Category: Workforce Compliance

Earlier this year, New York state signed the 2019 State Budget which updated the state’s sexual harassment laws.

The legislation lays out several new requirements all employers must meet in their sexual harassment policies.

• The policies must prohibit sexual harassment consistent with guidance issued by the Department of Labor in consultation with the Division of Human Rights;
• Provide examples of prohibited conduct that would constitute unlawful sexual harassment;
• Include information concerning the federal and state statutory provisions concerning sexual harassment, remedies available to victims of sexual harassment, and a statement that there may be applicable local laws;
• Include a complaint form;
• Include a procedure for the timely and confidential investigation of complaints that ensures due process for all parties;
• Inform employees of their rights of redress and all available forums for adjudicating sexual harassment complaints administratively and judicially;
• Clearly state that sexual harassment is considered a form of employee misconduct and that sanctions will be enforced against individuals engaging in sexual harassment and against supervisory and managerial personnel who knowingly allow such behavior to continue; and
• Clearly state that retaliation against individuals who complain of sexual harassment or who testify or assist in any investigation or proceeding involving sexual harassment is unlawful.

As a part of the law, every employer in the state must provide sexual harassment prevention training that includes the following minimum requirements:

• The training must be interactive;
• Include an explanation of sexual harassment consistent with guidance issued by the New York Department of Labor in consultation with the Division of Human Rights;
• Include examples that would constitute unlawful sexual harassment;
• Include information concerning the federal and state statutory provision concerning sexual harassment and remedies available to victims of sexual harassment;
• Include information about employees’ rights of redress and all available forums for adjudicating complaints; and
• It must include information addressing conduct by supervisors and any additional responsibilities for supervisors.

Employees need to complete this training annually, and it must be provided in the language spoken by employees.

Employers have until October 9, 2019, to comply with the training requirements. The policy requirements became effective on October 9, 2018. Employers can learn more about the state’s website. The website includes a model sexual harassment prevention policy, sexual harassment training script, sexual harassment complaint form, additional explanations of employers’ legal obligations, and FAQs about the new requirements.

Organizations with employees in New York state should evaluate and update their sexual harassment policies to meet the new requirements. Additionally, employers should watch for additional requirements in other jurisdictions as state legislatures respond to the #MeToo movement.

Compliance Corner is a feature on the PeopleScout blog. At least once a month, we’ll be featuring a compliance issue that’s in the news or on our minds. Understanding the patchwork of labor laws across the world is complicated, but it’s part of what we do best. If you have questions on the compliance issue discussed in this post, please reach out to your PeopleScout account team or contact us at marketing@peoplescout.com.

In August, the U.S. Department of Labor announced the new Office of Compliance Initiatives to promote greater understanding of federal labor laws and regulations to help employers prevent violations.

According to the Department of Labor press release, the office will reside within the Office of the Assistant Secretary for Policy and its work will include:

• Facilitating and encouraging a culture that promotes compliance assistance within the Department
• Providing employers and workers with access to high-quality, up-to-date information about their obligations and rights under federal labor laws and regulations
• Assisting enforcement agencies in developing new strategies to use data for more impactful compliance and enforcement strategies
• Enhancing outreach to stakeholders for the Department’s enforcement agencies

The Department also announced two new websites aimed at providing compliance assistance:

• worker.gov provides information about worker’s rights and common workplace concerns
• employer.gov provides information about the responsibilities of job creators toward their workers and answers common questions

According to the National Law Review, the websites do not provide a comprehensive listing or analysis of all rights and responsibilities that exist under every federal employment and labor law, but they do address topics that fall outside the jurisdiction of the DOL, such as employment discrimination laws that are enforced by the U.S. Equal Employment Opportunity Commission (EEOC).

Because the Office of Compliance Initiatives is so new, we have yet to see its full impact; however, employers and employees can consider it a resource for compliance issues.

Compliance Corner is a feature on the PeopleScout blog. At least once a month, we’ll be featuring a compliance issue that’s in the news or on our minds. Understanding the patchwork of labor laws across the world is complicated, but it’s part of what we do best. If you have questions on the compliance issue discussed in this post, please reach out to your PeopleScout account team or contact us at marketing@peoplescout.com.

Earlier this year, the governor of California signed into law the California Consumer Privacy Act of 2018, one of the toughest data privacy laws in the U.S. It takes effect in 2020.

The law is similar to the GDPR. The EU General Data Protection Regulation requires businesses to protect the personal data and privacy of EU citizens for transactions that occur within EU member states.

The California law applies to most companies that collect the data of Californians, and it expands the definition of what is considered personal information, including behavioral and profiling data and professional and personal background data.

