995.55 Internet privacy protection.
(1) Definitions. In this section:
(a) “Access information" means a user name and password or any other security information that protects access to a personal Internet account.
(b) “Educational institution" means an institution of higher education, as defined in s. 108.02 (18); a technical college established under s. 38.02; a school, as defined in s. 440.52 (11) (a) 2.; a public school, as described in s. 115.01 (1); a charter school, as defined in s. 115.001 (1); a private school, as defined in s. 115.001 (3r); or a private educational testing service or administrator.
(c) “Employer" means any person engaging in any activity, enterprise, or business employing at least one individual. “Employer" includes the state, its political subdivisions, and any office, department, independent agency, authority, institution, association, society, or other body in state or local government created or authorized to be created by the constitution or any law, including the legislature and the courts.
(d) “Personal Internet account" means an Internet-based account that is created and used by an individual exclusively for purposes of personal communications.
(2) Restrictions on employer access to personal Internet accounts.
(a) Except as provided in pars. (b), (c), and (d), no employer may do any of the following:
1. Request or require an employee or applicant for employment, as a condition of employment, to disclose access information for the personal Internet account of the employee or applicant or to otherwise grant access to or allow observation of that account.
2. Discharge or otherwise discriminate against an employee for exercising the right under subd. 1. to refuse to disclose access information for, grant access to, or allow observation of the employee's personal Internet account, opposing a practice prohibited under subd. 1., filing a complaint or attempting to enforce any right under subd. 1., or testifying or assisting in any action or proceeding to enforce any right under subd. 1.
3. Refuse to hire an applicant for employment because the applicant refused to disclose access information for, grant access to, or allow observation of the applicant's personal Internet account.
(b) Paragraph (a) does not prohibit an employer from doing any of the following:
1. Requesting or requiring an employee to disclose access information to the employer in order for the employer to gain access to or operate an electronic communications device supplied or paid for in whole or in part by the employer or in order for the employer to gain access to an account or service provided by the employer, obtained by virtue of the employee's employment relationship with the employer, or used for the employer's business purposes.
2. Discharging or disciplining an employee for transferring the employer's proprietary or confidential information or financial data to the employee's personal Internet account without the employer's authorization.
3. Subject to this subdivision, conducting an investigation or requiring an employee to cooperate in an investigation of any alleged unauthorized transfer of the employer's proprietary or confidential information or financial data to the employee's personal Internet account, if the employer has reasonable cause to believe that such a transfer has occurred, or of any other alleged employment-related misconduct, violation of the law, or violation of the employer's work rules as specified in an employee handbook, if the employer has reasonable cause to believe that activity on the employee's personal Internet account relating to that misconduct or violation has occurred. In conducting an investigation or requiring an employee to cooperate in an investigation under this subdivision, an employer may require an employee to grant access to or allow observation of the employee's personal Internet account, but may not require the employee to disclose access information for that account.
4. Restricting or prohibiting an employee's access to certain Internet sites while using an electronic communications device supplied or paid for in whole or in part by the employer or while using the employer's network or other resources.
5. Complying with a duty to screen applicants for employment prior to hiring or a duty to monitor or retain employee communications that is established under state or federal laws, rules, or regulations or the rules of a self-regulatory organization, as defined in 15 USC 78c (a) (26).
6. Viewing, accessing, or using information about an employee or applicant for employment that can be obtained without access information or that is available in the public domain.
7. Requesting or requiring an employee to disclose the employee's personal electronic mail address.
(c) Paragraph (a) does not apply to a personal Internet account or an electronic communications device of an employee engaged in providing financial services who uses the account or device to conduct the business of an employer that is subject to the content, supervision, and retention requirements imposed by federal securities laws and regulations or by the rules of a self-regulatory organization, as defined in 15 USC 78c (a) (26).
(d) An employer that inadvertently obtains access information for an employee's personal Internet account through the use of an electronic device or program that monitors the employer's network or through an electronic communications device supplied or paid for in whole or in part by the employer is not liable under par. (a) for possessing that access information so long as the employer does not use that access information to access the employee's personal Internet account.
