Employment decisions refer to any employer actions that determine, influence, or change the terms, conditions, or outcomes of employment. This includes decisions about recruitment, hiring, promotion, reassigning, evaluating performance, disciplining, terminating, setting wages, or assigning work hours. These decisions are legally significant because they must comply with federal and state employment laws, including anti‑discrimination rules enforced by the EEOC.

New York Civil Cases and the RJI

State courts often have some quirky procedures, and the New York Supreme Court is no exception. Civil records from the New York Supreme Court typically include a reference to an “RJI” and whether it has been filed. What does “RJI” mean?

Definition: RJI is an abbreviation for “Request for Judicial Intervention.” It’s a form that is filed by either a plaintiff or defendant sometime after the summons and complaint is served on the defendant in a civil case.

Filing Effect: When an RJI is filed, the civil case is assigned to a judge.

What does this mean? When a plaintiff files a complaint in the New York Supreme Court to start a civil case, the court’s only action is to assign the case an index number. The court will not take any other action regarding the case – such as deciding a motion or order to show cause or hold a conference or trial – until either the plaintiff or defendant files an RJI. When the RJI is filed, the case is assigned randomly to a judge who will decide everything in the case until it is over.

How long will a case stay in the pre-RJI status? Because New York law does not specify a time limit for pre-RJI status, a civil case could be pending for years without any activity showing on the publicly available docket other than the filing and service of the summons and complaint.

That is the quirk in the New York Supreme Court civil case procedures – the possibility of a lengthy period of no case activity during the pre-RJI status.

To ensure that a civil case is timely prosecuted, many state courts assign a judge to a civil case when the summons and complaint are filed.

How to consider sex offender registry records in California (Updated)

For California employers concerned about hiring sex offenders, there are a few important points to keep in mind.

An employer has a duty to keep the workplace free of sexual harassment and other forms of discrimination under state law. Under the California Fair Employment and Housing Act (FEHA), an employer can face significant liability if it knowingly employs a sex offender and fails to take actions to protect its other employees from unlawful behavior by that person.

To avoid this problem, employers would like to know if they are hiring a registered sex offender. But how can they find out?

Since 2005, the state has operated a Megan’s Law website with a database to obtain access to the state’s list of more than 100,000 registered sex offenders. Created to help state residents better protect their families by being able to search for an individual registrant or by geographic location, the site (https://www.meganslaw.ca.gov/Default.aspx) contains the sex offender’s name, aliases, age, gender, race, address, physical description and, in some cases, a photograph.

While the site would appear to be a boon for employers, state law expressly forbids use of the state’s sex offender registry information for employment purposes. California Penal Code section 209.46(l)(2)(E) prohibits the use of information disclosed on the website for purposes relating to health insurance, insurance, loans, credit, education, housing and employment, among other uses.

Statutory exceptions provide for use “to protect a person at risk,” a term not defined by the Penal Code, as well as for employers required by law or authorized to request criminal history from the California Department of Justice. Examples of businesses that meet this standard may include child care centers, financial institutions and governmental agencies.

An employer who runs afoul of the Penal Code’s prohibition can face actual and exemplary damages, attorneys’ fees and a civil fine. Legislative history explains that the website attempts to protect the public while not inflicting additional punishment on registrants.

For employers trying to walk the fine line of protecting other employees and third parties, such as customers, from potential sex offender registrant employees while not violating the Penal Code, two alternate avenues exist to try to find out information about a sex offender: conviction records and employee/applicant self-disclosure.

Following applicable state and federal law, employers can conduct a criminal background check on applicants and employees and learn of a sex offense conviction. (However, convictions past the seven-year cut-off date in California may not appear on a background check report while the individual may still appear in the sex offender registry). An applicant or employee may also self-disclose a conviction.

Providing another wrinkle for California employers, the state’s Fair Chance Act took effect on January 1, 2018, mandating that employers with five or more employees must wait until after a conditional offer of employment has been made to ask any questions about criminal history. This includes inquiries about convictions, running a background check or other efforts to find out about an applicant’s criminal past.

If the employer decides not to hire the applicant, it must conduct an individualized assessment of the conviction at issue to evaluate whether it has a “direct and adverse relationship with the specific duties of the job that justify denying the applicant the position.” Other legal requirements, based on both state and federal law, must also be satisfied if an employer takes an adverse action on the basis of the background check (see our prior blog post (https://scherzer.co/reminder-to-california-employers-about-requirements-when-taking-adverse-action-based-on-a-criminal-record/) for more details).

