Password Protection Act: Bans Bosses Asking For Facebook Passwords
An anonymous reader writes "On the heels of a similar bill introduced last month. A group of Democrats today introduced legislation in both the House and Senate to prevent employers from forcing employers and job applicants into sharing information from their personal social networking accounts. In other words, Maryland may soon not be the only state that has banned employers demanding access to Facebook accounts. The Password Protection Act of 2012 (PPA) would also prevent employers from accessing information on any computer that isn't owned or controlled by an employee, including private e-mail accounts, photo sharing sites, and smartphones."
They'll demand you add them as a friend!
How is this the domain of the United States Congress?
Jesus told him, "I am the way, the truth, and the life. No one can come to the Father except through me. - John 14:6 NLT
Introducing bills to fix problems they think they might have seen a thing about, somewhere...
Now if only Congress would extend the same protection to bodily fluids and samples. No more urine, hair, and saliva tests.
americans.
If corporations are people, these laws probably exist already.
Regardless of laws, the audacity of demanding personal passwords as a condition of employment just boggles my mind.
We're employees hired to do a job and go home. We're not paid to room and board our employer in our underpants.
Did this actually happen, or is it a modern urban legend that employers were requiring passwords? And if it really happened, aren't there existing privacy laws in place that could have been used to sue these businesses out of existence?
Better known as 318230.
So the summary notes there was already a similar bill. What happened to that? What's different/better/more-likely -to-get-passed about this one?
prevent employers from accessing information on any computer that isn't owned or controlled by an employee...
So, they are trying to prevent employers from asking for my Facebook/Gmail/etc. password, because it's there in the magical "cloud" and not owned/controlled by me; but it is totally OK for my employer to insist on having a password to my *home* computer, just because it is owned and controlled by me??? Which, by the way, likely has a cookie to authorize accessing my identity "out there"... Or should I say that it's actually my wife's computer?
Or my reading comprehension is really bad today, unlikely though!
Paul B.
The Password Protection Act of 2012 (PPA) would also prevent employers from accessing information on any computer that isn't owned or controlled by an employee, including private e-mail accounts, photo sharing sites, and smartphones.
I assume the summary meant to say that the act prevents employers from accessing information on any computer that is owned or controlled by an employee.
Isn't it better to game the system by creating a fake facebook page which you salt with glowing comments about the prospect of working in some company, industry, whatever? maybe salt with other fake postings demonstrating your intelligence, etc.? I dunno....the constant stream of news about police brutality, unjust situations, erosion of rights, destruction of the economy, etc., etc. has left me hopeless, with only the prospect of gaming the system instead of fighting it.
As an applicant, you are not yet an employee. If they want to demand that I give them that information after I am an employee, and I refuse, I would not be surprised if there can be a wrongful termination lawsuit.
Just don't use social media and you won't have to hide from your employer... Or.. Gasp... Be careful and keep it safe for work at all times.
One really should not put anything online that you would not want EVERYBODY to be able to read. Everything you put online, pictures, comments, blogs, chats etc. is going to be public information forever, or at least it CAN end up out living you. Remember that every time you are tempted to post.
"File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
Could someone do a rewrite?
Companies (and you) can go and fuck right off. None of you have any business dictating what I can and cannot do in my personal life.
I would have thought the 4th amendment would have covered this, so all I see is grandstanding politicians pretending they care about the people while ignoring their own Constitution.
I do not fail; I succeed at finding out what does not work.
You can ALWAYS find an excuse not to hire someone.
Um, I'm sorry Jamal Yosephef green, it's not that you're Black it's ust that you don't have the skills we're looking for.
I'm sorry Mr. Jones, it's not that you're old, it's just you're over-qualified.
I'm sorry Ms. Stacy Jones, you don't have the 10 years of experience in: Java, DB2/2, C#, Objective-C, COBOL, MS-SQL & Oracle, Linux & Windows & OS/2 & OSX & AIX & CICS skills we're looking for.
Unfortunately, there are no Americans who can fill those qualifications but low and behold, there are 10,000 Indian IIT graduates who can. We'll have to move to India.
Yours -
Big American Based IT Services Firm.
Of course the reality is that if you really need that job you have pretty much no option but hand over whatever the boss asks for.
Sure, in theory you could refuse, and when you get fired (or not hired in the first place) in theory you could drag them into court, but in practice the vast majority of working folks can't afford to lose the job in the first place, and can't afford the lawyers in the second.
This would be about as effective as most workplace safety laws - sure you can refuse to do dangerous work, but when there are a hundred people lined up who are prepared to climb on a four story roof with no safety harness you'll find yourself unemployed very fast.
Three Squirrels
Yeah, it didn't make sense. After reading the article, it was clearly a typo, and should have said "from accessing information on any computer that isn't owned or controlled by an employer". Ie. employers can still demand you hand over passwords on *their* systems, which seems reasonable enough.
You would have thought wrong, since the 4th Amendment imposes no restrictions on private conduct.
Do not indulge in social networks? :-)
Or could it be seen as a mild form of sociopathy and prevent you from getting a job, or even get you fired?
