Showing posts with label Privacy in the Workplace. Show all posts
Showing posts with label Privacy in the Workplace. Show all posts

Thursday, June 17, 2010

City of Ontario, California, v. Quon


The SCOTUS ruled unanimously today in City of Ontario v. Quon that a Police Department had the right to search text-messages sent by police officers on government-issued pagers.

The California City of Ontario (the City) had distributed pagers to some of its employees, including some police officers. Under the City’s contract with Arch Wireless, the company providing the text-messaging service to the City, each pager was allotted 25,000 characters per month, after which the City had to pay additional fees. Employees were requested to reimburse the City for overcharges.

Some police officers were given pagers, among them respondent Quon. Mr. Quon and some of his colleagues used more than 25, 000 characters for several months and thus had to pay overcharges, which they did. The Ontario Police Department (OPD) decided in 2002 to audit its text-messaging practices. In order to determine whether messages were work-related, or whether messages were personal, the City asked Arch Wireless to mail them the transcripts of all messages. Some of these messages turned out to be sexually explicit, and most of them were of personal nature. Respondent Quon was disciplined for violating OPD’s rules.

Indeed, the City had a “Computer Usage, Internet and E-Mail policy” that applied to all of its employees. It specified that the City “reserves the right to monitor and log all network activity including e-mail and Internet use, with or without notice. Users should have no expectation of privacy when using these resources. Respondent Quon had signed an acknowledgment of that policy in 2000. Thes policy did not explicitly cover text messages, but, during a 2002 staff meeting, police officers were told that messages sent on the pagers were considered e-mails.

Mr. Quon and some of his colleagues filed a suit against the City, alleging inter alia that, by obtaining a transcript of their text messages, the City had violated their Fourth Amendment rights and the Stored Communications Act (SCA). The District Court granted Arch Wireless‘ motion for summary judgment on the SCA claim, but denied petitioner’s motion for summary judgment on the Fourth Amendment claims, as it determined that Mr. Quon had a reasonable expectation of privacy in his text messages.

The District Court distinguished between two types of audit. First, an audit could be made to find out whether the officer was using his pager for personal reasons. It found that such an audit is not reasonable. Second, an audit can be made to find out whether the existing character limits were inadequate, thus leading to officers having to pay for work-related messages. Such an audit would be reasonable. At trial, the District Court held that petioners had not violated the police officer’s Fourth Amendment rights.

Mr. Quon appealed, and the Ninth Circuit reversed in part. Quon had a reasonable expectation of privacy in his text messages, and the search was not reasonable, as there were “less-intrusive means” by which the OPD could have verified the efficacy of the 25,000 character limit. The Ninth Circuit also concluded that Arch Wireless had violated the SCA by turning over the transcript of the messages to the City. Arch Wireless was an Electronic Communications Service provider (ECS) to the City. The City was a subscriber, not an addressee or intended recipient of the communications, and it thus violated the SCA, 18 § 2702 (a)(1). Unfortunately, the merits of the SCA claim were not before the SCOTUS.

The Ninth Circuit denied a petition for rehearing en banc. The Supreme Court granted certiorari.

Fourth Amendment

The Fourth Amendment states: “The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated . . . .” It applies when the Government acts in its capacity as an employer.

In O’Connor v. Ortega, 480, U.S. 709, 717 (1987), the SCOTUS had held that “[i]ndividuals do not lose Fourth Amendment rights merely because they work for the government instead of a private employer.” O’Connor also set a two-step test to determine whether a government employment should have a reasonable expectation of privacy.

First, the court must determine on a case-by-case basis whether the government office is so open to fellow employees or the public that no expectation of privacy is reasonable. Second, if the employee indeed does have a reasonable expectation of privacy, the court must determine whether or not the employer may intrude on that expectation “for non investigatory, work-related purposes, as well as for investigations of work-related misconduct, should be judged by the standard of reasonableness under all the circumstances.” O’Connor, at 725–726.

Justice Scalia concurred in O’Connor, but would have dispensed with an inquiry into “operational realities” and would conclude “that the offices of government employees . . . are covered by Fourth Amendment protections as a general matter” Id., at 731. Justice Scalia would also have held “that government searches to retrieve work-related materials or to investigate violations of workplace rules—searches of the sort that are regarded as reasonable and normal in the private-employer context—do not violate the Fourth Amendment,” Id., at 732.

So there are two methods, but Justice Kennedy, who delivered today’s opinion, wrote that both methods would lead to the same results in the Quon case.

Did Quon have a reasonable expectation of privacy in his text messages?

Unfortunately, the SCOTUS shied away from answering that question.

The OPPD had a Computer Policy which extended to text messaging. Respondent contended that he had been told that an audit would not be necessary if he would pay for the overage, and thus had a reasonable expectation of privacy in the contents of his messages.

The SCOTUS expressed caution when having to consider “the concept of privacy expectations in communications made on electronic equipment owned by a government employer” as “the judiciary risks error by elaborating too fully on the Fourth Amendment implications of emerging technology before its role in society has become clear” in cases such as Olmstead or Katz. Thus, “prudence counsels caution before the facts in the instant case are used to establish far-reaching premises that define the existence, and extent, of privacy expectations enjoyed by employees when using employer-provided communication devices.”

The message is clear: the SCOTUS does not want Quon to become the reference case setting the threshold for an employee’s expectation of privacy in their messages sent using the numerous communications devices provided to them by their employer. Indeed, the “rapid changes in the dynamics of communications” make it difficult to predict “how employees’ privacy expectations will be shaped by those changes or the degree to which society will be prepared to recognize those expectations as reasonable.“ So “a broad holding concerning employees’ privacy expectations vis-à-vis employer-provided technological equipment might have implications for future cases that cannot be predicted. It is preferable to dispose of this case on narrower grounds.“

Searches without warrant are per se unreasonable under the Fourth Amendment, but there are some exceptions, and the SCOTUs held in O’Connor that “special needs” of the workplace justify one such exception, if the search is “justified at its inception” and if “the measures adopted are reasonably related to the objectives of the search and not excessively intrusive in light of” the circumstances giving rise to the search, 480 U. S., at 725-726. Such was the case in this matter according to the SCOTUS.