What if an employer learns that an employee is a registered sex offender from another employee’s perusal of the Megan’s Law website? This situation could trigger liability under section 290.46 and employers should be careful to take action only after evaluating any potential risk the sex offender employee may pose to coworkers or customers, considering all the facts and circumstances.

Consent for International Searches

A basic principle of conducting international searches on an individual is that you need a lawful basis for processing personal data. This principle applies to both employment-purpose and commercial background checks.

Although the number and type of lawful bases vary from one country to another (especially with the enactment of new data protection and privacy laws in many countries over the last several years), a lawful basis for processing personal data common to all international searches is the consent of the individual search subject. From a compliance perspective, obtaining an individual’s consent for the searches is the best practice.

Other than the requirements that the subject’s express consent be unambiguous and freely given, there is no universally prescribed format or wording for an international consent form.

If the subject’s consent cannot be obtained, you can look to a country’s data protection and privacy laws to determine if a different legal basis may be applicable for processing personal data that does not require the subject’s consent. It is always up to the controller of the data to determine the appropriate legal basis for processing personal data.

For individuals located in the EU or UK, there are several legal bases that will satisfy the compliance requirements under the EU GDPR, the UK GDPR and the Data Protection Act of 2018 (UK) if consent cannot be obtained. The controller can still request these searches if it has a legitimate interest in obtaining the individual’s personal data or needs the data to perform a contract.

If the request for the searches is based on a legitimate interest or performance of a contract, the individual must receive a notice of the controller’s intention to process the data. Notice can be given in several different ways, including directly to the individual, in an engagement letter or similar document, or by publication on the client’s website. The way the controller gives notice is their decision.

Reporting Employment-related Civil Lawsuits

For employment-purpose reports, the federal Fair Credit Reporting Act (FCRA) and its state law counterparts  are the laws that most often deal with when determining whether certain information is or isn’t reportable. However, federal laws prohibiting workplace discrimination can also limit what information can be included in these reports. This issue can arise when civil lawsuits are located in which a search subject has sued a former employer.

Although there are several types of federal laws dealing with workplace discrimination, taken together, these laws make it illegal to discriminate against someone (applicant or employee) because of that person’s race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age (40 or older), disability or genetic information. It is also illegal to retaliate against a person because they complained about discrimination, filed a charge of discrimination, or participated in an employment discrimination investigation or lawsuit.

Providing any such information to a prospective employer in a background screening report could be a violation of anti-discrimination laws which are typically enforced by the U.S. Equal Employment Opportunity Commission (EEOC).

Pre-Employment Screening during the Pandemic

It is a standard practice for employers to run background checks on potential new hires. Such checks help employers protect their company by learning about the trustworthiness of the candidate through their financial, criminal, and driving records and education and employment verifications. But the pandemic has affected the operations of many institutions worldwide. From court closures to remote college campuses, it may be more difficult for the screening provider to check a criminal record or verify an educational background. Nonetheless, the possibility of delay should not cause employers to lower the standards of their screening policies.

The most important reason why an employer should not temporarily waive certain parts of a background check is because it may make it harder to justify its necessity in the future. For example, say a court is closed and is unable to provide information on candidates’ criminal history. Because of this, an employer who is anxious to add the new hire to the frontline chooses to waive the criminal check requirement. Well, when a court begins to provide legal information again and an employer decides to reinstate the criminal check requirement, the employer could face compliance issues.

Under current anti-discrimination laws, namely Title VII of the Civil Rights Act of 1964, employers must demonstrate that its hiring practices are “job related” and “consistent with business necessity.” But if an employer chooses to forgo the criminal checks during the pandemic and wishes to reinstate them later, they may be violating this law. Since the criminal check was once suspended, one could argue that the practice was not job related or that it was not a business necessity. Furthermore, streamlining the employment screening process by waiving certain aspects could lead an employer to overlook valuable insight into a candidate’s character. Therefore, while a shorter background check program during the pandemic could bring short-term benefits, it runs significant long-term risks.

So, what are your options?

We have outlined up two possible avenues available to employers during these times.

Hire now (but reserve the right to run future background checks)

If a company is in a position in which new hires are urgently needed, they may hire the candidates based on the information available to them at the time of the background check and reserve the right to conduct additional background checks post-hire, once information providers resume to normal operations. But if an employer takes this route, they must clearly communicate with both their background check provider and the new hire.

