ordinance that is especially noteworthy is that employers are prohibited from inquiring about or considering convictions that are more than seven years old, with “the date of conviction being the date of sentencing.” Under California law, there already is a seven-year limitation on such records, but the look-back period starts from the date that a person is released from custody. Also of note is that before taking any adverse action based on a criminal record, the ordinance requires that the employer wait seven days (from the date of the potential adverse action notice) before taking such action. If during the seven-day waiting period the individual gives the employer notice, orally or in writing, of evidence of an inaccuracy, rehabilitation, or any other mitigating factor, the employer must delay the adverse action for a “reasonable” time to reconsider the action.

Employers must also ensure that criminal background inquiries later in the process comply with the notice guidelines published by the OLSE, as well as with the already existing background check disclosure/authorization requirements under California’s ICRAA and the FCRA. Highlighted below are the ordinance’s more significant notice requirements:

  • Covered employers must post, in a conspicuous place at every workplace, including a temporary site, or other location in San Francisco under the employer’s control where applicants or employees visit, a notice of rights provided by the OLSE. The notice must be posted in English, Spanish, Chinese, Tagalog and any other language spoken by 5% or more of the employees in the workplace, job site, or other location. (Translations of the notice in Chinese, Spanish, and Tagalog are available on the OLSE website.)
  • Employers must state in all job solicitations or advertisements that are reasonably likely to reach potential applicants seeking employment in San Francisco that the employer will consider qualified individuals with a criminal history.
  • Employers mustsendthe notice toeachlaborunionorrepresentative withwhomtheemployerhasacollectivebargainingagreementorotheragreementthatisapplicabletoemployeesinSanFrancisco.
  • Prior to any criminal history inquiry, including from procuring or conducting a background check, an employer must provide this notice to an applicant or employee when he/she is given the required FCRA/ICRAA disclosure and authorization form to sign.

August 8th, 2014|Categories: Legislation|Tags: , , , , |

Right to be forgotten: sweeping changes are coming

According to a June 26, 2014 article in The Wall Street Journal, GOOGL in Your Value Your Change Short position Google, Inc., started removing results from its search engine under Europe’s new “right to be forgotten,” implementing a landmark ruling by the European Union’s top court that gives individuals the right to request removal of Internet search results  for their own names.

Not to be outdone when it comes to privacy legislation, California Senate recently approved SB 1348 requiring online data brokers who sell consumer information to provide an opt-out mechanism and consumer access to the data.  The bill, which now moves to the State Assembly for consideration, gives California consumers the right to review the information maintained by a data broker and request that it be permanently removed, within 10 days. Once removed, the information cannot be reposted or sold to a third-party. Notably, the bill attempts to include consumer reporting agencies in the category of data brokers.

Although there is no actual movement on the federal level, the Federal Trade Commission (the “FTC”) urges that Congress consider enacting legislation to make data broker practices more visible to consumers and allow greater control over the immense amounts of personal information that is collected about them and shared by data brokers. In its study presented in a report issued May 27, 2014, the FTC found that data brokers operate with a fundamental lack of transparency.

July 9th, 2014|Categories: Legislation|Tags: , |

Proposed bill would establish standards for national data security

The bill, introduced in the Senate on January 15, 2014 and cited as the Data Security Act of 2014, would require entities such as financial institutions, retailers, and federal agencies to better safeguard sensitive information, investigate security breaches, and notify consumers when there is a substantial risk of identity theft or account fraud. The new requirements would apply to businesses that take credit or debit card information, data brokers that compile private information, and government agencies that possess nonpublic personal information.

January 23rd, 2014|Categories: Legislation|Tags: , |

Proposed federal bill bans credit checks in employment decisions

Introduced by Senator Elizabeth Warren (D-Mass) on December 17, 2013, the “Equal Employment for All Act” (S. 1837), would amend the Fair Credit Reporting Act to prohibit employers from requiring or suggesting that applicants disclose their credit history, from procuring a consumer or investigative report, and from disqualifying employees based on a poor credit rating, or information on a consumer’s creditworthiness, standing or capacity. Positions that require a national security clearance or “when otherwise required by law” are exempt from the prohibition. Ten states (California, Colorado, Connecticut, Hawaii, Illinois, Maryland, Nevada, Oregon, Vermont and Washington) already have enacted legislation that limits the use of credit reports for employment purposes.

January 17th, 2014|Categories: Employment Decisions, Legislation|Tags: , |

New law bans California employers from asking about dismissed criminal records

Effective January 1, 2014, SB 530, will ban most California employers from asking employees or applicants about arrests that did not result in conviction (except for arrests for which the individual is still awaiting trial) or about participation in a pretrial or post trial diversion program. Generally, the new law prohibits most employers from asking applicants to disclose, or use as a factor in employment decisions, any information concerning a conviction that has been judicially dismissed or ordered sealed.

Go to Top