Mediaboss Marketing

In the last few years, a flurry of state privacy legislation has bolstered protections for everything from biometric data to rights of deletion. Location data is no exception. The latest statute, New Jerseys Assembly Bill No. 3950, goes into effect on April 18, 2022 and requires employers to provide notice to employees for certain types of geotracking. This law continues the steady advance in protectionsboth in state legislatures and in the courtsfor the privacy of an employees location. Employers in every state should examine their geotracking programs to address the risks created by these developments.

What does New Jerseys new law require?

Assembly Bill No. 3950 requires that employers provide written notice to employees if the employer knowingly makes use of a tracking device in a vehicle used by an employee when that device is designed or intended to be used for the sole purpose of tracking the movement of a vehicle, person, or device.1The laws definition of tracking device supports a narrow reading that excludes devices capable of tracking location but that are not designed or intended to be used solely for that purpose. It is not yet clear, however, how narrowly courts will interpret the laws tracking device definition.

What does a tracking device include?

Reading the law narrowly, a tracking device would exclude many common forms of geotracking. For example, it would not cover GPS tracking apps in company-issued smartphones because of the wide array of other functions performed by a smartphone. Similarly, tracking devices would not include combined devices often used in a fleet of trucks that capture vehicle movement as well as perform audio and video surveillance. The laws definition of tracking device, furthermore, excludes devices used for the purpose of documenting employee expense reimbursement, one of the most common reasons that employers track location.2

On the other hand, a tracking device likely includes telematics devices that track movement, e.g., hard braking, swerving, and speeding, because this information includes movement if not location. Other equipment that might be covered include devices issued by insurance carriers to monitor safe driving and GPS locators that track drivers routes.

What are the penalties for not complying?

New Jerseys law does not provide a private right of action. Rather, the law is enforced by New Jerseys Commissioner of Labor and Workforce Development pursuant to New Jerseys Penalty Enforcement Law of 1999. Failure to provide the required written notice can result in a penalty of up to $1,000 for the first violation and up to $2,500 for subsequent violations.3

How is New Jerseys law different from other tracking laws?

Narrow definition of tracking

In passing this statute, New Jersey joins over a dozen other states with location tracking laws. The unique language of New Jerseys law, however, makes its application both narrower and wider than the other laws. As explained above, New Jerseys law defines a tracking device as an electronic or mechanical device which is designed or intended to be used for the sole purpose of tracking the movement of a vehicle, person or device.4This narrow definition stands in contrast to other states laws. For example, Californias tracking law broadly defines an electronic tracking device as any device attached to a vehicle or other movable thing that reveals its location or movement by the transmission of electronic signals.5On the other hand, Floridas tracking law defines a tracking device as any device whose primary purpose is to reveal its location or movement by the transmission of electronic signals.6Floridas definition is clearly more expansive than New Jerseys but not as broad as Californias.

Application to both company and personal vehicles

Alternatively, some provisions of New Jerseys tracking law are broader than other states laws. Notably, New Jerseys law requires notice to employees regardless of whether they are driving a company or personal vehicle. State laws typically exempt a company from compliance obligations if the company owns the vehicle being tracked. For example, Illinois and Michigan require the employees consent to track the location of the employees vehicle, but do not require the employees consent if the company owns or leases the vehicle being tracked.7

Requirement of notice but not consent

Furthermore, unlike tracking laws in many states, the New Jerseys law requires only notice, not consent, for location tracking. Wisconsin, for example, requires consent for individual GPS tracking, except in a few circumstances. Notably, Wisconsin does not require employee consent for the employers tracking of a company vehicle.8

Relevant case law regarding tracking

Even in states without legislation on geotracking, recent developments in case law provide greater protection for the privacy of an individuals whereabouts. This trend has been led by the Supreme Court. In Carpenter v. United States, the Supreme Court held that the warrantless collection for 127 days of cell-site data for mobile devices violated the Fourth Amendment.9The Court reasoned that the continuous real-time tracking of an individuals location violates a legitimate expectation of privacy.10Chief Justice Roberts explained, As with GPS information, the time-stamped [cell-site] data provides an intimate window into a persons life, revealing not only his particular movements, but through them his familial, political, professional, religious, and sexual associations. These location records hold for many Americans the privacies of life.11

Although Carpenter considered whether the governments warrantless search violated the Fourth Amendment, the case is relevant to private employers because the reasonable expectation of privacy standard is effectively the same for the common law invasion of privacy tort. In fact, a growing number of state courts have followed the Supreme Courts reasoning to hold that real-time continuous location tracking violates an individuals reasonable expectation of privacy and can serve as a basis for privacy torts. For example, in a Nevada district court case,an employer surreptitiously placed a tracking device on an employees car.12The employee brought a claim for the common law privacy tort, intrusion upon seclusion, which survived summary judgment.13Citing to Carpenter, the court found that the plaintiff had a reasonable expectation of privacy in his daily movements in the car.14

What steps can employers take given the recent case law?

In light of the growing case law protecting a privacy interest in location, employers can consider giving notice of location tracking even in states where not required by statute. Employers should consider notice in particular when conducting real-time, highly accurate, continuous tracking of an individuals location. This applies to the tracking of any individualnot just employees, but also applicants, independent contractors, interns, and others. By providing a clear and explicit notice about tracking, the employer undermines expectations of privacy in the individuals location.

Second, employers should safeguard location tracking data within the organization and provide access on a need-to-know basis only.

Third, if the employer implements a tracking program, it should consider other laws in the employment context as well as the risks of over-collecting personal information about employees. In particular, employers should try to avoid tracking employees after working hours because the employer risks gathering a wide spectrum of intimate details. Some of these details may reveal the employees membership in a protected category. An employer could learn, for example, that an employee regularly visits a dialysis clinic after work or that an employee goes to the mosque every Friday. If the employee is then terminated or subject to some other adverse employment action, the employee may suspect that the adverse action resulted from discrimination based on the employees disability or religion. This potentially could lead to claims against the company, even if the company had a legitimate reason for the adverse action.

Employer takeaways

Given the growing protections for location tracking, employers should consider the following:

Footnotes

See the original post:
New Jersey Joins the Trend of Increasing Privacy Protections for an Employees Location - JD Supra