Under the new law, consumers in California are guaranteed the following rights:

• “To know what personal information is being collected about them”
• “To know whether their personal information is sold or disclosed and to whom”
• “To say no to the sale of personal information”
• “To access their personal information”
• “To equal service and price, even if they exercise their privacy rights”

The law requires any business that collects a California consumer’s personal information to disclose the categories and specific pieces of personal information that have been collected and the purposes for which the information will be used if the person requests.

If a person requests their information, the business must provide access to it in a format that allows that data to be transmitted to another entity. A person may also opt-out of the sale of any of their information.

Businesses must also delete a consumer’s personal information if that person requests, unless the information is necessary for the business to complete a transaction, detect security incidents or protect against fraud, repair errors, protect free speech, engage in research or comply with other California laws.

Businesses who have changed policies to align with GDPR may need to make additional changes to come into compliance with California’s law, and should work with an attorney to determine the next steps.

Compliance Corner is a feature on the PeopleScout blog. At least once a month, we’ll be featuring a compliance issue that’s in the news or on our minds. Understanding the patchwork of labor laws across the world is complicated, but it’s part of what we do best. If you have questions on the compliance issue discussed in this post, please reach out to your PeopleScout account team or contact us at marketing@peoplescout.com.

Earlier this year, the governor of Massachusetts signed into law An Act Relative to Criminal Justice Reform that makes several modifications to the state’s “ban the box” law.

The law, which goes into effect in October 2018, adds additional restrictions about which criminal convictions an employer can consider and how employers can consider other convictions.

Under the new law, employers cannot ask applicants about misdemeanor convictions where the date of that conviction or the completion of incarceration occurred three years before the date the person applied, unless the person has been convicted of another offense in the past three years.

Additionally, employers cannot ask applicants about criminal records that have been sealed or expunged. Any request for criminal record information must also include this statement: “An applicant for employment with a record expunged pursuant to section 100F, section 100G, section 100H or section 100K of chapter 276 of the General Laws may answer ‘no record’ with respect to an inquiry herein relative to prior arrests, criminal court appearances or convictions. An applicant for employment with a record expunged pursuant to section 100F, section 100G, section 100H or section 100K of chapter 276 of the General Laws may answer ‘no record’ to an inquiry herein relative to prior arrests, criminal court appearances, juvenile court appearances, adjudications or convictions.”

Any employers who hire in Massachusetts should review their current practices with an attorney. With the growing popularity of “ban the box” laws and the variance between jurisdictions, employers should closely watch any developments and adjust their policies accordingly.

You can read our previous blog post on “ban the box” laws below.

California is the latest state to enact a “ban the box” law. The governor recently signed a bill that prevents private employers from asking about applicants’ criminal conviction histories on the employment application. It went into effect on January 1, 2018.

“Ban the box” refers to the box on applications requiring applicants to reveal their criminal history. The law requires employers with more than five employees to not request or consider a candidate’s conviction history until a conditional offer has been made. California already had a “ban the box” law on the record that applies to state agencies, cities and counties. This law expands that to the private sector.

More than 150 cities and 29 states have enacted some form of a ban the box law. The laws are intended to push a background check later into the hiring process so that employers consider an applicant’s qualifications before their criminal history.

While California’s law does not require employers to justify or explain their decision not to employ someone based on their criminal history, New York City’s law requires employers to justify rescinding a conditional offer based on criminal history. Different cities, states and counties have different requirements as to when employers can request a criminal history or run a background check and what they can do with that information.  If an employer runs a background check after a conditional offer has been made, care must be taken before any adverse decision is made as there are strict regulations governing this process.

With the growing popularity of ban the box laws, employers need to be prepared for the patchwork of legislation, and they cannot rely on a one-size-fits-all approach.

If you want to read more about compliance-related issues, check out our other Compliance Corner blog posts on predictive scheduling, salary history, paid sick leave and New York City’s Freelance Isn’t Free law.

Compliance Corner is a feature on the PeopleScout blog. At least once a month, we’ll be featuring a compliance issue that’s in the news or on our minds. Understanding the patchwork of labor laws across the world is complicated, but it’s part of what we do best. If you have questions on the compliance issue discussed in this post, please reach out to your PeopleScout account team or contact us at marketing@peoplescout.com.

Earlier this year, the U.S. Supreme Court ruled in favor of employers that use arbitration agreements that include class action waivers. In the event that an employee believes they have a lawsuit against an employer, this agreement provides that the dispute will be resolved through individual arbitration and never as a collective or class action.

