(1) This chapter does not prohibit an employer from doing any of the following:

1. (a) requesting or requiring an employee to disclose a username or password required only to gain access to the following:

   1. (i) an electronic communications device supplied by or paid for in whole or in part by the employer; or
   2. (ii) an account or service provided by the employer, obtained by virtue of the employee's employment relationship with the employer, and used for the employer's business purposes;
2. (b) disciplining or discharging an employee for transferring the employer's proprietary or confidential information or financial data to an employee's personal Internet account without the employer's authorization;

3. (c) conducting an investigation or requiring an employee to cooperate in an investigation in any of the following:

   1. (i) if there is specific information about activity on the employee's personal Internet account, for the purpose of ensuring compliance with applicable laws, regulatory requirements, or prohibitions against work-related employee misconduct; or
   2. (ii) if the employer has specific information about an unauthorized transfer of the employer's proprietary information, confidential information, or financial data to an employee's personal Internet account;
4. (d) restricting or prohibiting an employee's access to certain websites while using an electronic communications device supplied by, or paid for in whole or in part by, the employer or while using an employer's network or resources, in accordance with state and federal law; or
5. (e) monitoring, reviewing, accessing, or blocking electronic data stored on an electronic communications device supplied by, or paid for in whole or in part by, the employer, or stored on an employer's network, in accordance with state and federal law.