HB 6 Summary

• Establishes the Uniform Employee and Student Online Privacy Protection Act, prohibiting employers and educational institutions from requiring employees and students to disclose login information or content of protected personal online accounts.

• Prohibits employers and educational institutions from coercing account access, altering account settings to increase accessibility, or taking adverse action against employees or students who refuse to comply with prohibited requests.

• Allows employers and educational institutions to access publicly available information, comply with court orders and federal/state law, enforce device use policies, and access account content (without login information) for investigations of misconduct or to protect against safety threats and IT system threats.

• Establishes civil enforcement through the attorney general (up to $1,000 per violation, not exceeding $100,000 per event) and private right of action for employees and students (allowing injunctive relief, actual damages, and attorney's fees).

• Takes effect January 1, 2050.