The court ruled 5-4 in Epic Systems Corp. v. Lewis that if workers were allowed to band together to press their claims, “the virtues Congress originally saw in arbitration, its speed and simplicity and inexpensiveness, would be shorn away and arbitration would wind up looking like the litigation it was meant to displace.”

For employers, arbitration is beneficial because it is less expensive and quicker. It is also private and confidential as well as more absolute since there are fewer avenues to appeal a ruling.

However, the court did explicitly state that legislators could change the status quo, with Justice Neil Gorsuch writing, “The respective merits of class actions and private arbitration as means of enforcing the law are questions constitutionally entrusted not to the courts to decide but to the policymakers in the political branches where those questions remain hotly contested.”

Due to this ruling, employers should consult with an attorney and consider adding an arbitration agreement in the onboarding process. However, employers should keep in mind that at some point, the practice could change due to legislation.

Justice Ruth Bader Ginsberg in her dissent called for the U.S. Congress to act, writing, “The inevitable result of today’s decision will be the underenforcement of federal and state statutes designed to advance the well-being of vulnerable workers.”

Before the ruling, the Ending Force Arbitration of Sexual Harassment Act of 2017 was introduced to the Senate; however, at this point, Congress has yet to take action.

In April, a federal appeals court ruled that salary history cannot be used to justify paying a woman less than a man for doing similar work under the Federal Pay Equity Act. The ruling in Rizo v. Fresno County Office of Education covers California, Oregon, Washington, Nevada, Arizona, Alaska, Hawaii, Idaho and Montana.

U.S. Circuit Judge Stephen Reinhardt wrote the majority opinion for the 11-judge panel for the Ninth Circuit Court of Appeals.

“The Equal Pay Act stands for a principle as simple as it is just: Men and women should receive equal pay for equal work regardless of sex,” Reinhardt wrote. “The question before us is also simple: Can an employer justify a wage differential between male and female employees by relying on prior salary? Based on the text, history and purpose of the Equal Pay Act, the answer is clear: No.”

Both California and Oregon have standalone salary history bans, but employers in all states covered by this ruling should review their salary history policies to comply with this ruling.

You can read our previous blog post on salary history bans below:

Oregon is the most recent state to pass legislation banning employers from asking about a candidate’s salary history. The laws are growing in popularity, intended as a way to promote pay equality by imposing limitations on how employers can use a worker’s previous salary as a benchmark to set compensation.

In Oregon, the ban on salary history inquiries is a part of the state’s larger Equal Pay Act. The law prohibits employers from screening candidates based on their salary history, and it also prevents organizations from setting pay based on past or current salary.

Delaware passed a similar law. The law does allow applicants to provide the previous salary information if they want, but an employer cannot request it. Additionally, it allows an employer to request salary history after an offer including compensation has been extended. Any employer who fails to comply with the law will have to pay a civil penalty of $1,000-$5,000 for the first offense, and as much as $10,000 for each subsequent violation.

Various other states, as well as Puerto Rico, have enacted similar bans, as well as some cities like Philadelphia and New York City. Employers in these areas should review their salary history policies to make sure they comply with the local laws.

Many of these laws have not yet taken effect. Philadelphia’s salary history ban was set to take effect in May, but it was put on hold due to a pending lawsuit. New York City’s ban is set to begin in October. Many of the more recent measures don’t take effect until late 2017 or even as late as 2019. This gives employers some time to prepare, but considering the current popularity of these laws and pending legislation, companies should expect even more changes.

Compliance Corner is a new feature on the PeopleScout blog. At least once a month, we’ll be featuring a compliance issue that’s in the news or on our minds. Understanding the patchwork of labor laws across the world is complicated, but it’s part of what we do best. If you have questions on the compliance issue discussed in this post, please reach out to your PeopleScout account team or contact us at marketing@peoplescout.com.

Laws around the world regulate how businesses and employers can interact with individuals through emails. While many marketing teams deal with these regulations every day, they also apply to talent acquisition teams that engage with candidates through email. Different countries have different laws, so this post will cover the laws in the United States, Canada and Australia. If you’re emailing candidates in other countries, you should review any applicable anti-spam legislation.

United States: CAN-SPAM

CAN-SPAM, Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003, regulates commercial messages in the United States. Commercial messages promote a product or a service—including one-off and mass email sends. It does not apply to transactional or relationship content, which are emails about an already agreed upon transaction. Here’s what it requires:

• You cannot use false or misleading header information, including “From,” “To,” “Reply-To” and routing information must be accurate and identify the person or business who initiated the message.
• You cannot use deceptive subject lines.
• The message must include your valid postal address.
• You must include an option to opt-out of future emails and you must honor those opt-out requests within 10 days.
• For every email you send in violation of CAN-SPAM, you can be fined up to $41,484.

