{"id":2531,"date":"2010-04-08T20:33:05","date_gmt":"2010-04-09T00:33:05","guid":{"rendered":"http:\/\/rbachnet.wwwmi3-ss40.a2hosted.com\/?p=2531"},"modified":"2022-12-30T12:47:45","modified_gmt":"2022-12-30T17:47:45","slug":"update-email-policy","status":"publish","type":"post","link":"https:\/\/rbach.net\/index.php\/update-email-policy\/","title":{"rendered":"Update Email Policy"},"content":{"rendered":"<p><a href=\"https:\/\/web.archive.org\/web\/20131101233240\/http:\/\/www.lawtonps.org:80\/schools\/sullivanvillage\/contact.html\" target=\"_blank\" rel=\"noopener noreferrer\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignleft wp-image-97717\" title=\"Update Email Policy\" src=\"https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/email.png?resize=125%2C112&#038;ssl=1\" alt=\"Update Email Policy\" width=\"125\" height=\"112\" srcset=\"https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/email.png?resize=150%2C135&amp;ssl=1 150w, https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/email.png?resize=75%2C67&amp;ssl=1 75w, https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/email.png?resize=768%2C690&amp;ssl=1 768w, https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/email.png?resize=1024%2C920&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/email.png?w=1130&amp;ssl=1 1130w, https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/email.png?w=960&amp;ssl=1 960w\" sizes=\"auto, (max-width: 125px) 100vw, 125px\" \/><\/a>A court case coming out of New Jersey could impact most firms\u2019 privacy and security practices according to an <a href=\"https:\/\/web.archive.org\/web\/20100612024204\/http:\/\/www.darkreading.com:80\/insiderthreat\/security\/privacy\/showArticle.jhtml?articleID=224201355\" target=\"_blank\" rel=\"noopener noreferrer\">article<\/a> on <em><a title=\"DarkReading\" href=\"https:\/\/www.darkreading.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">DarkReading<\/a><\/em>. The New Jersey Supreme Court recently ruled in <a href=\"https:\/\/caselaw.findlaw.com\/nj-supreme-court\/1522648.html\" target=\"_blank\" rel=\"noopener noreferrer\">Stengart v. Loving Care Agency, Inc.<\/a>, 408 N.J.Super. 54, 973 A.2d 390 (Superior Ct., A.D. 2009) that an <strong>employer can not read email messages sent via a third-party email service provider, even if the emails are accessed during work hours from a company PC<\/strong>.<\/p>\n<p>The court found the company&#8217;s policy on email use to be <strong>vague<\/strong>, noting it allows &#8220;<strong>occasional personal use<\/strong>.&#8221; &#8220;The policy does not address personal accounts at all,&#8221; the decision said. &#8220;The policy does not warn employees that the contents of such emails are stored on a hard drive and can be forensically retrieved.&#8221;<\/p>\n<p>The ruling written by Chief Justice Stuart Rabner in part states that the employee could, &#8220;<em>reasonably expect that emails she exchanged with her attorney on her personal, password-protected, <a title=\"Webmail\" href=\"http:\/\/en.wikipedia.org\/wiki\/Webmail\" target=\"_blank\" rel=\"noopener wikipedia noreferrer\">web-based email<\/a> account, accessed on a company laptop, would remain private.<\/em>\u201d Rabner continues that the employee, \u201c<em>Plainly took steps to protect the privacy of those emails and shield them from her employer. She used a personal, password protected email account instead of her company email address and did not save the account&#8217;s password on her computer.<\/em>\u201d<\/p>\n<p>The law firm of <a href=\"http:\/\/www.jacksonlewis.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">Jackson Lewis<\/a> provides a <a href=\"http:\/\/web.archive.org\/web\/20130404202912\/http:\/\/www.workplaceprivacyreport.com\/2010\/03\/articles\/workplace-privacy\/new-jersey-supreme-court-rules-on-personal-email-privacy-stengart-v-loving-care\/\" target=\"_blank\" rel=\"noopener noreferrer\">legal overview <\/a>of the case on their blog, <a href=\"http:\/\/www.workplaceprivacyreport.