Home > Resources > HR compliance > Employee privacy > New York workplace privacy laws: HR compliance guide
Software project

New York workplace privacy laws: HR compliance guide

This guide highlights key aspects of New York law affecting privacy in the workplace, including electronic and video surveillance, background checks and medical examinations, drug testing, employee records, off‑duty conduct, social media privacy, and data protection obligations.

Share this:

by Jason Habinsky, Haynes & Boone

Managing employee privacy in New York demands careful attention to one of the most complex and heavily regulated legal landscapes in the US. This guide highlights the key aspects of New York law that impact privacy in the workplace, equipping HR professionals, employers and people managers with the knowledge needed to monitor, manage and protect employee information lawfully and transparently.

Designed for HR, compliance and risk‑aware organisations, this guide addresses when and why employers may monitor employees, including rules on electronic monitoring, video surveillance and workplace searches. It also covers background checks and “ban the box” requirements, medical and genetic testing, cannabis considerations, and extensive obligations around employee records, data security and privacy disclosures.

With additional focus on lawful non‑work activities, employee social media privacy and New York‑specific requirements—including New York City biometric data rules—this guide helps organisations reduce compliance risk while maintaining trust and best‑practice workforce management.

In this guide, learn about:

  • Why monitor
  • Electronic monitoring of employees
  • Video surveillance of employees
  • Workplace searches
  • Background checks of employees
  • Ban the box
  • Medical examinationsDrug testing
  • Genetic testing
  • Cannabis
  • Employee records
    • Disclosure of employee personnel records
    • New York Fair Credit Reporting Act
    • Personal Privacy Protection Law
    • Social Security number protections
    • Amendments to Social Security Number Protection Law
    • Information Security Breach and Notification Act
    • Disposal of personal records law
    • Disclosure of employee medical records
  • Legal non-work activities
  • Employee social media privacy
    • Employee coverage
    • Definitions
    • Exceptions
  • Local requirements
    • New York City biometric identifier information
  • Future developments

Want to see more?

For full access to Employee privacy: New York, sign up for an HR and Compliance Center subscription today.

Jurisdiction: New York

Latest updates

Updated to reflect the New York privacy law prohibiting employers from requesting access information for employee and applicant social media accounts, effective March 12, 2024.

Get ahead of HR compliance

Navigating today’s complex HR compliance landscape is challenging.

Get ahead with Brightmine. Access HR resources and automation tools managed by seasoned human HR experts.

Proudly partnered with LexisNexis®

You may also be interested in…

HR law guides

Employee privacy laws in Indiana

Learn about Indiana employee privacy laws, including rules on background checks, medical and drug testing, electronic monitoring, data …

HR law guides

HR management: Illinois

This guide provides an overview of Illinois law regarding employee access to personnel records, including employee rights to …

Commentary and Insights

Ask our experts: Preparing for EEO-1 reporting

Preparing for EEO‑1 reporting? Our experts answer common questions on race and ethnicity data collection, reporting changes, and …

About the author

Sign up to receive expert HR insights from Brightmine

Join our community and stay updated with industry trends, expert insights, valuable resources, webinar invites… and much more.

Sign up now and receive regular updates straight to your inbox!

    LNRS Data Services Limited and its affiliates may contact you about relevant solutions, services, events and industry insights. You can opt-out via the unsubscribe link in the communications that you receive or by contacting us.