HR confidential — Protecting employee info
Walk into any HR department, and you might see filing cabinets. Those files are likely locked because they contain applicant and employee information. Even if there are no filing cabinets, there are probably electronic files. Some HR departments have a cordoned-off, protected area just for such files.
Regardless of the format of the information or where it’s stored, employers need to keep personal applicant and employee data private and secure.
Compliance
A collection of laws governs employee and applicant information. Those laws include:
- The Fair Credit Reporting Act, which regulates employment-related background checks.
- The Americans with Disabilities Act (ADA), which limits the collection and use of medical information about employees and applicants. Such information must be kept confidential and separate from the general personnel file(s).
- The Family and Medical Leave Act, which follows the ADA and requires employers to keep medical information confidential and separate from the general personnel file(s).
- The Genetic Information Nondiscrimination Act, which also follows the ADA’s confidentiality requirements related to employee and applicant genetic information.
- The Health Insurance Portability and Accountability Act, which protects the use and disclosure of employees’ protected health information by employer-sponsored health plans and service providers.
Don’t forget state laws, which can go well beyond federal law requirements. While state-level privacy laws focus on consumer, not employee, data, some do. The California Consumer Privacy Act and the California Privacy Rights Act, for example, give California employees the right to access, delete, and restrict the use of their personal information.
Beyond compliance
While perhaps not specifically protected by law, HR professionals should keep employee and applicant personal information, such as a Social Security number, private to help avoid identity theft risks.
Not only do HR professionals need to comply with laws governing employee and applicant personal information, but if they fail to protect the information, they risk losing one of their biggest assets: Trust.
Applicants and employees share a lot of their information with their employers, and should that information fall into the wrong hands, HR professionals would find themselves trying to rebuild a trust that employees might have taken for granted. Such a breach could put employees in a tough spot trying to remediate any damage done by a breach.
For transparency purposes, HR professionals should make employees aware of the reasons why the information is collected and processed, how it’s collected, used, maintained, and destroyed, as well as employees’ rights to access, correct, or delete their information.
Key to remember: HR professionals must keep employee and applicant information private and confidential.