For not having a Facebook account
When I had a Facebook account I systematically blocked all the people who I had to work with. When I moved to an other department/company/project I unblocked them (did it with friends and no friends alike).
I do not think work and social networking belong together at all. I honestly think Facebook should be banned at all workplaces, but before I judge: I allow my programmers/dbas to use it freely in my department. I would however be happy to see it gone from work hours altogether, with Twitter and all the time-killing crap people should be using in their free time. As for me: I closed my account because when you have it you will use it. And yes, I live abroad with all my friends left home. When I care I contact them, but daily crap about nothing is just .. ahm .... a waste of time for me.
On TFA and issue: it does not fit into my head. Your account, your private info, the companies should fuck off and get out of your private life. But it should go both ways: if you wan this, you should never-ever-ever log into your Facebook or Twitter or MySpace from the company computer. Either way, if you do, they can catch your pass 999 ways (security camera, keycatcher, sniffer (non-SSL logins) and you actually deserve it.
Nothing stops me from demanding you give me your Facebook password. If you refuse, I can then refuse to provide you with whatever I feel like, such as access to my house, help with things you might need and so on. I can make it a prerequisite that to be my friend in real life, you give me your Facebook password.
Now of course if I do that, all that will happen is I have no friends. Being that as individuals we are on a relatively equal power footing we can work it out between ourselves.
What is happening is the government is saying that companies have an unequal power balance in this equation, and thus this is something they can't demand.
Remember it isn't as though companies are abducting people off the streets at gunpoint and forcing them to hand over their password, that would be illegal for a company or a person to do.
What they are doing is saying "You wanna work here? Then you have to hand over the password." If you refuse, they won't hire you. That would be the same as me saying "You wanna come in for movie night? Then you have to hand over your password." If you refuse, I tell you to go home, you can't come and watch movies with the rest of us.
Right now, both are legal. If this passes, the company won't be able to make the demand, though I still can. The reason is that if I pulled that shit with movie night, it wouldn't matter, nobody would come, I'd watch alone and that is that. However a job is more important, it isn't movie night, so employers aren't going to be allowed to play that game.
That way I don't even have to finish the interview; I can just get up and walk out.
Just ask us to bend over while they lube up a finger?
Pardon me, but...
Don't they have something better to do?
This is like Nero playing the fiddle while Rome burns.
there are 3 kinds of people:
* those who can count
* those who can't
Yeah, it didn't make sense. After reading the article, it was clearly a typo, and should have said "from accessing information on any computer that isn't owned or controlled by an employer". Ie. employers can still demand you hand over passwords on *their* systems, which seems reasonable enough.
Of course that means you might still have a problem if you want to work for a social networking company that you actually use... Of course said company already has your data, but if you are part of the 99% that uses the same password everywhere, you are kinda screwed if you actually hand over your password.
"The Password Protection Act of 2012 (PPA) would also prevent employers from accessing information on any computer that isn't owned or controlled by an employee, including private e-mail accounts, photo sharing sites, and smartphones."
Well, that's all well and good, but what about computers that ARE owned by the employee, such as their personally-owned laptop, home computer, or personal smart phone? Does the act also prevent an employer requiring access to those?
Seems to be a glaring omission to me...
This sounds like overbearing government intrusion into the private market to me. Employers should be free to demand whatever they want as a condition of employment, from high-school transcripts to semen samples! If you don't like it, find another place to work!
The Password Protection Act of 2012 (PPA) would also prevent employers from accessing information on any computer that isn't owned or controlled by an employee, including private e-mail accounts, photo sharing sites, and smartphones."
Shouldn't that be isn't owned or controlled by the employer or company instead? An employee's personal computer (and I'm using personal here to mean one that belongs to the employee) shouldn't be accessed by the employer either.
Seeing as they screwed up the employee/employer thing farther up as well, that makes sense.
If you log into my friend's account and you're not my friend, you now have access to information in my profile that I did not give you permission to.
Facebook's ToS explicitly prohibits doing this.
Violating a website's ToS in order to gain access to information you don't have permission to access is, I think, some sort of federal crime.
Any lawyers care to chime in on this one?
IANAL - Last I checked, the DOJ ruled violating the TOS is criminal and goes against Computer Fraud and Abuse Act. An appeals court ruled violating a TOS is not criminal, but several other appeals courts have. It is now going to the supreme court, but it currently stands to be criminal
Anyway, where I was going with this is handing over your password or asking for another person's password is in violation of Facebook's TOS. It currently stands that asking for your password or asking to even see your FB account is criminal, and I'm pretty sure it is illegal to require a potential employee to participate in something illegal.
I also thought it was illegal to require an employee or potential employee to violate a legally binding contract, such as a TOS.
You appear to have responded to a hypothetical post in your head, rather than what I wrote.
My statement was one on the law as related to the parent: He figured that if companies were people, it would already be illegal for them to ask for the password to a Facebook account. I'm showing that no it isn't, it is perfectly legal just as it is legal for any person to ask for the password.