They should work with the background check provider to take note of those candidates whose checks are not yet completed so that the provider can easily revisit the report in the future. Employers should also make it clear in an employee’s offer letter that the offer of employment is contingent upon the successful completion of a background check that may occur at a later date.

Delay the hire

For employers who are required by law to complete background checks prior to a new hire’s start date, they may have to delay the worker’s start date. But whether a background check provider can access the required information for an employment screen depends on the location of the various sources of information, from the courthouses to the educational institutions.

All in all, although background checks may take longer during the pandemic, they are, especially now, critical to manage your risk. With the rising number of job seekers and the remote workforce, companies must do what they can to ensure that they are hiring qualified professionals who will be valuable additions to the company.

Q1 2020: UPDATE OF LAWS AFFECTING EMPLOYMENT BACKGROUND SCREENING

As the year and a new decade unfold, we bring you this update on ban-the-box legislation and laws that restrict credit report usage in employment decisions. And no update would be complete without a reminder about a standard-setting federal appellate opinion from 2019 interpreting the Fair Credit Reporting Act (FCRA) disclosure requirement for an employment background check.

Let’s start with a reminder

In January 2019, the Ninth Circuit’s opinion in Gilberg v. California Check Cashing Stores, LLC made clear that any extraneous information in an FCRA disclosure form regarding an employment background check — even if the information is related to state-mandated expansions of consumer rights — violates the FCRA’s requirement that the disclosure must be “in a document that consists solely of the disclosure.

Even seemingly innocuous content, such as asking for an acknowledgment that the candidate received the FCRA summary of rights or including a statement that hiring decisions are based on legitimate non-discriminatory reasons may run afoul of the FCRA. And any state and local notices regarding the background check must be provided in separate documents, as applicable to each candidate.

Experts believe that the number of class-action lawsuits brought under the FCRA for technical errors will continue to increase. But there is an easy way to comply:

Present the disclosure to the candidate in a separate, standalone, conspicuous document. Make it clear and simple. Keep it short.

Ban-the-box laws continue to proliferate

“Ban-the-box” measures – which generally prohibit employers from inquiring about a candidate’s criminal history (including performing background checks) until later in the hiring process – continue to proliferate. Currently, 14 states (CaliforniaColoradoConnecticutHawaii; IllinoisMaryland (effective February 29, 2020); MassachusettsMinnesotaNew JerseyNew Mexico; Oregon; Rhode Island; Vermont and Washington) and 22 local jurisdictions (Austin, TX ; Baltimore, MDBuffalo, NYChicago, ILCook County, ILColumbia, MODistrict of ColumbiaGrand Rapids, MIKansas City, MOLos Angeles, CA; Montgomery County, MDNew York City, NY;  Philadelphia, PA; Portland, ORPrince George’s County, MDRochester, NYSaint Louis, MO (effective January 1, 2021); San Francisco, CA; Seattle, WA; Spokane, WA; Waterloo, IA (effective July 1, 2020 but lawsuit filed to strike down the ordinance); and Westchester County, NY) have such laws in place for private employers.

Be mindful of credit restrictions

Less popular than state and local legislatures on ban-the-box and prohibitions on salary history inquiries, credit check restrictions remain an important consideration for employers. Ten states CaliforniaColoradoConnecticut, Hawaii, Illinois, Maryland, Nevada, OregonVermont, and Washington – as well as ChicagoDistrict of ColumbiaNew York City, and Philadelphia all place restrictions on employers’ use of credit reports with exceptions for the use of such checks when required by law or the responsibilities of the position.      

Arguably, the most imposing local credit report law to date continues to be the New York City’s Human Rights amendment that went into effect on May 6, 2015, and made requesting and using consumer credit history for hiring and other employment purposes, with certain exceptions, an unlawful discriminatory practice. The law provides that a “consumer credit report” includes “any written or other communication of any information by a consumer reporting agency that bears on a consumer’s creditworthiness, credit standing, credit capacity or credit history.”Many legal experts hold that the broad scope of this definition not only prohibits obtaining a consumer credit report but also searches of liens, judgments, bankruptcies, and financially-related lawsuits if there is no exemption. There is no case law on this matter. 

On the national level, the U.S. House of Representatives on January 29, 2020, passed legislation that prohibits employers from using credit reports for employment decisions, except when required by law or for a national security clearance. The bill also prohibits asking questions about applicants’ financial past during job interviews or including questions about credit history on job applications. The U.S. Senate, however, is not expected to introduce the legislation.

New Draft Guidelines Attempt to Clarify Territorial Scope of the GDPR

Since the adoption of the General Data Protection Regulation (GDPR) by the European Union (EU) in May 2018, businesses established outside of the EU have grappled with the question of whether the GDPR’s strict rules apply to them. Many commentators have noted that the GDPR provisions and recitals do not have an easy answer. The European Data Protection Board (EDPB) recently attempted to provide some clarification by publishing draft guidelines that include a commentary on the territorial scope of the GDPR. The EDPB’s guidelines also address the related issue of whether a non-EU company subject to the GDPR must have an EU-based representative.

GDPR’s Targeting Criteria

Arguably the most significant change to the regulatory landscape affecting an individual’s data privacy is the territorial scope of the GDPR’s Article 3 (2). Generally described as the GDPR’s “targeting criteria,” your business must be GDPR compliant if it engages in processing activities of an EU individual’s data (data subject) related to (1) offering goods or services to data subjects, or (2) monitoring data subjects’ behavior. Although the EDPB’s guidelines state that the targeting criteria is applied on a case-by-case basis, the guidelines provide several examples showing how the targeting criteria can be applied that clarify some basic points, such as:

  1. The data subject’s nationality or citizenship is irrelevant. The GDPR protects data subjects geographically located within the EU, without regard to the data subject’s nationality or citizenship. Conversely, data subjects outside of the EU, including EU citizens, are not protected by the GDPR.
  2. Geographic allocation and timing are critical. For purposes of applying the GDPR, thedata subject’s geographic location is assessed atthe moment when your activity occurs; e.g., when your goods or services are offered, or your monitoring of the datasubject’s behavior begins.
  3. Charging for services is irrelevant. The GDPR protects data subjects regardless of whether your services are free.
  4. Cookies are considered monitoring. TheGDPR protects data subjects that your business profiles or undertakes someanalysis by using cookies or similar technologies.

GDPR Compliance and an EU-based Representative

A significant point clarified by the EDPB’s guidelines is that a non-EU company subject to the GDPR must appoint an EU-based representative, even though the not have a physical location within the EU. A company’s Data Protection Officer, who can be an existing employee of the company under the GDPR, cannot fulfill the requirements for an EU-based representative. The purpose of the requirement is to ensure that a qualified individual or entity is located within the EU to whom regulatory authorities can address compliance issues. The guidelines also make clear that the EU-based representative can even be held liable for any non-compliance, including being fined or otherwise sanctioned.

Consultation Period

The territorial scope and appointment of an EU-based representative poses two of the most critical issues that a non-EU based company faces regarding GDPR compliance. The EDPB’s draft guidelines address several other GDPR issues in addition to these, and a full version of the guidelines can be found here. The EDPB is taking public comments on the draft guidelines until January 18, 2019. Comments should be sent to the EDPB at EDPB@edpb.europa.eu.

California’s overlapping background check laws

For many years, employers have struggled with California’s overlapping statutes governing the use of background checks. Now, the state’s highest court has weighed in, ruling that compliance with the requirements of both laws is mandatory, even where the laws overlap.

A little history is necessary to understand the situation. In 1970, Congress passed the Fair Credit Reporting Act (FCRA). The law defined the term “consumer report” to include an individual’s “credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living.” The FCRA distinguished between consumer reports that contained information obtained by personal interviews and consumer reports gathered by other means.

The California legislature responded with two state analogues in 1975: the Investigative Consumer Reporting Agencies Act (ICRAA) and the Consumer Credit Reporting Agencies Act (CCRAA). Modeled on the FCRA, the statutes had similar purposes and were intended to serve complementary goals.

As originally enacted, the ICRAA applied to consumer reports that included character information obtained only through personal interviews. It defined an “investigative consumer report” as one “in which information on a consumer’s character, general reputation, personal characteristics, or mode of living is obtained through any means.” The statute requires that the person procuring the report provide the consumer a “clear and conspicuous disclosure in writing” and that the consumer in turn provide a written authorization for the report’s procurement.

Lawmakers took a slightly different approach with CCRAA, which defined a “consumer credit report” as “any written, oral or other communication of any information by a consumer reporting agency bearing on a consumer’s credit worthiness, credit standing, or credit capacity, which is used or is expected to be used … for … employment purposes.” The definition excluded “any report containing information solely on a consumer’s character, general reputation, personal characteristics, or mode of living which is obtained through personal interviews with neighbors, friends, or associates of the consumer reported on, or others with whom he is acquainted or who may have knowledge concerning any such items of information.”

In 1998, the California legislature amended ICRAA to eliminate the personal interview limitation and expand the statute’s scope to include character information obtained under CCRAA or “obtained through any means.”

Since then, CCRAA continues to govern consumer reports that include character information obtained from a source other than personal interviews, as long as those reports contain information “bearing on a consumer’s credit worthiness, credit standing, or credit capacity.”

What does all this mean for employers? And how did the California Supreme Court get involved?

The two statutes came to the attention of the court when a group of current and former school bus drivers filed suit against their employers, First Student and First Transit, as well as the investigative consumer reporting agency (ICRA) that conducted background checks on the drivers. Eileen Connor led the class action.

After First Student acquired the company where Connor worked as a driver, it requested that the ICRA run background checks to confirm that Connor and the other workers were properly qualified to perform their job duties. The background reports elicited information about the employees’ criminal records, sex offender registries, address history, driving records and employment history.

Prior to conducting the background checks, First Student sent Connor a “Safety Packet” booklet. The booklet included an “Investigative Consumer Report Disclosure and Release” that provided authorization for the ICRA to prepare a consumer report or investigative consumer report. The notice included a checkbox that generally described Connor’s rights under ICRAA, informed her that she could check the box if she wanted to receive a copy of the report and released First Student from all claims and damages arising out of or relating to its background investigation if the box was checked.

Connor filed suit, arguing that the notice failed to satisfy ICRAA’s specific requirements and that First Student neglected to obtain her written authorization to conduct the background check, as required by ICRAA.

First Student asked the court to dismiss the suit, arguing that ICRAA is unconstitutionally vague as applied to the lawsuit because it overlaps with CCRAA and that the notice satisfied CCRAA.

The California Supreme Court found that while the statutes overlap to some degree, achieving compliance with both did not render ICRAA unconstitutional. The two statutes were not intended to be exclusive of each other, the court said, and potential employers can comply with both statutes without undermining the purpose of either.

“If an employer seeks a consumer’s credit records exclusively, then the employer need only comply with CCRAA,” the court explained. “An employer seeking other information that is obtained by any means must comply with ICRAA. In the event that any other information revealed in an ICRAA background check contains a subject’s credit information and the two statutes thus overlap, a regulated party is expected to know and follow the requirements of both statutes, even if that requires greater formality in obtaining a consumer’s credit records.”

First Student complained that because the ICRAA and CCRAA cover the same subject matter, it was unclear which statute applied in the context of employment background checks. But the court disagreed. Connor’s report, for example, fell within the scope of both statutes and “such a duality does not make legal compliance particularly difficult, must less impossible,” the court said.

“Any partial overlap between the statutes does not render one superfluous or unconstitutionally vague,” the court wrote. “They can coexist because both acts are sufficiently clear and each act regulates information that the other does not.”

The California Supreme Court opinion was a loss for First Student and the ICRA, as the court found the defendants had no excuse for not complying with both statutes. For employers more generally, the decision sends an important message: compliance with the requirements of both ICRAA and CCRAA is mandatory, even where the two statutes overlap.

Amendment to San Francisco’s Fair Chance Ordinance goes into effect October 1, 2018

In April 2018, the San Francisco Board of Supervisors passed an amendment to the Fair Chance Ordinance (FCO), which takes effect on October 1, 2018. The full text of the amendment can be found here.

The FCO notice/poster has also been updated and can be accessed here. Employers must provide this notice to applicants and employees prior to conducting a criminal background check, and post it in English, Spanish, Chinese, and any other language is spoken by at least 5% of the employees at the workplace or job site.

New FCRA Summary of Rights

 

Effective September 21, 2018, section 605A(i) of the Fair Credit Reporting Act (FCRA), added by the Economic Growth, Regulatory Relief, and Consumer Protection Act requires that a new notice (which explains consumer rights about placing fraud alerts and credit freezes with nationwide consumer reporting agencies (NCRAs)) be included whenever a consumer is required to receive a summary of rights under FCRA’s section 609. Although the new notice requirement is aimed at NCRAs and potentially consumer reporting agencies, the Consumer Financial Protection Bureau published a revised “FCRA Summary of Rights” form on September 13, 2018 (which includes the new notice and updates certain contact information) and the conservative approach for employers is to use the new form also.

The new version of the “FCRA Summary of Rights” form can be accessed HERE.

Go to Top