NOVEMBER 19, 2009
Some Courts Raise Bar on Reading Employee Email
Companies Face Tougher Tests to Justify Monitoring Workers' Personal Accounts; Rulings Hinge on 'Expectation of Privacy'
By DIONNE SEARCEY
WSJ
Big Brother is watching. That is the message corporations routinely send their employees about using email. But recent cases have shown that employees sometimes have more privacy rights than they might expect when it comes to the corporate email server. Legal experts say that courts in some instances are showing more consideration for employees who feel their employer has violated their privacy electronically. Driving the change in how these cases are treated is a growing national concern about privacy issues in the age of the Internet, where acquiring someone else's personal and financial information is easier than ever.
(snip)
In past years, courts showed sympathy for corporations that monitored personal email accounts accessed over corporate computer networks. Generally, judges treated corporate computers, and anything on them, as company property. Now, courts are increasingly taking into account whether employers have explicitly described how email is monitored to their employees.
That was what happened in a case earlier this year in New Jersey, when an appeals court ruled that an employee of a home health-care company had a reasonable expectation that email sent on a personal account wouldn't be read. And last year, a federal appeals court in San Francisco came down on the side of employee privacy, ruling employers that contract with an outside business to transmit text messages can't read them unless the worker agrees. The ruling came in a lawsuit filed by Ontario, Calif., police officers who sued after a wireless provider gave their department transcripts of an officer's text messages in 2002. The case is on appeal to the U.S. Supreme Court. Lawyers for corporations argue that employers are entitled to take ownership of the keystrokes that occur on work property. In addition, employers fear productivity drops when workers spend too much time crafting personal email messages.
(snip)
Many workers log in to personal email accounts from the office. In a 2009 study by the Ponemon Institute, a Traverse City, Mich.-based data-security research firm, 52% of employees surveyed said they access their personal email accounts from their work computer. Of those individuals, 60% said they send work documents or spreadsheets to their personal email addresses. Data security experts say such actions could invite viruses or security leaks. More corporations are monitoring employees' email traffic. In a June survey of 220 large U.S. firms commissioned by Proofpoint Inc., a provider of email security and data loss prevention services, 38% of companies said they employ staff to read or otherwise analyze the content of outgoing email, up from 29% last year. More companies also say they are worried about information leaks: Thirty-four percent of respondents said their businesses had been affected by the exposure of sensitive or embarrassing information, up from 23% in 2008.. Still, in some cases courts are finding that unless they have explicitly told the employee they will monitor email, they don't have the legal right to do it -- even if the email in question was a personal one sent using a work account, rather than a personal address.
(snip)
In another case this year, Bonnie Van Alstyne, a former vice president of sales and marketing at Electronic Scriptorium Ltd., a data-management company, was in the thick of a testy legal battle in Virginia state court with the company over employment issues when it came to light that her former boss had been accessing and reading her personal AOL email account. The monitoring went on for more than a year, continuing after Ms. Van Alstyne left the company. Ms. Van Alstyne sometimes used her personal email account for business purposes, and her supervisor said he was concerned that she was sharing trade secrets. The supervisor, Edward Leonard, had accessed her account "from home and Internet cafes, and from locales as diverse as London, Paris, and Hong Kong," according to legal filings in the case. Ms. Van Alstyne sued Mr. Leonard and the company for accessing her email without authorization. A jury sided with her, and the case eventually settled.
(snip)
http://online.wsj.com/article/SB125859862658454923.html (subscription)