CT SB00159

Prohibits employers from requesting or requiring employees or applicants to provide usernames, passwords, or other authentication credentials for accessing personal online accounts (email, social media, retail websites) effective October 1, 2013.

Bars employers from discharging, disciplining, discriminating against, retaliating against, or penalizing employees or applicants who refuse to provide access to personal online accounts.

Protects employees and applicants from retaliation for filing complaints with public or private bodies about employer violations or for testifying in proceedings related to violations.

Authorizes the Attorney General to bring civil actions in Superior Court against employers who violate the act, with penalties up to $10,000 per violation and additional equitable relief as deemed appropriate.

Requires the Attorney General to consider an employer's previous compliance record and violation severity when determining penalty amounts.