The Ninth Circuit had reversed because the search was not reasonable, as there were many simple ways by which the OPD could have verified the efficacy of the 25,000 character limit, without intruding on respondent’s Fourth Amendment rights. The SCOTUS held that this approach was inconsistent with controlling precedents, as the SCOTUS has “repeatedly refused to declare that only the ‘least intrusive’ search practicable can be reasonable under the Fourth Amendment.” Vernonia School District , 515 U.S. 646, 663.

Since the search was motivated by a legitimate work-related purpose, and because it was not excessive in scope, it was reasonable under the O’Connor approach. The SCOTUS reverses the judgment of the Ninth Circuit.

Tuesday, December 01, 2009

Les Simples Initiales ne Suffisent pas à Rendre un Dossier Personnel

Selon la jurisprudence de la Cour de Cassation, les fichiers créés par le salarié à l’aide de l’outil informatique mis à sa disposition par l’employeur pour les besoins de son travail sont présumés avoir un caractère professionnel, sauf si le salarié les identifie comme étant personnels, en sorte que l’employeur est en droit de les ouvrir hors la présence de l’intéressé.

La Cour de cassation vient toutefois de préciser que le simple fait d’utiliser ses initiales afin de nommer un dossier contenu dans le disque dur de l’ordinateur d’un salarié ne suffit pas à faire de ce dossier un dossier personnel.

Sunday, June 29, 2008

Google Health and Workplace Privacy

The New York reported on Friday about a recent privacy at work case. Mr. Sidell was fired by his employer. He left the company premises without signing out from his personal Yahoo email account, and the company allegedly read his personal emails.

This is an interesting case to follow, because the judges will have to answer to the question: do employers have the right to read their employee’s personal emails, when employees are accessing their email accounts using the company’s computer system?

Mr. Sidell used a Yahoo account. What if he had used a Gmail account, and was still signed up on the company’s computer? Would the employer have the right to peruse through his documents (Google documents), his blog (Blogger!) , and even his medical data (Google Health)?

Wednesday, January 16, 2008

A New Way to Monitor Employees, Curtesy of Microsoft

The Times reports todays that Microsoft is trying to patent a system that would allow employers to monitor their employee's productivity, not only by monitoring their work, but also by monitoring their physical conditions, the heart rate, even facial expressions... The Times reports that the system could “automatically detect frustration or stress in the user” and “offer and provide assistance accordingly”.

Friday, November 02, 2007

Opération de Maintenance et Droits des Salariés.

Peut-on intervenir librement sur les postes informatiques des salariés ? un article par Blandine Poidevin.

Maître Poidevin note qu’il convient d’informer préalablement le salarié et d’obtenir son accord, avant de commencer une opération de maintenance sur l’ordinateur du salarié.

Tuesday, October 23, 2007

No Subcutaneous Implanting of RFID Chips in California

A California bill, SB 362, has been signed into law on October 12. The law, effective January 1st, 2008, adds a section52.7 to the California Civil Code:

52.7. (a) Except as provided in subdivision (g), a person shall not require, coerce, or compel any other individual to undergo the subcutaneous implanting of an identification device.

Parents and guardians still have the right to implant the chips into their kids or dependents:

(g) This section shall not in any way modify existing statutory or case law regarding the rights of parents or guardians, the rights of children or minors, or the rights of dependent adults.

The law will prevents employers to force their employees to accept the implantation of RFID chips, an invasion of the workers's privacy that is particularly concerning.

As professor Paul Roth wrote in this report:

"The collection of data about an individual's movements or transactions over time so as to build up an increasingly accurate profile of that worker's conduct or performance. As tags become more and more common, tags on items carried or worn by an individual can be scanned by a compatible reader for additional information about an individual, such as their tastes, habits, or even medical condition. For example, RFID has been used to track medicines, which would enable an employer to scan for prescription drugs being taken by a worker or job applicant."

Friday, September 28, 2007

Illinois Right of Privacy in the Workplace Act

The U.S. filed a lawsuit on September 24 against the State of Illinois, seeking to invalidate Illinois Public Act 095-0138, The Right to Privacy in the Workplace Act.

The Illinois law, which will be effective on January 1st, 2008, prohibits employers to enrol in an Employment Eligibility Verification System, i.e. , a database allowing them to check the immigration status of new hires, as they are authorized to do so by federal law, 8 U.S.C. 1324(a). Such verification system includes E-Verify, an online database system operated by the Department of Homeland Security.

Illinois legislators were concerned that the systems currently available to employers are not accurate enough. The law would remain in effect until the Social Security Administration (SSA) and Department of Homeland Security (DHS) databases can determine that their databases are 99% accurate.

The law also requires that employers must safeguard the information provided by the workers, by using passwords and "other privacy protections", to prevent its use by unauthorized person, and to protect their confidentiality. This law may thus prevent, incidentally, the use of such information by unscrupulous employees, allowing them to steal the identities of the candidates. Once again, it shows that all compagnies have a responsability in establishing, and enforcing, clear privacy procedures. Whether it should be a legal obligation, or only a choice, is a question that is still open. As an European, I favor the legal solution, and approve the Illinois legislature. However, the law does not make any provisions for fining the companies that would not put such a policy in place.

Twitter

Blog Archive

AddThis Social Bookmark Button

Labels