1. (1) An employer may not:

   1. (a) Request, require, or otherwise coerce an employee or applicant to disclose login information for the employee's or applicant's personal social networking account;
   2. (b) Request, require, or otherwise coerce an employee or applicant to access his or her personal social networking account in the employer's presence in a manner that enables the employer to observe the contents of the account;
   3. (c) Compel or coerce an employee or applicant to add a person, including the employer, to the list of contacts associated with the employee's or applicant's personal social networking account;
   4. (d) Request, require, or cause an employee or applicant to alter the settings on his or her personal social networking account that affect a third party's ability to view the contents of the account; or
   5. (e) Take adverse action against an employee or applicant because the employee or applicant refuses to disclose his or her login information, access his or her personal social networking account in the employer's presence, add a person to the list of contacts associated with his or her personal social networking account, or alter the settings on his or her personal social networking account that affect a third party's ability to view the contents of the account.

2. (2) This section does not apply to an employer's request or requirement that an employee share content from his or her personal social networking account if the following conditions are met:

   1. (a) The employer requests or requires the content to make a factual determination in the course of conducting an investigation;
   2. (b) The employer undertakes the investigation in response to receipt of information about the employee's activity on his or her personal social networking account;

   3. (c) The purpose of the investigation is to:

      1. (i) Ensure compliance with applicable laws, regulatory requirements, or prohibitions against work-related employee misconduct; or (ii) investigate an allegation of unauthorized transfer of an employer's proprietary information, confidential information, or financial data to the employee's personal social networking account; and
   4. (d) The employer does not request or require the employee to provide his or her login information.

3. (3) This section does not:

   1. (a) Apply to a social network, intranet, or other technology platform that is intended primarily to facilitate work-related information exchange, collaboration, or communication by employees or other workers;

   2. (b) Prohibit an employer from requesting or requiring an employee to disclose login information for access to:

      1. (i) An account or service provided by virtue of the employee's employment relationship with the employer; or (ii) an electronic communications device or online account paid for or supplied by the employer;
   3. (c) Prohibit an employer from enforcing existing personnel policies that do not conflict with this section;
   4. (d) Prevent an employer from complying with the requirements of state or federal statutes, rules or regulations, case law, or rules of self-regulatory organizations; or
   5. (e) Apply to a background investigation in accordance with RCW 43.101.095. However, the officer must not be required to provide login information.
4. (4) If, through the use of an employer-provided electronic communications device or an electronic device or program that monitors an employer's network, an employer inadvertently receives an employee's login information, the employer is not liable for possessing the information but may not use the login information to access the employee's personal social networking account.

5. (5) For the purposes of this section and RCW 49.44.205:

   1. (a) "Adverse action" means: Discharging, disciplining, or otherwise penalizing an employee; threatening to discharge, discipline, or otherwise penalize an employee; and failing or refusing to hire an applicant.
   2. (b) "Applicant" means an applicant for employment.
   3. (c) "Electronic communications device" means a device that uses electronic signals to create, transmit, and receive information, including computers, telephones, personal digital assistants, and other similar devices.
   4. (d) "Employer" means any person, firm, corporation, partnership, business trust, legal representative, or other business entity which engages in any business, industry, profession, or other activity in this state and employs one or more employees, and includes the state, any state institution, state agency, political subdivisions of the state, and any municipal corporation or quasi-municipal corporation. "Employer" includes an agent, a representative, or a designee of the employer.
   5. (e) "Login information" means a user name and password, a password, or other means of authentication that protects access to a personal social networking account.

[ 2021 c 323 s 24; 2013 c 330 s 1.]