In a case addressing the Family Medical Leave Act (FMLA) that directly implicates the privacy rules under the Health Insurance Portability and Accountability Act (HIPAA), Pacosa v. Kaiser Foundation Health Plan of the Northwest, the Portland Division of the United States District Court of Oregon awarded summary judgment against a physician assistant who claimed
Workplace Privacy
ADA Violated When Employer Responds to State Subpoena and Discloses Former Employee’s Medical Records
Companies frequently receive requests for information about current and former employees. These requests often come in the form of an attorney’s demand letter or a subpoena and apply to the individual’s medical records. Failing to carefully think through whether and how to respond can be a costly trap for the unwary.
Continue Reading ADA Violated When Employer Responds to State Subpoena and Discloses Former Employee’s Medical Records
Social Security Number Protection Act of 2010
On December 18, 2010 President Obama signed into law the Social Security Number Protection Act of 2010. The law has two key components.
First, the law establishes that no Federal, State, or local agency may display the Social Security account number of any individuals or any derivative of such number, on any check issued for…
Business Owner Enjoined from Accessing Co-Owner’s Email
A Minnesota Court of Appeals panel has affirmed the issuance of a temporary injunction against a co-owner of an LLC blocking him from accessing emails of his partner from the company’s server in the midst of their business dispute. The unpublished decision, Gates v. Wheeler A09-2355 (Minn. App. November 23, 2010), raises some interesting issues…
California allows “driver cams” starting in 2011
In the name of vehicle safety, California Assembly Bill 1942 will permit among other things “driver cams” to be mounted on vehicle windshields beginning on January 1, 2011. Formally known as “video event recorders,” these devices can continuously record audio, video, and G-force levels in a digital loop in order to help identify bad driver…
Court Finds Use of Microsoft Outlook’s Auto Forward Feature is an “Interception” and Upholds Criminal Conviction of Employee Under the Federal Wiretap Law
The Seventh Circuit Court of Appeals in U.S. v. Szymuszkiewicz recently affirmed the criminal conviction of an employee under the federal Wiretap Act, 18 U.S.C. § 2511, after he auto-forwarded emails from his supervisor’s email account to his own. The Court concluded the use of the auto-forward feature constituted an “interception” in violation of the Act.
Szymuszkiewicz shows the application of traditional criminal statutes like the Wiretap Act to Internet-based modes of communications such as email, but also to voice-over IP phone communications. The case also is an example of the courts’ continuing struggle with applying the Act to modern communications technologies such as email. Szymuszkiewicz is an instructive reminder for employers, however, about the remedies applicable under the Act to employees who misuse an employer’s email system actions, in addition to traditional remedies such as discipline or termination. In light of the length of time in which Szymuszkiewicz forwarded his supervisor’s emails without her knowledge, 3 years, the case also highlights a need for review and audit of employer technology systems and education to employees to monitor their accounts for privacy purposes.
Federal Agencies Tighten Data Security Screws on Federal Contractors
Federal contractors are subject to numerous requirements under federal law and, as we have previously highlighted here, need to keep pace with changes in law and regulation.
Under the Federal Information Security Management Act of 2002 (FISMA) each federal agency is required to develop, document, and implement an agency-wide program to provide information security …
Data Privacy and Security Primer for Law Firms
A UK law firm may find itself subject to significant penalties following reports of a data breach affecting thousands of people. The recent 2010 ABA Annual Meeting in San Francisco devoted two sessions to the topic, specifically dealing with “cloud computing,” and the risks and ethical issues it raises for law firms. As data privacy and security risks…
Attorney General Securing Personal Data in Indiana
Indiana recently enacted a new law which grants authority to the Indiana Office of the Attorney General’s Identity Theft Unit to obtain and secure abandoned records with personally identifying information, including health records, and either destroy them or return them to their owners. Additionally, the new law sets fines and other legal ramifications for violations of…
Supreme Court Issues Decision in City of Ontario v. Quon – Search of Text Messages Held Reasonable, Ninth Circuit Reversed
The Supreme Court today issued its decision in City of Ontario, California v. Quon. In a unanimous decision, the Court held that the search of Quon’s text messages, sent or received on his department issued pager, was reasonable and did not violate Quon’s Fourth Amendment rights.
As set forth in the opinion, the Court did…