Employer demands Facebook login credentials during interview

By | February 20, 2011, 11:58am PST

Summary: Officer Robert Collins tells the story of how the Maryland Division of Corrections demanded his Facebook login credentials during a recertification interview.

The American Civil Liberties Union (ACLU) has taken up the cause of Officer Robert Collins, a Maryland man who was forced to hand over his Facebook login credentials during a recertification interview with the Maryland Division of Corrections (DOC). Collins took the time to describe what happened in his specific case in a video on YouTube.

On January 25, the ACLU of Maryland sent a letter (PDF) to Public Safety Secretary Gary Maynard on behalf of Collins, concerning the DOC’s blanket requirement that applicants for employment, as well as current employees undergoing recertification, provide the government with their social network account usernames and passwords for use in employee background checks. It has been three weeks, and they have still not heard back.

“The demand for Facebook login information is not only a gross breach of privacy for Officer Collins and his friends, it raises significant legal concerns under the Federal Stored Communications Act and Maryland state law, which protect privacy rights and extend protections to electronic communications,” an ACLU spokesperson said in a statement. “As many of us begin to rely on sites like Facebook to stay connected to our friends and family, it’s important for employers and the government to keep in mind that, for most users, Facebook is a medium for private communications.”

It’s important to note that this is not equivalent to checking what a job applicant has posted publicly on the Internet. Collins emphasized that his Facebook account has the highest privacy settings employed, meaning that all of his messages are private. This is more like the government agency going through his personal mail.

“I was subjected to a customary usual background investigation,” Collins said. “What was not customary usual was a request or to me, rather a demand, which was the insinuation for my Facebook e-mail and login information, my personal login information. Here I am, a US citizen who hasn’t broken any laws, who hasn’t committed any crime, and I have an employer looking at my personal communications, my personal posts, my personal my pictures, you know looking at my personally identifiable information… you know, where my religious, my political beliefs, my sexuality; all of these things are possibly disclosed on this page. It’s an absolute total invasion, and an overreach, and overstep of their power.”

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Emil Protalinski has covered the tech industry for five years for multiple publications.

Disclosure

Emil Protalinski

Emil has nothing to disclose.

Biography

Emil Protalinski

Emil Protalinski has covered the tech industry for five years for multiple publications, including Neowin for two years and Ars Technica for three years. He has written 1,000s of articles for both, with a particular focus on scrutinizing Microsoft products and services. Recently, Emil has expanded his coverage to non-Microsoft technologies, including the social networking giant Facebook.

39
Comments

Join the conversation!

Just In

A Case I know that backfired with one incident
wpreece 23rd Apr
A friend of told me her husband when they were in Tenn last year caught wind of a post on Facebook that out of work on personal time a supposed friend posted something cause her husband denied him a promotion on Facebook. So her husband had the IT dept give him the guy's Facebook login information. He logged in and began reading messages besides posted ones and then fired the guy. Mainly cause her husband was abusing his position they guy was putting him down and exposing things.

Well after he fired the guy so many employees no longer trusted her husband so much he feared his job was on the line and then had to call a friend of his in Wisconsin to look for a new job because of how much of a control freak her husband was and back stabbed someone no one likes hims so much they protested to the company's owner. Thus by pushing things her husband caused them to have to move...

Now whats worse was the person her husband befriended posted photos him and her husband at a company function cause her husband told him to post them during company hours entrapping him to login on company network and then pushed his power... Of course the move caused other issues but this is what I mean its worse and it can backfire...
0 Votes
+ -
This is likely to be an interesting case. Facebook accounts are highly likely to disclose information that answers questions that are prohibited in an employment interview (e.g., sexual orientation, marital status, religion, political beliefs, ethnicity), as well as other extremely private information about the account holder, as well as acquaintances of the account holder. Thus, there is also a question of third party disclosure.

Similar questions need to be raised in other contexts, including those involving jurors, where the audience is broader, and the protections are potentially murkier. The problem is also broader than any individual social networking site. What about other sites, dating sites, community fora, religious institutions?

I discussed some of these questions in "Colliding Worlds: Juries in the World of Pervasive Connectivity and Social Media", accessible at: http://www.rlgsc.com/blog/ruminations/colliding-worlds-juries-connectivity.html

I had similarly discussed some of the issues surrounding micro-blogging and its disclosure of information in: "Micro-blogging and Personal Self-Surveillance" at http://www.rlgsc.com/blog/ruminations/micro-blogging-and-personal-information.html

- Bob Gezelter, http://www.rlgsc.com
0 Votes
+ -
www.retardedemployer.com
143love 20th Feb 2011
i'm sorry but i would tell this employer to go jump of the golden gate bridge and get eaten by a shark in the pacific to be specific.
0 Votes
+ -
@143love So you believe the answer is to give up your source of income? (The guy was already an employee.) Yeah, that'll solve everything.

