CIPP/US Workplace Privacy & Employee Monitoring 2 — Questions and Answers
Question 1: What does the concept of 'reasonable expectation of privacy' from Katz v. United States mean in the context of public-sector workplace monitoring?
- Government employees may have Fourth Amendment protections against unreasonable searches of their workplace spaces (Correct answer)
- Government employees have no privacy rights in any government-owned property
- Only private-sector employees can invoke the reasonable expectation of privacy doctrine
- Reasonable expectation of privacy applies only to physical spaces, not digital communications
Correct answer: Government employees may have Fourth Amendment protections against unreasonable searches of their workplace spaces
The Katz standard establishes that government employees can have Fourth Amendment protections against unreasonable workplace searches, subject to balancing tests.
Question 2: Under the FCRA, how long before taking adverse employment action must an employer wait after providing the pre-adverse action notice?
- A reasonable period of time (generally interpreted as at least 5 business days) (Correct answer)
- 72 hours
- 30 calendar days
- No waiting period is required; the notice is purely informational
Correct answer: A reasonable period of time (generally interpreted as at least 5 business days)
FCRA requires a 'reasonable period of time' between the pre-adverse action notice and final adverse action, which the FTC has interpreted as approximately five business days.
Question 3: Which of the following is an accurate statement about drug testing in the workplace under federal law?
- There is no comprehensive federal law mandating private-sector drug testing, though certain industries are federally regulated (Correct answer)
- The Drug-Free Workplace Act requires all federal contractors to test employees for drugs
- OSHA mandates random drug testing for all employees in safety-sensitive positions
- The ADA prohibits all workplace drug testing as a form of disability-related inquiry
Correct answer: There is no comprehensive federal law mandating private-sector drug testing, though certain industries are federally regulated
No single federal law mandates drug testing for all private-sector employees; however, sector-specific regulations (e.g., DOT for transportation workers) require testing in certain industries.
Question 4: An employer collects biometric data (fingerprints) for employee time-and-attendance tracking. Which state law is most commonly associated with strict regulation of biometric data collection in employment?
- Illinois Biometric Information Privacy Act (BIPA) (Correct answer)
- California Consumer Privacy Act (CCPA)
- New York SHIELD Act
- Texas Identity Theft Enforcement and Protection Act
Correct answer: Illinois Biometric Information Privacy Act (BIPA)
The Illinois BIPA is the most prominent and strictly enforced biometric privacy law in the U.S., requiring informed consent, written policies, and limiting data retention and disclosure.
Question 5: The National Labor Relations Act (NLRA) intersects with workplace privacy because it:
- Protects employees' rights to engage in concerted activities, which can limit how employers monitor and discipline workers for discussing wages or working conditions (Correct answer)
- Requires employers to preserve all employee communications for labor dispute resolution
- Grants unions the right to access all employer monitoring records
- Prohibits all surveillance of union employees without NLRB approval
Correct answer: Protects employees' rights to engage in concerted activities, which can limit how employers monitor and discipline workers for discussing wages or working conditions
The NLRA protects concerted activity, meaning employer monitoring policies that chill employees' rights to discuss wages or working conditions may constitute unfair labor practices.
Question 6: A terminated employee requests access to their personnel file. Under which legal framework are they most likely to have this right?
- State law, as there is no federal law granting private-sector employees access to their personnel files (Correct answer)
- The Privacy Act of 1974, which covers all employment records
- HIPAA, because personnel files contain health-related information
- The FCRA, which mandates employer disclosure of all records used in employment decisions
Correct answer: State law, as there is no federal law granting private-sector employees access to their personnel files
The right of private-sector employees to access their personnel files is governed by state law; states like California, Michigan, and Illinois have specific personnel file access statutes.
Question 7: When an employer uses a third-party vendor to conduct social media screening of job applicants, the employer must be aware that this practice may trigger obligations under:
- The FCRA, if the vendor is considered a consumer reporting agency compiling consumer reports (Correct answer)
- HIPAA, because social media may contain protected health information
- The ECPA, because accessing social media constitutes electronic interception
- The ADA, because social media may reveal disability status
Correct answer: The FCRA, if the vendor is considered a consumer reporting agency compiling consumer reports
If a third-party vendor compiles social media information into a report used for employment decisions, it may constitute a consumer report under FCRA, triggering disclosure and adverse action requirements.
CIPP/US Workplace Privacy & Employee Monitoring 2
What does the concept of 'reasonable expectation of privacy' from Katz v.
United States mean in the context of public-sector workplace monitoring?