SHRM Connect is an online community where SHRM members can ask questions and get answers on a variety of HR topics. It’s a great place to network with other HR professionals and share solutions. The conversation topics range from “HR Department of One” to Employment Law, are always insightful, and deal with some of the most pressing issues that HR professionals face in the workplace today.
On Fridays, I’ll be highlighting a conversation or two in hopes that you’ll take some time to visit. You may want to "lurk"… perhaps respond, but you’ll always learn something. It’s a great community and I highly recommend that you check it out.
With so much in the news lately about the recent hacking at Equifax and other cases of identity theft, HR needs to pay close attention to protecting employee data. In the SHRM Online News article, Equifax Breach Raises Concerns About Employees’ Personal Data, SHRM Editor Allen Smith says, “Equifax isn't the only entity with sensitive data, this is a reminder for employers to shore up their safeguards for employees' personal information, which may mean instituting employee training."
But what should you do when an employee is openly taking client information from your company’s computer system?
In the Employment Law group, a SHRM member writes:
Subject: EMPLOYEE TAKING CLIENT INFORMATION FROM COMPUTER SYSTEM. NEED HELP ASAP.
We have a cosmetologist who was caught (and admitted to) taking client information from the company computer system. She says she has every right to take information on the clients she has done services on. I am in Iowa. Is this legal?
SHRM members can read/respond to this thread here.