Home > Resources > HR compliance > Employee privacy > New York workplace privacy laws: HR compliance guide
Software project

New York workplace privacy laws: HR compliance guide

This guide highlights key aspects of New York law affecting privacy in the workplace, including electronic and video surveillance, background checks and medical examinations, drug testing, employee records, off‑duty conduct, social media privacy, and data protection obligations.

Share this:

by Jason Habinsky, Haynes & Boone

Managing employee privacy in New York demands careful attention to one of the most complex and heavily regulated legal landscapes in the US. This guide highlights the key aspects of New York law that impact privacy in the workplace, equipping HR professionals, employers and people managers with the knowledge needed to monitor, manage and protect employee information lawfully and transparently.

Designed for HR, compliance and risk‑aware organisations, this guide addresses when and why employers may monitor employees, including rules on electronic monitoring, video surveillance and workplace searches. It also covers background checks and “ban the box” requirements, medical and genetic testing, cannabis considerations, and extensive obligations around employee records, data security and privacy disclosures.

With additional focus on lawful non‑work activities, employee social media privacy and New York‑specific requirements—including New York City biometric data rules—this guide helps organisations reduce compliance risk while maintaining trust and best‑practice workforce management.

In this guide, learn about:

  • Why monitor
  • Electronic monitoring of employees
  • Video surveillance of employees
  • Workplace searches
  • Background checks of employees
  • Ban the box
  • Medical examinationsDrug testing
  • Genetic testing
  • Cannabis
  • Employee records
    • Disclosure of employee personnel records
    • New York Fair Credit Reporting Act
    • Personal Privacy Protection Law
    • Social Security number protections
    • Amendments to Social Security Number Protection Law
    • Information Security Breach and Notification Act
    • Disposal of personal records law
    • Disclosure of employee medical records
  • Legal non-work activities
  • Employee social media privacy
    • Employee coverage
    • Definitions
    • Exceptions
  • Local requirements
    • New York City biometric identifier information
  • Future developments

Want to see more?

For full access to Employee privacy: New York, sign up for an HR and Compliance Center subscription today.

Jurisdiction: New York

Latest updates

Updated to reflect the New York privacy law prohibiting employers from requesting access information for employee and applicant social media accounts, effective March 12, 2024.

Get ahead of HR compliance

Navigating today’s complex HR compliance landscape is challenging.

Get ahead with Brightmine. Access HR resources and automation tools managed by seasoned human HR experts.

Proudly partnered with LexisNexis®

You may also be interested in…

Commentary and Insights

Ask our experts: Preparing for EEO-1 reporting

Preparing for EEO‑1 reporting? Our experts answer common questions on race and ethnicity data collection, reporting changes, and …

HR law guides

Kentucky workplace privacy laws: HR compliance guide

This guide highlights key aspects of Kentucky law affecting privacy in the workplace, including employee monitoring and electronic …

Guides – How to

Building a strong employee privacy strategy: policies, compliance & risks

Discover how to balance employee monitoring with privacy rights, comply with federal laws, and build transparent HR policies …

About the author

Sign up to receive expert HR insights from Brightmine

Join our community and stay updated with industry trends, expert insights, valuable resources, webinar invites… and much more.

Sign up now and receive regular updates straight to your inbox!

    *Brightmine is a tradename of LexisNexis Risk Solutions. By registering your details, you understand that your personal data will be handled according to our Privacy Policy.