Employers with 100 or more employees take note: a major new reporting requirement may be coming your way next year.

On January 29, 2016, President Obama announced that beginning in September 2017, employers  with 100 or more employees must report the earnings and hours worked for all of their employees.  That’s right.  Employers must disclose compensation information for all employees, including executives – which many employers consider to be highly confidential – to the EEOC.

Employers will be required to disclose this compensation data as a new category on the EEO-1 report, which employers already provide to the federal government and which contains workforce data sorted by race, ethnicity, gender, and job category.  Specifically, the “revised EEO-1 will collect aggregate W-2 data in 12 pay bands for the 10 EEO-1 job categories” already used.  The EEOC noted that it does not intend to require employers to track hours worked by salaried employees, but that it is seeking input on the issue.Continue Reading EEOC Promotes Gender Equality by Imposing Another Burden on Employers

Earlier this month, a federal judge in San Francisco sentenced David Nosal to a year in prison, three years’ supervised release, 400 hours of community service, and $60,000 in fines. His crime? Nosal violated the Computer Fraud and Abuse Act (“CFAA”), among other federal statutes, when he departed from his former employer with a stash of its most sensitive business data.

Employment law doesn’t normally develop in criminal courtrooms, but Nosal’s case is an important exception. The outcome of his pending appeal to the 9th Circuit will almost certainly offer important guidance for employers on how best to prevent and, where necessary, remedy employee data theft. It’ll likely reinforce a familiar lesson: employers should craft their employee technology policies with an eye toward the law of data security. A well-developed IT infrastructure can give an employer substantial legal advantages and lead to better outcomes when employee data theft occurs.

What Is The CFAA?

To understand the practical importance of Nosal’s case, employers should first understand how the CFAA can apply to departing employees who steal company data. Congress passed the CFAA in 1986 – before the advent of most modern information technology – to combat computer hacking. The CFAA makes it a federal offense to obtain information or perpetrate a fraud either by (a) accessing a computer “without authorization,” or (b) by “exceed[ing] authorized access” on any such computer. In addition to its criminal penalties, the CFAA creates a parallel civil cause of action for hacking victims.Continue Reading David Nosal, Employee Data Theft, and Why Employment Lawyers Should Understand Their Clients’ IT Infrastructure