Employment Law Update. Jonathan Ingber
did not share that with employees — only with the heads of its regional offices.
Discussion questions
If you were on the jury, would you vote to hold the employer liable?
If so, what would you award Ms. Chatman-Wilson?
Would the result be different if the company had a “no cell phone use while driving” policy?
2017 Update: California prohibits driving while holding a cell phone
Effective January 1, 2017, California Vehicle Code Section 23123.5 prohibits California drivers from holding cell phones while they drive. The law prohibits holding a cell phone while driving for any purpose, including voice calls, checking maps, texting, taking pictures, playing videos, accessing the internet, or for any other reason. Cell phone use while driving is permitted if the cell phone is dash-mounted and set up for voice activation or hands-free use.
GPS and location tracking
With the proliferation of smartphones and GPS-equipped laptops, tablets, and other devices that enable a device's location to be tracked, the opportunities to monitor an employee's location via device monitoring are extensive. Many cars also are equipped with GPS, and virtually all cars manufactured post-2008 have software that records the car's speed, direction, and braking history immediately prior to an accident. Again, if an employer anticipates tracking employee locations using a device or automotive GPS, the employer would be wise to obtain the employee's acknowledgment to this monitoring in the APA to ensure that the employee cannot assert a privacy right pertaining to his or her location or the location of the device. In some states such as California, Illinois, Minnesota, Tennessee, and Texas, state law prohibits the use of mobile tracking technologies without the consent of the owner of the device or vehicle. Although the company's use of tracking information could be deemed as “company consent,” having the employee sign an APA that acknowledges the right of the employer to use GPS to track the location of the device or vehicle will avoid any later claim that the employee's consent was not obtained. In legal terms, the employee's signature on the APA demonstrates that the employee had notice of, and consented to, the company's right to use GPS to monitor the location of the device or vehicle (and thus the employee's location, at least when the employee is carrying the device or in the vehicle).
What about after-hours GPS tracking?
If an employer uses a tracking system that continues to record the location of the device or car after work hours, the employer will be exposed to potential invasion of privacy claims or claims that a termination was wrongful because it was based on the employee's off-duty conduct. In a general sense, this type of tracking is similar to tracking the location of noncompany property. Any time an employer tracks noncompany property using GPS, privacy concerns will immediately be raised.
In one 2015 California suit, Arias v. Intermex Wire Transfer, a saleswoman sought economic damages of over $500,000 and unspecified punitive damages against her former employer for wrongful termination and invasion of privacy. Intermex had asked its employees to download a GPS tracking app to their personal smartphones so that the company could monitor their locations. Ms. Arias did so, but allegedly expressed concern that location tracking could occur after business hours. A regional vice president allegedly acknowledged that tracking could take place after work hours and allegedly said that Ms. Arias was required to keep her phone on “24/7” so she could answer calls from clients. The suit alleged that the vice president and perhaps others had tracked Ms. Arias's location after work hours.
Ms. Arias was fired a few weeks after removing the app from her smartphone. The suit later settled for an undisclosed amount. The bottom line: employers should never monitor employee locations after work hours and should ensure that monitoring programs or apps are deactivated after work hours — otherwise, they are at risk of a suit like Arias v. Intermex Wire Transfer.4
Bring your own device issues
Technology has continued to blur the lines between one's work life and personal life, and that blurring is being compounded by the willingness of some companies to allow employees to conduct work activities using personally owned devices. Although not inherently wrong or evil, the crossover between work and personal activities raises some vexing questions for employers:
Are the devices secure, or can they be used as a “back door” into company e-infrastructure?– Failure of the company to implement bring your own device (BYOD) security protocols, educate employees about BYOD security, and monitor security performance can leave the company exposed to a wide variety of malware, viruses, misappropriation risks, and data corruption risks.
In civil suits or regulatory proceedings, the BYOD device can be subject to discovery. Practically speaking, this means that everything on the device may be subject to disclosure to the opposing party or regulator — whether the information is work-related or personal. Many companies now use mobile device management systems (MDM) to virtually segment work and personal information on a variety of smartphones and operating platforms. This software may assist the employer in differentiating work and personal data, but may not be infallible given today's crossovers of our business and personal lives.– In employment cases, the key issue is going to be whether the employee had a reasonable expectation of privacy because the device belonged to the employee.Note: A carefully drafted APA and BYOD policy is a MUST if the employer is going to successfully argue that the employee's expectation of privacy was removed. The policy must clearly spell out if the employer will be monitoring work-related internet use or emails or text messages sent or received using employee-owned devices, or using GPS tracking (only during work hours) of employee-owned devices; describe the steps the employer will take to segregate or otherwise protect personal information of the employee; and obtain the consent of the employee to monitoring of employee-owned devices based on the employer's legitimate business purposes.The BYOD policy also needs to cover the employee's obligations to preserve information on the device when a “litigation hold” is issued because the employer is sued or named in a regulatory proceeding, or litigation is reasonably anticipated.The employer needs to ensure that litigation hold notifications cover all employees and devices that may contain information potentially related to a suit or proceeding.If the employer has any concerns about employees deleting electronic communications, the employer could choose to make a mirror image of the hard drive of the company server through which the communications are routed. This action should be taken only after consulting legal counsel so that the company understands all of the legal implications of taking this action.
The BYOD policy should educate employees about the possibility that customs, border enforcement, or law enforcement personnel could seize devices believed to contain company information, with a corresponding loss of personal information on the BYOD device.
Employers also need to consider how the BYOD policy should address the loss of personal information caused by installation or operation of company-owned software; the loss of personal information because of security breaches not prevented by company systems; and the possible exposure to repetitive stress injuries (for example, carpal tunnel syndrome) from use of BYOD devices.
When an employee is terminated, the employer may have a standing instruction for the IT department to remotely “wipe” a device clean to prevent the misappropriation or the inadvertent loss of company data. What happens if an employee's device is wiped, with a loss of personal information, pictures, videos, or emails? You can guess that a former employee is unlikely to give the company the benefit of the doubt when asking how personal data came to be deleted.
The use of personal devices for work communications by non-exempt employees after work hours can expose the employer to overtime claims by these workers, especially if the employer makes a habit of contacting the employees after work hours. We further explore the topic of “off-the-clock” work later