CT SB00317

Prohibits employers from requesting or requiring employees or applicants to provide usernames, passwords, or other authentication credentials for personal online accounts, effective October 1, 2014.

Prohibits employers from penalizing, discharging, discriminating against, or retaliating against employees or applicants who refuse to provide access to personal online accounts or who file complaints about such violations.

Allows employers to request credentials for work-related accounts, employer-paid devices, and to investigate unauthorized transfer of proprietary or confidential information to personal accounts.

Establishes enforcement through the Labor Commissioner with civil penalties of up to $500 for first violations and $1,000 for subsequent violations against employees; up to $25 for first violations and $500 for subsequent violations against applicants.

Permits prevailing employees and applicants to recover reasonable attorney's fees and costs, and allows appeal of commissioner decisions to Superior Court.