Remember, Maryland is the same state that decided it was appropriate to invade the home of a MD Air National Guardsman because he posted video of a traffic stop on YouTube. Maryland's views of personal rights correlate pretty closely to some governments of the late 1930's.

http://www.washingtonpost.com/wp-dyn/content/article/2010/06/15/AR2010061505556.html
0 Votes
+ -
@ejhonda ; agreed--demanding that an employee give up private information for a "fishing expedition" with his livelihood on the line is nothing less than blackmail. I once applied for a job in which I was told on the application that I could be expected to answer about anything and everything (was never called for an interview, so I didn't have to face that matter)--and that would have been bad enough. But to demand that of an employee in good standing is criminal.
I am ashamed today to state that I was born in Maryland.
1 Vote
+ -
@ejhonda ; I have just submitted a complaint to the Governor of Maryland concerning this matter. The URL for contacting the Governor's Office is http://www.governor.maryland.gov/mail/ .
0 Votes
+ -
Illegal request
wackoae 20th Feb 2011
Getting info form publicly open data or via a search warrant is one thing, demanding the password in exchage of employment is another ..... and totally illegal.

Before the can view the data, they must legally obtain the consent of every single person on the friends list not just the employee. Since access to private data, photos and info was given only to the account holder, not some random person. Access by any other person (without a warrant) constitute a violation of privacy laws and possibly illegal wiretapping laws.
1 Vote
+ -
RE: Employer demands Facebook login credentials
Pete "athynz" Athens 20th Feb 2011
I know jobs are scarce but I'd have told that particular interviewer where he can shove his illegal request for the login credentials to any of my personal accounts or even business account.
-6 Votes
+ -
hottest fashions for your spring
justkoko 20th Feb 2011 Below threshold | Show anyway
http://www.yahoofashion.net/

50% Discount fashion :Sandle,t-shirt,caps,jerseys,handbag and brand watches!!!
$30 Air Jordan shoes,shox,tn,LV shoes
$33 True Religion jeans, Ed Hardy jeans,LV,Affliction jeans
$15 Ed Hardy ,LV ,Bikini
$15 Polo, Ed Hardy, LV, Lacoste T-shirts
$25 Coach,LV,Prada,Juicy,Chanel handbag,
$10 Ed Hardy sunglasses
$9 New Era caps.
lol
1 Vote
+ -
RE: Employer demands Facebook login credentials
alsobannedfromzdnet 20th Feb 2011
Disable the account, in all honesty tell them you don't have an active account, reenable it again.

There'd be nothing they could do.
0 Votes
+ -
@alsobannedfromzdnet Indeed, you can either temporarily disable account or have two created with different email addresses - one of them nearly empty.

Also, maybe this is an area where Diaspora with its aspects can bring something innovative?

http://facebook.com/inlevelNet
0 Votes
+ -
I agree with alsobannedfromzdnet - disable the account. Let the employer do a regular background check. Take action -https://secure.aclu.org/site/Advocacy?cmd=display&page=UserAction&id=2824 by telling Maynard to stop snooping private profiles and get a life! What he is doing is illegal according to the Federal Stored Communications Act. http://www.law.cornell.edu/uscode/18/2701.html
0 Votes
+ -
Against Facebook's terms of use
cominvent 21st Feb 2011
See http://www.facebook.com/terms.php ?4.8: "You will not share your password, (or in the case of developers, your secret key), let anyone else access your account, or do anything else that might jeopardize the security of your account."

So that settles it I guess happy
0 Votes
+ -
Time for a New Business Model
nucrash 21st Feb 2011
I feel now would be an ideal time to spend creating false and promising Facebook accounts to sell to the highest bidder. They be fresh from the start and push the idea of getting the "Proper" friends. For instance, if you know your employer is a conservative, you can be friends with "Sarah Palin" and "Bill O'Riley"
0 Votes
+ -
The City of Bozeman, Montana tried to implement a similar policy in the summer of 2009. The policy last less than 24 hours because of the national backlash they received. Here's a link to one of the stories about it, on Mashable. com: http://mashable.com/2009/09/03.../.

Last fall I wrote a white paper on the subject of "social screening," which relates to this post. It's called, "Social Screening: Employees - and Organizations - Beware." It can be accessed via http://tiny.cc/SocialScreening.... I wrote a follow-up blog post entitled, "Social Screening: The Expanded Discussion," which can be accessed via http://tiny.cc/SocialScreening....

Finding the right approach to social media policies is critically important, and many organizations are guilty of overreaching. A couple of weeks ago, for example, the NLRB settled its "Facebook case" with an employer (AMR), and one of key terms of the settlement was that the employer agreed to revise its "overbroad" policy. I wrote about this case both when the complaint was filed and after it was settled. Here are links to each piece: http://tiny.cc/SMinOrgsNLRBpos... and http://tiny.cc/SMinOrgsNLRBset....

