Many states have enacted social media privacy laws (statutes) that prohibit an employer from requesting or requiring an employee or job applicant to disclose their username or password on any personal social media account—or requesting or requiring the employee access the social media account in the presence of the employer. These laws often also prohibit an employer from penalizing, disciplining, or terminating/discharging an employee for refusing to disclose such information.
Social media privacy laws vary from state to state and may not apply if the employer is investigating an allegation of employee misconduct (harassing another employee on social media) or a violation of laws and regulations (communications on social media about workplace safety violations). And an employer may require or request an employee disclose a username, password, or other means of accessing an electronic device (phone, computer, tablet) issued by the employer.
States with specific social media privacy laws for the workplace include:
• Arkansas
• California
• Colorado
• Connecticut
• Delaware
• Illinois
• Louisiana
• Maine
• Maryland
• Michigan
• Montana
• Nebraska
• Nevada
• New Hampshire
• New Jersey
• New Mexico
• Oklahoma
• Oregon
• Rhode Island
• Tennessee
• Utah
• Vermont
• Virginia
• Washington
• West Virginia
• Wisconsin
In states without specific social media privacy laws for the workplace, other general privacy laws may apply.
As of the knowledge cutoff date in 2023, Indiana does not have a specific social media privacy law that regulates an employer's access to employees' or job applicants' personal social media accounts. Unlike the states listed, Indiana has not enacted statutes that explicitly prohibit employers from requesting or requiring usernames, passwords, or other access to personal social media accounts. However, employees and job applicants in Indiana may still be protected under general privacy laws and federal laws such as the Stored Communications Act or the Computer Fraud and Abuse Act. Employers in Indiana should be cautious and consider the implications of general privacy rights and federal laws before attempting to access an employee's or applicant's personal social media information. Additionally, it's important for employers to stay informed about any changes in state legislation, as laws regarding digital privacy and social media are subject to change.