WIC Confidentiality & Privacy in Workplace Investigations 2 — Questions and Answers
Question 1: Which federal law most directly governs employer monitoring of employee electronic communications in the workplace?
- The Privacy Act of 1974
- The Electronic Communications Privacy Act (ECPA) (Correct answer)
- The Computer Fraud and Abuse Act
- The Stored Communications Act alone
Correct answer: The Electronic Communications Privacy Act (ECPA)
The ECPA, which includes the Wiretap Act and Stored Communications Act, governs interception and access to electronic communications and is the primary federal law affecting employer monitoring of employee emails and messages.
Question 2: An employer can generally monitor employee emails on company systems without violating privacy laws if:
- The monitoring is conducted only by HR personnel
- Employees have been given prior notice of the monitoring policy and consented to it (Correct answer)
- The emails involve suspected criminal activity
- The monitoring occurs outside of working hours
Correct answer: Employees have been given prior notice of the monitoring policy and consented to it
Prior notice and consent through an acknowledged electronic communications policy typically satisfies the consent exception under the ECPA, allowing employers to monitor company-owned systems.
Question 3: During a workplace investigation, an investigator discovers that an employee used a personal cell phone on company premises to document a workplace incident. What privacy consideration applies?
- The employer can seize the personal device because it contains work-related evidence
- The employee retains a reasonable expectation of privacy in their personal device, requiring caution or a court order to compel access (Correct answer)
- Personal devices used at work become company property for investigation purposes
- The investigator may access the device if the employee's manager approves
Correct answer: The employee retains a reasonable expectation of privacy in their personal device, requiring caution or a court order to compel access
Employees retain privacy interests in personal devices, and compelling access without consent or legal authority (such as a court order) can expose the employer to liability.
Question 4: What is the primary purpose of a 'litigation hold' as it relates to confidentiality in workplace investigations?
- To seal all investigation documents from internal review
- To preserve documents and communications relevant to anticipated or pending litigation (Correct answer)
- To restrict witness communication with attorneys
- To delay the investigation until litigation is resolved
Correct answer: To preserve documents and communications relevant to anticipated or pending litigation
A litigation hold (also called a legal hold) ensures that documents, emails, and other evidence relevant to anticipated litigation are preserved and not destroyed, satisfying the employer's legal preservation obligations.
Question 5: If a respondent in a workplace investigation asks to know the specific allegations made against them, the investigator should:
- Refuse all disclosure to protect the complainant
- Provide sufficient detail about the allegations to allow the respondent to respond meaningfully, without necessarily revealing the complainant's identity (Correct answer)
- Share the full complaint verbatim including all witness names
- Only disclose allegations after the investigation is complete
Correct answer: Provide sufficient detail about the allegations to allow the respondent to respond meaningfully, without necessarily revealing the complainant's identity
Procedural fairness requires that the respondent understand the nature of the allegations to mount a meaningful response, but the investigator can balance this against confidentiality by withholding identifying details where possible.
Question 6: Which of the following is the most appropriate method for disposing of investigation records that are no longer needed?
- Placing them in the regular recycling bin
- Secure shredding or encrypted digital deletion per the organization's records retention policy (Correct answer)
- Archiving them in a shared network drive accessible to all managers
- Returning all documents to the complainant and respondent
Correct answer: Secure shredding or encrypted digital deletion per the organization's records retention policy
Secure disposal methods such as cross-cut shredding for paper documents and certified digital deletion protect sensitive information from unauthorized access after the retention period expires.
Question 7: In most states, what must an employer do before using a workplace surveillance system (e.g., video cameras) to gather evidence for an investigation?
- Notify the local law enforcement agency
- Ensure employees have been notified of the surveillance policy, and that cameras are not in areas with a reasonable expectation of privacy (Correct answer)
- Obtain a court order authorizing the surveillance
- Have the surveillance reviewed by an outside auditor first
Correct answer: Ensure employees have been notified of the surveillance policy, and that cameras are not in areas with a reasonable expectation of privacy
Most state and federal laws require prior notice of surveillance policies and prohibit cameras in areas where employees have a reasonable expectation of privacy, such as restrooms or locker rooms.
WIC Confidentiality & Privacy in Workplace Investigations 2
Which federal law most directly governs employer monitoring of employee electronic communications in the workplace?