This week I'll be publishing a post on social media policies that addresses the issue in a more holistic way. This is an important issue that requires a thoughtful, balanced approach.

Courtney Hunt
Founder, Social Media in Organizations (SMinOrgs) Community
0 Votes
+ -
At least they bothered to ask him for it
terry flores 21st Feb 2011
instead of paying some contractor to hack his account without him knowing about it. There are people and companies out there who offer these as part of their "research" services. It's just not printed on their normal list of services ...
0 Votes
+ -
Just more proof...
sissy sue Updated - 22nd Feb 2011
...that Americans are wage slaves. Your employer owns you. This is a logical consequence to the way in which employees have been treated since 1980.

The American worker needs to assert his rights. Your employer has no prerogative to own you 24/7. Our grandparents and great-great grandparents struggled and died to bring dignity to the workplace, but we have thrown that all away. I'm sure leaders in business and government would like all of us old folk to die off so that the young'uns won't remember that, once upon a time, the American worker was treated like a human being.
0 Votes
+ -
He ha simple given over his password. Proff you are just trying to stand on a soapbox with nothing of value?
0 Votes
+ -
And what value...
sissy sue Updated - 12th Mar
...have you added to this discussion, other than sloppy writing?
0 Votes
+ -
Hmmmm
Gis Bun 22nd Feb 2011
Asking if you have a Facebook account [to see how you are] is one thing, but the credentials?

If the state wasn't so lazy, they can easily find out about you.
0 Votes
+ -
Ignorant legislators
kidtree Updated - 22nd Feb 2011
Sounds like the employer (DOC) was trying to obey a new law written by ignorant legislators. It might be almost reasonable to demand to see an employee's Facebook page. Corrections officers hold power over inmates that could easily lead to corruption and abuse; comments on Facebook might reveal a pattern of abuse of inmates or cover-up of wrongdoing.
But to demand the complete login credentials is to demand access to his online identity, not to merely monitor it, but to pose as the employee, posting anything in his name.
I think clueless legislators wrote a law that went far beyond what they intended. Using an old-fashioned snail mail analogy, they wanted to open his mail, but wrote a law allowing the employer to forge letters in the employee's name.
Or maybe they really did intend that, and they're all stupid and/or corrupt. The answer to that one will be revealed when a reasonable amount of time has passed to rescind the law.
0 Votes
+ -
This story has generated a mini media firestorm in the past week. I have been sharing my thoughts on various articles and blog posts, and I finally decided to write my own reflection as well. Here?s a link to it: http://tiny.cc/4hkbu. One underreported ?fact? I learned in doing a little additional research is that a representative from Maryland?s DPSCS says they do not have a policy that requires job candidates to provide login information, so the case may not be as clear-cut as it seems. It will be interesting to see how this case finally gets resolved?

Courtney Hunt
Founder, Social Media in Organizations (SMinOrgs) Community
0 Votes
+ -
This is an invasion of privacy of not only the emplyee but of anyone else that has sent personal messages to him. I could understand if they had a page on facebook and asked him to allow them to view anything available to the public through that page. Or they could do a search for him and see what is available to the public. This is abuse of employees and coercion.
I also desire to signal in your RSS feeds. Thank you as soon as once again and maintain up the great operate! nccma cooler
I used to be more than happy to seek out this internet-site.I wanted to thanks in your time for this glorious read!! I positively enjoying each little bit of it and I have you bookmarked to check out new stuff you weblog post. this thread is amazing i like your work and i appreciate you that you have share a useful stuff thanks for sharing the i shop abatwa
I used to be more than happy to seek out this internet-site.I wanted to thanks in your time for this glorious read!! I positively enjoying each little bit of it and I have you bookmarked to check out new stuff you weblog post.Bookmarking now thanks please consider a follow up post. power sa shop
I think the representation of this article is actually superb one. This is my first visit to your site. Thanks a lot and keep sharing the information. Keep updating the information for all of us. Thanks ZDNet Government was launched as the brand's first industry vertical, with a mission to cater to IT professionals in the public secto I agree with your post. However, do you have any sources I can cite for my paper wheel car com bury
Well welcome, hopefully you can become a vital member of the community and really help to push far ahead of google. Which Im sure the development team would love. This will of course earn you alot points too and get you on the leaders board. z d n e t t h a n k Im not sure i come to an agreement with you on every level, howevor it absolutely was a good posting, many thanks for taking the time to put up your ideas.
Thanks nice info z d n e t I really liked your current article write more..let me add you to its favorite
I really enjoyed reading this post !!!have bookmarked w e b s will come back to read more.
Fantastic news about the new release.I positively enjoying each little bit of it and I have you b o o k m a r k e d to check out new stuff you weblog post.Im not sure i come to an agreement with you on every level, howevor it absolutely was a good posting, many thanks for taking the time to put up your ideas
-1 Votes
+ -
RE: Employer demands Facebook login credentials
jackson1984-24316069205748857739440257893812 10th Oct
I've to thanks nfl jerseys 2012 for this epic web-site .I unquestionably liked each and every specific fairly small little bit of it. I've you bookmarked your environment large website to find out about the present things you design.
Good day to confirm this comment I would appreciate T h e b e s t o f Z D N e t d e l i v e r e d your website very nice to everyone Yes, Oracle is the only one with shared-disk architecture, but that is there advantage. It means you can add or remove nodes and the database lives on. In a shared nothing architecture, if you lose a node, you lose the system. I'm sure Oracle appreciates EMC highlighting their advantage.I also desire to signal in your RSS feeds. Thank you as soon as once again and maintain up the great operate Awesome post! Thank you very much || thanks for nice content this is really benefit to me.
1 Vote
+ -
Welcome to the year 2112
kcredden2 6th Mar
The great global corporateology dictatorship has taken over all governments, and no one has rights except for what they give you.