The reason the law is being created, and I quote my post here is that "companies have an unequal power balance in this equation." I also point out the reason, again quoting my post "The reason is that if I pulled that shit with movie night, it wouldn't matter, nobody would come, I'd watch alone and that is that. However a job is more important, it isn't movie night, so employers aren't going to be allowed to play that game."
So shut the fuck up about my "libertarian fantasy" that exists only in your head, and read my damn post next time before responding. My point was to show that no, companies AREN'T prohibited from doing this right now under some other law and that the reason a new law is being made is the unequal power balance between a company an a person.
Depends on what algorithm they use. It's not like they're going to get your password out of MD5.
Your Facebook data is given to businesses every day; Facebook gives it to them without your knowledge. Where is the outrage about that?
The only thing this law does is to ensure that the employer has to pay Facebook for the data, that you can't give it to them for free.
I hear the government there allow employers to demand sexual intercourse as a condition of employment.
(Fortunately, the rest of America disagrees!)
When I was much younger my life's dream was to invent a new crime.
The 'Computer Fraud and Abuse Act.' makes anything involving computers that a judge thinks should be illegal, illegal. 'Ips Post Facto?' never heard of it.
I now have to invent a new crime that doesn't involve computers. Best I've got is programming an electric car to make the 'cross now' sound as it drives around. Which sucks as I can't make any money at that and I don't have anything against blind people. Plus it involves computers.
John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
No need for a password when you have access to the user database...
It was a public school in the Michigan school district. Other examples have been prisons.
So this is a problem with PUBLIC/GOVERNMENT Schools and GOVERNMENT PRISONS. These are leeches not employers.
Naturally, government's solution to a problem of its creation is to pass a law covering private employers.
Now make it that way at borders.
All I can do is laugh at the idea of the U.S. Federal government protecting people from privacy violations.
How about they ban themselves and their renegade espionage and law enforcement agencies from committing egregious privacy violations before they start meddling in private relationships?
Isn't this sort of activity by employers already illegal under federal law under the Computer Fraud and Abuse Act? If so, this is just another political point scoring sideshow, like banning guns that are already banned under a different and older law.
Isnt' accessing facebook and pretending to be someone else already a felony prosecutable by federal law? I was under the impression that accessing a computer system while pretending to be someone elase, violating the terms of service, was already a felony.
I gotta job
gotta means have to in the vernacular...so you 'have to job'?
Fucking moron. I bet you think Inglush classes are wurthless 2?!?
mmmhmmm....
Credit record. they are not giving me credit. its a damn job.
I want to cut the fucking throat of the next one who ask for it.
Yeah, but the GP is talking about using the same password everywhere, which is only an issue regarding the password, and not the data behind it.
Password? Okay. I'll give you my password if you give me your SSN and credit card numbers.
Yeah... what I don't understand, is do we need a special law? Can employers ask for you home keys so they can search through it -- or any other privately owned property?
So they pass a law restricting facebook passwords -- then employers require you to install a monitoring app on your iphone or gphone...that monitors who you connect to and what you download -- just so they can be sure you aren't leaking company secrets, of course.
If there are no laws controlling employer acquisition of personal information and/or property, then banning facebook is pointless, as it doesn't address the problem -- it just gives publicity to 1 website about to go public...
Wonderful...
“The Password Protection Act of 2012 (PPA) would also prevent employers from accessing information on any computer that isn't owned or controlled by an employee, including private e-mail accounts, photo sharing sites, and smartphones." [Emphasis added] This doesn’t make any sense. Are you sure the word “employee” should not have been “employer?” Any computer, phone, or heart pacemaker your employer or prospective employer graciously decides to permit you to bring to work, or to any other premises over which they may have control, is “controlled by an employer.” The only reason your car is not, even though parking on company property is clearly subject to its control, is that this might expose the employer or prospective employer, and thus their wealthy and powerful insurance company, to liability for an accident. My law school dean was fond of Will Rogers’ comment “When Congress tells a joke, it’s a law, and when Congress passes a law, it’s a joke.” Employment law is a sick joke. You can fire practically anyone, except a few people with a lot of money and political “suck,” for “good cause, no cause at all, or an evil and malicious cause,” regardless of any promises you may have made to get them to take the job. You can’t refuse to hire, or fire, someone for being black or over 40 or Jewish or disabled but qualified, but the odds of an employer, much less a large and influential employer, getting called to account legally if that is your real reason are slim to none in the real world if you’re smart enough to document the very common fact that they are also “over-qualified,” or have never done some rare procedure in the field that they may have to do on this job, and that anyone could do, and don’t hire them, or that they refused to participate in criminal conduct, or that they left their post to save the life of a child within sight. Whistle-blower laws are being construed so narrowly that they offer little of the protection intended, or which the voters thought was intended, by Congress or state legislators. The courts have gone so far toward gutting the Americans with Disabilities Act that Congress amended it largely to restore the clear original intent of the law. They’re already starting to gut the law as amended again. It doesn’t make any difference, because, like long-promised privacy protection legislation, it doesn’t have a snowball’s chance of being passed in any form that would actually address and solve the problems. Oh, sure, something with a high-sounding name will get passed, but, by the time the lobbyists get through rewriting it, it will have about as much effect as barking at the moon.