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">The Workplace Privacy Data Management and Security Report<\/a> recommends that\u00a0<strong>employers consider modifying<\/strong> their existing electronic communication policies to include:<\/p>\n<ul>\n<li><strong>Clear notice<\/strong> that\u00a0personal, web-based emails accessed using company networks and stored on company networks or company computers can be monitored and reviewed by the company (of course, care should be taken here to avoid concerns under the <a title=\"Electronic Communications Privacy Act\" href=\"http:\/\/en.wikipedia.org\/wiki\/Electronic_Communications_Privacy_Act\" target=\"_blank\" rel=\"noopener wikipedia noreferrer\">Electronic Communications Privacy Act<\/a> and the <a title=\"Stored Communications Act\" href=\"http:\/\/en.wikipedia.org\/wiki\/Stored_Communications_Act\" target=\"_blank\" rel=\"noopener wikipedia noreferrer\">Stored Communications Act<\/a>);<\/li>\n<li>Definitions of the <strong>specific technologies and devices<\/strong> to which the policies apply;<\/li>\n<li>Warnings that web-based, personal e-mail can be stored on the hard drive of a computer and forensically accessed;<\/li>\n<li><strong>No ambiguities about personal use<\/strong>.<\/li>\n<\/ul>\n<p><strong><em>Rb-<\/em><\/strong><\/p>\n<p><em>I am no lawyer, be sure to consult your attorney about this and all legal issues, in my opinion, this ruling is new law-making. The new laws are applicable only in New Jersey for now. However, unless the <a title=\"Supreme Court of the United States\" href=\"http:\/\/www.supremecourt.gov\/\" target=\"_blank\" rel=\"homepage noopener noreferrer\">U.S. Supreme Court<\/a> overturns this new law it will be the starting point for all other ligation. Firms should begin reviewing and updating their technology policies to protect themselves from this new law.<\/em><\/p>\n<p><em>An interpretation of the ruling suggests that employees have to be specifically warned that it is possible to forensically retrieve data from the firm&#8217;s computers. In this ruling, the Court found, &#8220;the Policy does not warn that the contents of personal, web-based e-mails are stored on a hard drive and can be forensically retrieved and read.&#8221;<\/em><\/p>\n<p><em>Sounds like another shot in the arm for the content filtering firms.<br \/>\n<\/em><\/p>\n<p><strong>Related articles<\/strong><\/p>\n<ul>\n<li><a href=\"http:\/\/www.dailykos.com\/storyonly\/2010\/5\/8\/864187\/-Your-Email-Is-Not-Private-(On-One-Side-of-the-Hudson)\" target=\"_blank\" rel=\"noopener noreferrer\">Your Email Is Not Private (On One Side of the Hudson)<\/a> (dailykos.com)<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p style=\"text-align: left;\"><em><a href=\"https:\/\/wp.me\/P2wgaW-3H\" target=\"_blank\" rel=\"noopener noreferrer\">Ralph Bach<\/a>\u00a0has been in IT long enough to know better and has blogged from his\u00a0<a href=\"https:\/\/rbach.net\/\" target=\"_blank\" rel=\"noopener noreferrer\">Bach Seat<\/a> about IT, careers, and anything else that catches his attention since 2005. You can follow him on <a href=\"https:\/\/www.linkedin.com\/in\/rb48334\/\" target=\"_blank\" rel=\"noopener noreferrer\">LinkedIn<\/a>,\u00a0<a href=\"https:\/\/www.facebook.com\/ralph.bach.14\" target=\"_blank\" rel=\"noopener noreferrer\">Facebook<\/a>,\u00a0and\u00a0<a href=\"https:\/\/twitter.com\/rbach48334\" target=\"_blank\" rel=\"noopener noreferrer\">Twitter<\/a>. Email the Bach Seat\u00a0<a href=\"mailto:\/\/bach.seat@gmail.com\" target=\"_blank\" rel=\"noopener noreferrer\">here<\/a>.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>NJ court ruled that employers cannot read emails sent via a third-party email service even if the emails are accessed during work hours from a company PC<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[55],"tags":[3240,1819,1994,171,83,55,116,1995,4],"class_list":["post-2531","post","type-post","status-publish","format-standard","hentry","category-legal","tag-3240","tag-computer","tag-electronic-communications-privacy-act","tag-email","tag-forensics","tag-legal","tag-policy","tag-scotus","tag-security"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/posts\/2531","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/comments?post=2531"}],"version-history":[{"count":11,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/posts\/2531\/revisions"}],"predecessor-version":[{"id":132109,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/posts\/2531\/revisions\/132109"}],"wp:attachment":[{"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/media?parent=2531"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/categories?post=2531"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/tags?post=2531"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}