I thought that when I read "and I have an employer looking at my personal communications, my personal posts, my personal my pictures, you know looking at my personally identifiable information??? you know, where my religious, my political beliefs, my sexuality; all of these things are possibly disclosed on this page. It???s an absolute total invasion, and an overreach, and overstep of their power.???

But seriously. Why is it, people think they must stick their most intimate information on the net, and think that by turning on privacy settings, no one will find out? If you want someone to know your hetro, gay, or anything else. Talk to them, and let them know. Let me give you $.05 worth of advice. If someone wants something bad enough on the net, they'll get it.

I started on the net 20+ years ago, and I knew then, you don't just let it all hang out. I suspected too that nothing would dissipater. My policy is simple. I don't let anything on the net, that can benefit advertisers. So my religious views, political, etc. All false. If a site ask or insists I give them an e-mail address to download a program. They get a spam e-mail address. One that's only used IF I need too, which is very rarely.
0 Votes
+ -
back at them
cnet@... 11th Mar
I would give this information after they give me a written letter including information on how they secure my information from FOIA requests or similar; how they secure my info, how they will review it, wht amount of compensation they will give me if it is revealed, and things of that sort. Sure, let them have it, but make them pay hell.
0 Votes
+ -
Warrant?
sip01 12th Mar
Oh, thus be it ever, when freemen shall stand
Between their loved home and the war's desolation!
Blest with victory and peace, may the heav'n-rescued land
Praise the Power that hath made and preserved us a nation!
Then conquer we must, when our cause it is just,
And this be our motto: "In God is our trust":
And the star-spangled banner in triumph shall wave
O'er the land of the free and the home of the brave.
Or else just feign ignorance of actually having a facebook account in the first place.
0 Votes
+ -
Unfortunately its like the lines in Hotel California Relax says the night man we are programed to receive you can check out anytime you like but you can't never leave...
0 Votes
+ -
There's worse to come...
wpreece 23rd Apr
The biggest problem with this is beyond just Facebook. With all sites having the logins saying forgot your password use your twitter or Facebook login... Meaning to much in linked already and once an employer gets this its just the beginning of profiling and invasion of privacy and they can use that to destroy peoples lives worse when they want to layoff or fire others or a boss might feel he's in jeopardy to be found out how he abuses his position or power with a company...

Next they can indeed get more and more as people link their data to other locations. Not to mention you got the check in's on most mobile phones broadcasting like a beacon where you are... What's next oh they are on vacation lets hire a lock smith and search their homes while they are out of town cause we know by Facebook it says they are not home cause of where they checked in...

Where's the stop sign and why did our elected officials refuse a short time ago to pass protection for us? It's bad enough you got things like time line on Facebook even though they said they were for protecting your login they dont have issues with selling your data and using timeline as a profile tool..
A friend of told me her husband when they were in Tenn last year caught wind of a post on Facebook that out of work on personal time a supposed friend posted something cause her husband denied him a promotion on Facebook. So her husband had the IT dept give him the guy's Facebook login information. He logged in and began reading messages besides posted ones and then fired the guy. Mainly cause her husband was abusing his position they guy was putting him down and exposing things.

Well after he fired the guy so many employees no longer trusted her husband so much he feared his job was on the line and then had to call a friend of his in Wisconsin to look for a new job because of how much of a control freak her husband was and back stabbed someone no one likes hims so much they protested to the company's owner. Thus by pushing things her husband caused them to have to move...

Now whats worse was the person her husband befriended posted photos him and her husband at a company function cause her husband told him to post them during company hours entrapping him to login on company network and then pushed his power... Of course the move caused other issues but this is what I mean its worse and it can backfire...

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix