MS SB2250

Prohibits employers from requesting or requiring employees or applicants to disclose usernames, passwords, or other means of accessing personal accounts or services through electronic devices.

Allows employers to require disclosure of credentials only for nonpersonal accounts used to access employer internal systems or work-related websites within the scope of employment duties.

Prohibits employers from discharging, disciplining, or refusing to hire applicants who refuse to disclose personal account access information.

Prohibits employees from downloading unauthorized employer proprietary information or financial data to personal websites or web-based accounts.

Allows employers to conduct investigations based on information regarding unauthorized downloading of proprietary data or potential violations of securities or financial law and regulatory requirements.