CT SB00426

Prohibits employers from requesting or requiring employees and applicants to provide passwords or authentication credentials for personal online accounts, or to access such accounts in the employer's presence, effective October 1, 2015

Bars employers from discharging, disciplining, retaliating against, or refusing to hire individuals who refuse to share personal account access or file complaints about such violations

Allows employers to access employee credentials for employer-provided accounts and devices, and to investigate suspected unauthorized transfer of proprietary or confidential information without requiring password disclosure

Permits employers to monitor electronic data on employer-paid devices or networks, and to comply with state or federal legal requirements regarding employee monitoring

Establishes complaint procedures with the Labor Commissioner, with penalties of up to $500 for first violations and $1,000 for subsequent violations against employees, and up to $25/$500 for applicants; prevailing parties may recover attorney's fees and costs