Canada: CASL

CASL, The Canadian Anti-Spam Legislation applies to commercial electronic messages in Canada. Commercial electronic messages are emails that encourage participation in a commercial activity. Here’s how it works:

• Commercial electronic mail to Canadian individuals is covered by CASL.
• The recipient of the email must give express consent, or implied consent to receive the commercial electronic message.
• Express consent means the person has agreed to receive the message either in writing or orally. An opt-in option, like a website sign up, is considered express consent. An email requesting consent does not create express written consent.
• Implied consent can be obtained when the person conspicuously publishes their email. That publication cannot be accompanied by a statement that the person doesn’t want to receive the unsolicited commercial electronic messages and the message must be relevant to the person’s business, role, functions or duties in a business or official capacity.
• An existing business relationship is an exception, which can arise from a purchase or acceptance of a business, investment or gaming opportunity within the past two years. Organizations that don’t comply risk serious penalties, including criminal charges, civil charges, personal liability for company officers and directors, and penalties up to $10 million.

Australia: SPAM Act

The SPAM Act of 2003 prohibits the sending of unsolicited commercial electronic messages with an Australian link.  Commercial electronic messages offer, advertise or promote the supply of goods, services, land or business or investment opportunities. A message has an Australian link if it originates or was commissioned in Australia or was sent to an address accessed in Australia.

• The recipient of the message must provide express or inferred consent.
• Examples of express consent include an opt-in box on a form or website, verbal confirmation over the phone or face-to-face or by swapping business cards. An electronic message requesting consent does not qualify.
• Inferred consent can occur in an existing business or other relationship or by a person publicly publishing their work-related email address and that posting does not include stating that the person doesn’t want to receive commercial messages and the subject of the message must be directly related to the role or function of the recipient.
• Every email must contain an unsubscribe option that must be honored within five working days.
• The email must correctly identify the sender or the individual or organization that authorized the email send and it must include information about how the recipient can contact you.
• Violations of the Spam Act have a maximum penalty of $2.1 million.

The GDPR, or the EU General Data Protection Regulation regulates how businesses use and protect the personal data of European Union citizens. Read our previous Compliance Corner post on the GDPR.

Compliance Corner is a feature on the PeopleScout blog. At least once a month, we’ll be featuring a compliance issue that’s in the news or on our minds. Understanding the patchwork of labor laws across the world is complicated, but it’s part of what we do best. If you have questions on the compliance issue discussed in this post, please reach out to your PeopleScout account team or contact us at marketing@peoplescout.com.

Commonly known as the GDPR, the EU General Data Protection Regulation requires businesses to protect the personal data and privacy of EU citizens for transactions that occur within EU member states.

GDPR aims to protect all EU citizens from privacy and data breaches in an increasingly data-driven world.

The GDPR applies to all organizations that collect the data of people who live in the EU, regardless of the organization’s physical location. That means the GDPR impacts organizations across the globe, and the penalties can reach up to 4 percent of the global revenue of the parent company or 20 million euros, whichever is higher. Enforcement begins on May 25, 2018.

The regulation requires privacy by design, which means that a data system needs to include data protection from the start, rather than as an addition. Organizations must only hold and process the data that is absolutely necessary, and limit access to that data to those who need to process it.

The GDPR also requires consent and provides the people whose data is collected with the right to confirmation as to whether or not their personal information is being processed, where it is being processed and for what purpose. If the person requests, the organization also needs to provide a copy of the personal data, free of charge, in an electronic format. The person has the right to give that data to another organization.

Additionally, the GDPR includes the right to be forgotten, also known as data erasure, which entitles the person whose data was collected to have the organization erase the data, cease any dissemination of the data and potentially halt a third party’s processing of that data.

The regulation requires organizations to notify the people whose data they collect within 72 hours of first becoming aware of a data break that is likely to “result in a risk for the rights and freedoms of individuals.”

Organizations that collect data previously had to notify local data protection advisors about their data processing activities. Under the GDPR, data collecting organizations will not be required to submit those notifications or registrations, but they will need to meet internal recordkeeping requirements, and some organizations will need to appoint data protection officers.

Compliance Corner is a feature on the PeopleScout blog. At least once a month, we’ll be featuring a compliance issue that’s in the news or on our minds. Understanding the patchwork of labor laws across the world is complicated, but it’s part of what we do best. If you have questions on the compliance issue discussed in this post, please reach out to your PeopleScout account team or contact us at marketing@peoplescout.com.