The law is available at http://www.cga.ct.gov/2011/ACT/PA/2011PA-00223-R00SB-00361-PA.htm. The most important part of the statute reads as follows:
No employer or employer's agent, representative or designee may require an employee or prospective employee to consent to a request for a credit report that contains information about the employee's or prospective employee's credit score, credit account balances, payment history, savings or checking account balances or savings or checking account numbers as a condition of employment unless
- such employer is a financial institution,
- such report is required by law,
- the employer reasonably believes that the employee has engaged in specific activity that constitutes a violation of the law related to the employee's employment, or
- such report is substantially related to the employee's current or potential job or the employer has a bona fide purpose for requesting or using information in the credit report that is substantially job-related and is disclosed in writing to the employee or applicant.
Generally, employment-purposes credit reports do not include credit scores, but do include information about credit account balances and payment history.
The statute defines “substantially related to the employee's current or potential job" as meaning that:
The information contained in the credit report is related to the position for which the employee or prospective employee who is the subject of the report is being evaluated because the position:
- Is a managerial position which involves setting the direction or control of a business, division, unit or an agency of a business;
- Involves access to customers', employees' or the employer's personal or financial information other than information customarily provided in a retail transaction;
- Involves a fiduciary responsibility to the employer, including, but not limited to, the authority to issue payments, collect debts, transfer money or enter into contracts;
- Provides an expense account or corporate debit or credit card;
- Provides access to (i) confidential or proprietary business information, or (ii) information, including a formula, pattern, compilation, program, device, method, technique, process or trade secret that: (I) Derives independent economic value, actual or potential, from not being generally known to, and not being readily ascertainable by proper means by, other persons who can obtain economic value from the disclosure or use of the information; and (II) is the subject of efforts that are reasonable under the circumstances to maintain its secrecy; or
- Involves access to the employer's nonfinancial assets valued at two thousand five dollars or more, including, but not limited to, museum and library collections and to prescription drugs and other pharmaceuticals.
Employers should be wary of literal reliance on part (F), since very few jobs have no access to assets valued at $2,005 or more. Employers may want to embrace a more cautious interpretation of “access” – that the access must be more than the access that a customer or the general public would have.
The statute provides for a civil penalty of $300 per violation.