(3) Restrictions on educational institution access to personal Internet accounts.
(a) Except as provided in par. (b), no educational institution may do any of the following:
1. Request or require a student or prospective student, as a condition of admission or enrollment, to disclose access information for the personal Internet account of the student or prospective student or to otherwise grant access to or allow observation of that account.
2. Expel, suspend, discipline, or otherwise penalize any student for exercising the right under subd. 1. to refuse to disclose access information for, grant access to, or allow observation of the student's personal Internet account, opposing a practice prohibited under subd. 1., filing a complaint or attempting to enforce any right under subd. 1., or testifying or assisting in any action or proceeding to enforce any right under subd. 1.
3. Refuse to admit a prospective student because the prospective student refused to disclose access information for, grant access to, or allow observation of the prospective student's personal Internet account.
(b) Paragraph (a) does not prohibit an educational institution from doing any of the following:
1. Requesting or requiring a student to disclose access information to the educational institution in order for the institution to gain access to or operate an electronic communications device supplied or paid for in whole or in part by the institution or in order for the educational institution to gain access to an account or service provided by the institution, obtained by virtue of the student's admission to the educational institution, or used for educational purposes.
2. Viewing, accessing, or using information about a student or prospective student that can be obtained without access information or that is available in the public domain.
(4) Restrictions on landlord access to personal Internet accounts.
(a) Except as provided in par. (b), no landlord may do any of the following:
1. Request or require a tenant or prospective tenant, as a condition of tenancy, to disclose access information for the personal Internet account of the tenant or prospective tenant or to otherwise grant access to or allow observation of that account.
2. Discriminate in a manner described in s. 106.50 (2) against a tenant or prospective tenant for exercising the right under subd. 1. to refuse to disclose access information for, grant access to, or allow observation of the personal Internet account of the tenant or prospective tenant, opposing a practice prohibited under subd. 1., filing a complaint or attempting to enforce any right under subd. 1., or testifying or assisting in any action or proceeding to enforce any right under subd. 1.
(b) Paragraph (a) does not prohibit a landlord from viewing, accessing, or using information about a tenant or prospective tenant that can be obtained without access information or that is available in the public domain.
(5) No duty to monitor.
(a) Nothing in this section creates a duty for an employer, educational institution, or landlord to search or monitor the activity of any personal Internet account.
(b) An employer, educational institution, or landlord is not liable under this section for any failure to request or require that an employee, applicant for employment, student, prospective student, tenant, or prospective tenant grant access to, allow observation of, or disclose information that allows access to or observation of a personal Internet account of the employee, applicant for employment, student, prospective student, tenant, or prospective tenant.
(6) Enforcement.
(a) Any person who violates sub. (2) (a), (3) (a), or (4) (a) may be required to forfeit not more than $1,000.
(b) An employee who is discharged or otherwise discriminated against in violation of sub. (2) (a) 2., an applicant for employment who is not hired in violation of sub. (2) (a) 3., a student who is expelled, suspended, disciplined, or otherwise penalized in violation of sub. (3) (a) 2., or a prospective student who is not admitted in violation of sub. (3) (a) 3., may file a complaint with the department of workforce development, and that department shall process the complaint in the same manner as employment discrimination complaints are processed under s. 111.39. If the department of workforce development finds that a violation of sub. (2) (a) 2. or 3. or (3) (a) 2. or 3. has been committed, that department may order the employer or educational institution to take such action authorized under s. 111.39 as will remedy the violation. Section 111.322 (2m) applies to a discharge or other discriminatory act arising in connection with any proceeding under this paragraph.
(c) A tenant or prospective tenant who is discriminated against in violation of sub. (4) (a) 2. may file a complaint with the department of workforce development, and that department shall process the complaint in the same manner as housing discrimination complaints are processed under s. 106.50. If the department of workforce development finds that a violation of sub. (4) (a) 2. has been committed, that department may order the landlord to take such action authorized under s. 106.50 as will remedy the violation.
History: 2013 a. 208; 2017 a. 59.
Social Media: Locking the Door to Private Information. Dill. Wis. Law. July/Aug. 2014.